Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c6afe82-c23b-35ed-a373-dd55948602c1.roa
File:                     2c6afe82-c23b-35ed-a373-dd55948602c1.roa (raw, json)
Hash identifier:          o1/3PIgZJTqrYhPBI7+yrNicHDq5Y62/nqXBULRoEJ0=
Subject key identifier:   E4:1E:44:C5:58:56:A1:7B:99:66:E9:2C:3A:75:0F:27:7B:4E:53:2C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D421D78A5433153573580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c6afe82-c23b-35ed-a373-dd55948602c1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.240.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:42:1d:78:a5:43:31:53:57:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=5eaf33ef-bc09-4e99-9545-880668ddc906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:a9:95:30:62:98:86:17:02:75:c1:ab:19:
                    b7:8f:e3:4a:5f:95:b7:20:5e:6c:95:67:d4:35:eb:
                    3e:2a:14:d2:9b:ae:c8:3d:0c:b9:20:82:b9:70:93:
                    58:ad:39:d5:55:43:26:de:55:4a:71:f4:d2:b4:bf:
                    db:92:2e:14:bb:73:fd:46:b9:f5:6d:fb:81:66:ae:
                    90:69:b8:c2:0f:ab:79:ba:a0:3d:07:57:c5:a5:5e:
                    78:6e:fd:05:9d:3d:71:f1:f7:f3:1b:13:65:1f:18:
                    37:b4:00:38:63:6e:99:0d:23:6f:13:59:28:52:6c:
                    5e:14:cc:b9:7f:22:4a:e7:99:2f:bf:0e:1d:77:8e:
                    71:a5:ae:4b:05:a1:1d:f8:20:5c:f3:02:c0:cc:61:
                    c1:25:44:ae:bd:8f:55:cd:d9:86:6d:6c:df:5f:0e:
                    d1:62:cb:87:23:c2:48:53:47:42:5c:b7:11:c3:75:
                    f0:66:f9:d4:10:f4:ba:8f:69:6a:16:2c:11:34:3a:
                    27:7d:0a:d1:4f:72:82:14:21:ad:01:75:7d:bd:06:
                    0f:96:23:a6:c5:c3:ec:84:df:d6:e4:99:15:a5:ab:
                    db:b4:99:29:d6:d7:0e:e3:15:cb:b7:25:df:86:1a:
                    d7:d7:4e:2c:54:95:ea:16:db:a6:57:0a:2e:5d:a9:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1E:44:C5:58:56:A1:7B:99:66:E9:2C:3A:75:0F:27:7B:4E:53:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c6afe82-c23b-35ed-a373-dd55948602c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:e4:34:74:1f:3f:61:c9:43:6e:c4:38:47:ae:2e:3a:80:
         36:e4:d1:7a:ba:51:1d:47:33:5f:32:5a:e6:be:91:ca:b2:e6:
         33:fc:86:b8:f8:68:3f:d8:8f:9f:78:db:84:17:a6:eb:c1:c3:
         54:26:d6:d2:8e:c2:8d:e2:ed:5e:f0:de:e0:7c:b2:40:6e:bc:
         c0:b9:b3:f3:ee:87:ca:32:74:9e:e7:74:25:06:a5:66:c8:24:
         40:2d:42:d3:32:e5:97:ca:c3:03:11:ff:a2:b3:95:df:db:d3:
         8e:08:79:22:6a:57:3b:4e:6d:0a:ca:ae:eb:88:9a:3f:59:8e:
         48:ce:16:69:59:b5:a5:a1:48:5a:33:97:c6:69:da:b7:d8:f9:
         dc:25:2b:d1:98:bf:4d:44:24:32:03:b3:9a:59:9e:cd:b4:37:
         e5:8e:3b:b4:15:4c:a1:8d:66:30:d5:f1:d6:ff:94:bd:bb:c0:
         61:6e:86:60:38:b9:ab:50:c4:94:c4:06:18:5c:b3:ba:eb:ab:
         90:4f:ba:1b:4a:9f:07:a4:8b:5a:4a:4b:44:80:f9:0b:52:88:
         13:e8:6f:e9:54:e8:7e:a5:b1:c4:65:a9:d4:e3:9b:5b:8d:56:
         20:37:a4:d2:19:82:96:51:d2:93:6e:21:ef:40:33:77:44:c0:
         45:f1:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:43 2025 by rpki-client