Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412d55e1-2ad2-3d50-90da-518d53ca746a.roa
File:                     412d55e1-2ad2-3d50-90da-518d53ca746a.roa (raw, json)
Hash identifier:          XfMUYI6+KmyatktSwAuuELbGyrPPosdiH+rKqHdPXx4=
Subject key identifier:   1D:E6:A1:02:5C:E7:B4:FF:95:14:51:B4:55:31:FA:28:A2:0B:A5:31
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB57B8EE79BF2C78974A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412d55e1-2ad2-3d50-90da-518d53ca746a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.216.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:57:b8:ee:79:bf:2c:78:97:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=95ebdce9-c613-42db-a115-1a4de43399ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:30:fa:53:2e:c5:27:d2:96:20:08:85:47:
                    82:07:fe:cc:6a:ed:3c:4f:c2:16:a8:12:9f:e0:36:
                    c9:bb:8f:f5:b0:9e:eb:a7:6a:a6:79:ce:0c:f3:8b:
                    3b:73:41:a8:1a:f2:96:64:5f:47:f5:2f:ec:4a:86:
                    79:81:a7:b7:c5:e0:8d:ac:b9:45:38:4a:e7:f6:c5:
                    7e:69:1b:99:88:cb:13:a3:70:e3:64:d9:07:65:05:
                    9c:a7:bd:d4:fd:c6:cd:f2:61:cb:1d:ef:be:7b:99:
                    85:39:3d:90:67:c0:11:c1:8b:1d:fe:58:21:66:0d:
                    37:38:9a:b4:72:9a:fc:22:bb:f4:c8:26:9a:fd:94:
                    7a:41:76:47:af:5d:93:a6:cb:52:48:0e:dd:fa:d7:
                    09:14:d3:81:05:3c:c0:fa:c8:c3:ff:4a:5c:4d:8c:
                    03:ee:a6:f1:b9:86:39:45:f8:8f:62:58:65:0b:72:
                    c2:db:a8:48:2c:09:17:9e:ae:6f:4f:87:3e:f8:bb:
                    03:eb:46:b2:a0:18:ee:d0:00:31:8c:bc:9b:33:fc:
                    06:d9:0e:02:02:e9:f8:fe:08:89:16:04:87:cc:8f:
                    2e:e5:f7:5c:21:58:4f:b5:2d:c4:e3:89:b9:0b:f6:
                    55:90:e6:c1:66:56:11:54:96:6f:11:9a:5c:0a:6f:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E6:A1:02:5C:E7:B4:FF:95:14:51:B4:55:31:FA:28:A2:0B:A5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412d55e1-2ad2-3d50-90da-518d53ca746a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:26:38:c2:be:f8:e0:6d:4d:ba:06:20:87:e1:15:b4:fa:06:
         f8:f8:ae:c2:3c:b1:02:17:ca:f8:cc:19:ec:98:c7:7f:17:f6:
         18:91:e8:c3:40:fc:37:14:52:89:a1:1c:b7:d8:80:59:0e:b4:
         81:2c:bb:7c:a8:f9:8c:3a:44:48:44:b8:60:85:0d:42:e1:d8:
         85:84:c7:d8:66:3e:fd:87:d3:17:42:b8:c5:c1:ae:71:5c:02:
         fc:92:ac:57:6e:d8:be:d0:09:ae:e6:f3:e4:e0:cc:a2:6d:21:
         7c:94:f7:2a:5c:07:2a:09:63:76:73:13:a1:70:97:ec:ae:51:
         91:8c:fb:7b:b7:80:e0:dc:d1:6e:2e:23:c3:a9:f6:27:de:56:
         1f:20:70:ac:86:36:fe:88:6a:0f:da:c0:f2:06:b6:1d:77:75:
         ae:99:f7:97:5a:c2:52:f8:f0:9d:8c:58:62:c5:db:e6:61:2c:
         e6:d6:a9:dc:2f:a2:ba:59:6e:71:e0:f3:82:7b:9a:77:fd:b2:
         93:59:a0:b6:b9:2a:4a:1f:2b:45:10:b7:12:ac:ae:ed:50:51:
         16:ad:53:3f:da:03:b7:4b:a5:57:66:b0:3a:51:e1:8c:ba:d9:
         35:66:d5:24:2d:49:d1:3e:93:5d:ff:6f:6b:1c:d3:3c:bf:d4:
         74:1a:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:24:11 2026 by rpki-client