Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c137c08-a37f-3773-8ae4-71adedf5ac03.roa
File:                     2c137c08-a37f-3773-8ae4-71adedf5ac03.roa (raw, json)
Hash identifier:          mHzmHtuLwpwnR0kbkOVOmQpUOl0DI6E1KpJFUeuXZZw=
Subject key identifier:   57:B9:E7:E5:8C:BD:32:5F:66:78:7E:41:09:54:88:2E:46:4D:FE:4C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDFCE1622A99845CCFB90
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c137c08-a37f-3773-8ae4-71adedf5ac03.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.151.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:df:ce:16:22:a9:98:45:cc:fb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=bcf67d0e-6414-41b4-bebd-f6dcf875ff7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:79:f8:30:61:1d:41:82:42:2e:6e:3a:43:
                    b4:b3:2f:5c:3e:e4:14:f4:ab:9a:8d:d8:d5:aa:2b:
                    6e:3c:01:68:ce:b2:7d:47:f6:7c:4d:34:ba:db:4a:
                    d9:fc:fc:08:7c:14:d1:44:90:6d:d0:cc:ab:ed:57:
                    a4:f4:d5:f9:f5:5b:4d:95:45:8a:a5:c0:7d:a7:0c:
                    d6:c6:5c:fd:02:87:58:41:ed:e7:b3:08:f6:ca:a3:
                    fa:af:d6:c0:39:e1:d3:17:98:4a:9f:8f:d0:2b:ed:
                    f8:eb:7b:83:eb:5a:d2:ef:30:bc:5d:93:f5:84:34:
                    77:44:74:32:c3:c0:29:74:da:b7:86:24:b5:5e:6d:
                    0d:9d:9a:bb:d1:63:12:c1:77:bb:21:94:b8:e6:55:
                    84:2d:0b:65:df:85:f4:f5:be:d4:b9:4d:ef:c7:bf:
                    c3:ea:10:b3:26:78:10:12:91:28:be:a9:52:12:cd:
                    ed:a9:68:26:9d:04:60:c0:71:e2:aa:fc:14:0b:f5:
                    1c:5c:39:82:95:06:53:56:da:53:b3:40:c5:f4:5e:
                    1b:67:56:8f:36:c9:bd:d8:cc:a5:f8:39:10:a3:4e:
                    60:c6:cc:ac:82:90:30:e3:62:5c:06:69:af:39:9a:
                    1a:55:bc:cc:5b:18:c3:0e:cc:78:d5:fd:59:71:3e:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:E7:E5:8C:BD:32:5F:66:78:7E:41:09:54:88:2E:46:4D:FE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c137c08-a37f-3773-8ae4-71adedf5ac03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.151.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f1:dd:bd:39:b0:9e:94:c9:85:09:cc:6f:ff:12:50:db:87:
         2d:e5:a9:5a:19:be:96:87:0c:14:53:de:45:69:1d:a7:47:6d:
         39:46:d2:a8:0c:0b:ce:fa:b1:58:f8:aa:2f:cf:c3:6a:84:1e:
         3d:ce:83:30:74:b9:b8:99:70:d9:c5:dd:ae:3a:f5:a3:ea:19:
         56:e9:d7:7c:83:90:93:b7:03:5c:d1:2f:23:13:8f:4c:65:cd:
         8b:f7:9f:ab:e1:80:95:b2:ff:da:43:48:ef:f8:73:17:34:23:
         59:da:ca:f5:4c:09:64:78:94:21:bc:81:a9:f8:13:93:50:58:
         52:7a:ff:ed:82:04:ec:87:59:65:35:43:8a:b0:99:f9:38:2b:
         84:db:a7:68:2d:a7:0b:74:4c:9d:a2:15:8e:80:74:3a:8c:10:
         13:38:c8:8b:e2:d6:da:8d:b2:62:f1:3f:c1:57:42:54:05:3d:
         ed:e2:f1:66:5f:bf:ee:29:f1:9e:a1:bd:7c:01:c6:7d:ee:48:
         0e:de:e5:79:b9:fa:1e:92:3d:af:41:43:24:71:e5:40:ea:6d:
         6f:7f:fb:f2:cd:e3:a8:c6:cf:09:3d:17:d0:69:48:3b:9a:3f:
         e3:38:78:b6:1a:56:22:e8:c2:9f:59:51:a8:c0:f3:05:66:0b:
         e0:70:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:54 2025 by rpki-client