Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36ff33eb-a186-3820-845c-e087e6622ae6.roa
File:                     36ff33eb-a186-3820-845c-e087e6622ae6.roa (raw, json)
Hash identifier:          ZhWA+I6QanXN0EFauAG1a/jNJq1PsSnHeQYyaA9Klx4=
Subject key identifier:   7C:3B:56:83:CD:0D:4F:37:0A:EF:47:61:B2:3C:F1:5C:D3:CC:A1:EF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D3EF4206AA44B2CA02300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36ff33eb-a186-3820-845c-e087e6622ae6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.176.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:3e:f4:20:6a:a4:4b:2c:a0:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ad5ad4b5-8ddb-4da8-b961-f388010d8bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:97:24:ec:e6:5a:35:50:1c:88:9e:28:95:
                    a9:c8:17:22:f3:03:19:06:a3:4b:d0:e7:72:1e:ef:
                    65:65:4d:05:61:5f:f4:d1:a3:6d:38:7c:38:2c:27:
                    85:8f:b8:19:67:3c:17:b9:46:11:27:ec:6f:a3:fd:
                    d6:40:f3:19:17:07:87:1b:34:c0:f8:b1:e5:42:0b:
                    2a:4f:a3:f0:1c:14:ec:65:ff:ad:fc:ee:4b:3e:8d:
                    18:42:b2:1b:6c:85:aa:aa:eb:06:d6:f6:4a:aa:02:
                    ee:7e:0a:7e:e6:58:69:bd:9c:a2:b0:42:77:76:33:
                    38:a4:df:47:44:31:0f:ee:8e:0f:29:f6:e8:f2:a7:
                    de:62:ac:1b:00:8b:f9:93:b1:0a:15:ec:c6:f9:4d:
                    e7:f0:e7:9b:7d:50:28:84:c7:9e:af:fe:14:b6:99:
                    98:c3:cd:c9:df:87:45:4a:ef:bc:02:02:5d:10:2e:
                    8e:3c:59:d9:31:83:ac:f5:87:81:c2:a6:1c:ef:df:
                    bc:c4:d7:b6:53:38:78:40:10:c2:89:17:2f:b4:ba:
                    da:be:f3:92:29:cb:48:e9:9e:f6:a7:e1:0c:c8:b3:
                    af:85:e8:d8:d9:f2:b0:1e:c5:77:9f:f5:6d:eb:4e:
                    59:36:67:9f:9a:6e:cd:54:73:50:44:53:f4:1d:ab:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:56:83:CD:0D:4F:37:0A:EF:47:61:B2:3C:F1:5C:D3:CC:A1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36ff33eb-a186-3820-845c-e087e6622ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c9:86:56:9b:6b:52:20:53:96:05:6d:3e:b8:3b:23:f5:f0:
         37:30:ed:6f:c4:d7:ab:83:15:d4:23:32:86:41:4c:75:d7:1b:
         2d:e0:09:a0:37:be:9c:25:59:ce:3a:aa:60:3f:2d:b9:6f:40:
         ff:56:04:2d:b4:59:42:9c:b3:62:0d:ee:2f:42:fa:61:7e:a7:
         58:1e:36:44:b4:77:8f:fb:47:b3:d9:1d:a3:52:97:14:19:90:
         93:cc:c1:e4:04:f1:dd:99:3d:d5:0b:4a:4c:54:bd:71:4d:55:
         7d:16:a9:e6:1c:94:f6:90:1d:b5:9e:18:b3:6a:7f:99:d8:a7:
         18:15:ea:16:45:d2:c4:cf:58:a4:f3:02:37:07:ea:6b:8b:5b:
         85:7c:67:d2:35:0f:6d:b5:4c:9d:fe:7f:93:db:b3:c6:7d:da:
         ed:57:a8:75:89:0f:25:b4:ec:a9:65:eb:99:b8:ab:19:50:d9:
         99:44:d1:94:88:5a:69:b6:86:b3:b3:3b:dc:92:9b:63:a8:60:
         33:ff:66:c9:d1:05:0b:35:64:32:a6:4d:6c:f7:de:e7:f8:11:
         bf:71:25:4d:c7:e6:1a:97:1b:a1:9f:6c:dc:72:87:8e:60:1f:
         47:9d:9b:db:e0:e4:5e:c1:e0:3c:f2:a1:1c:cc:61:79:f3:cb:
         7c:e6:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:32 2025 by rpki-client