Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/41ff7f2e-a389-39f4-9348-18aae0b3ee45.roa
File:                     41ff7f2e-a389-39f4-9348-18aae0b3ee45.roa (raw, json)
Hash identifier:          HhPmZlXblrNl2P0namV12AEX6o9Sj6KVRUq/RS+TJr0=
Subject key identifier:   BD:14:29:25:8C:79:98:F9:D8:A4:9F:78:D7:42:0F:96:79:D8:A4:84
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D4B00A33E98550C720F38
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/41ff7f2e-a389-39f4-9348-18aae0b3ee45.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.196.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:4b:00:a3:3e:98:55:0c:72:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=dd2a9dad-c400-47f9-ab70-f2d3ec6d8881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:36:15:49:1b:b5:69:a3:f3:02:ab:4f:ad:
                    96:0d:49:9e:e7:95:58:73:a4:c8:b8:68:3a:3c:b9:
                    b0:dc:de:67:4c:46:19:12:5c:6b:5e:2e:16:81:67:
                    c2:30:bf:59:0e:92:20:9c:9e:e1:86:34:24:75:25:
                    13:19:2a:32:5d:b2:f4:87:9f:51:22:9d:c9:36:06:
                    e5:68:f2:7a:97:b2:8f:7d:41:51:b2:81:23:0b:08:
                    29:5f:ce:ce:d5:e7:dd:bc:5c:9e:9e:88:6b:32:1f:
                    5a:14:d4:13:7d:21:b9:b6:16:60:f2:2b:76:77:e1:
                    83:c1:77:b4:5c:b4:f7:2a:8b:66:da:f8:16:a9:5b:
                    a5:4c:31:ba:f2:3d:ae:a8:ac:91:a5:3d:11:5c:5b:
                    f1:36:2e:92:c5:0c:ca:83:e2:8c:d3:d7:8f:1b:40:
                    a6:53:93:2e:f8:4d:19:a2:95:f3:4c:0d:8a:0d:95:
                    ef:00:28:28:0a:73:33:de:ee:c7:b4:fc:e2:7a:d9:
                    5e:e3:34:f9:30:20:43:7b:84:c9:0b:a4:d2:3e:e4:
                    a2:df:df:23:31:39:c3:2a:2f:48:b7:7c:da:11:4e:
                    1e:90:9c:dc:36:5f:49:2c:ba:52:cb:f4:27:a2:e2:
                    62:eb:a8:24:bc:6d:c0:b2:b2:ba:b1:24:ec:6f:9b:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:29:25:8C:79:98:F9:D8:A4:9F:78:D7:42:0F:96:79:D8:A4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/41ff7f2e-a389-39f4-9348-18aae0b3ee45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fc:55:d4:d9:13:6b:91:2a:f1:d6:bf:03:39:9f:1d:45:b5:
         4a:3a:f8:6b:26:74:d9:cd:60:04:b2:3b:7e:f8:45:da:ab:ab:
         a3:ce:fd:8c:df:5c:00:bc:4b:71:c7:1f:e7:5f:5d:13:b4:52:
         b2:7b:27:7f:f3:4b:2f:ab:7d:df:1e:b1:c8:7d:22:65:7f:aa:
         2d:b9:9f:1a:31:02:91:75:a9:d6:3a:49:d5:95:bb:3e:0a:d3:
         51:0b:44:ad:ad:b7:4c:72:0c:c5:0d:83:7f:6b:3d:e7:37:ab:
         ed:f0:31:fe:4d:1d:56:20:00:9a:2e:95:0c:0b:52:e6:18:a8:
         75:5a:66:be:be:de:e9:fd:e3:39:7f:d7:38:d3:ac:16:f0:1b:
         88:9a:82:60:f4:71:d4:3f:65:d1:6d:01:90:35:6b:97:69:c1:
         ba:32:0a:54:af:df:a5:d7:14:44:3b:69:4b:63:0e:c7:2f:f7:
         b1:b6:30:b3:d2:36:84:20:07:d4:15:06:e6:44:d8:3e:82:61:
         cc:24:d3:be:85:62:0b:93:73:b6:95:fa:bf:f2:18:ea:ae:86:
         36:64:21:28:8d:66:1d:5e:05:d7:e4:1f:94:62:80:5b:df:50:
         a6:0b:08:1b:c7:ce:50:12:ea:d9:60:46:b6:7f:61:e8:de:66:
         3b:e5:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:42 2025 by rpki-client