Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/514f29ac-f834-353c-8f51-df5e2e76dc71.roa
File:                     514f29ac-f834-353c-8f51-df5e2e76dc71.roa (raw, json)
Hash identifier:          CnTDTJxoyX92rGu3V2lmSEOD8U21isLYI3TCTfm01TE=
Subject key identifier:   D6:EC:C8:92:E5:23:41:02:22:52:48:A7:A3:03:E4:93:5F:40:42:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDB6D951DC98D77C41700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/514f29ac-f834-353c-8f51-df5e2e76dc71.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.197.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:db:6d:95:1d:c9:8d:77:c4:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8feb907b-b1f6-44a1-a3f8-fb953e91502b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:7b:86:ff:9b:bb:6d:ec:ec:26:ff:df:84:
                    ce:6e:35:6b:42:bc:4f:95:94:54:29:a0:12:ba:bc:
                    44:ba:b0:26:aa:a3:03:f8:5c:67:5e:cb:ff:cb:ec:
                    9f:86:9b:97:66:d6:05:00:76:62:e2:df:fc:78:0c:
                    dc:5c:57:a6:de:74:94:78:f3:43:9e:2b:92:37:a9:
                    41:8a:29:94:d1:b0:ed:8e:f8:b0:ec:03:1a:57:c7:
                    d2:07:5d:c7:5b:66:16:68:28:00:56:ef:6c:8e:ac:
                    e7:60:ff:70:13:94:43:85:00:f6:09:e2:2c:89:0f:
                    99:8f:40:79:4a:ce:8c:73:09:1f:df:d4:69:fa:f3:
                    db:c1:d2:2b:2a:66:dd:af:2c:52:46:12:fd:d6:65:
                    19:87:e8:e3:12:e6:d1:46:16:eb:e3:b3:cf:7b:0a:
                    d2:99:ca:71:d6:b4:91:ed:7e:3f:cc:3e:ad:98:b8:
                    88:0b:ad:35:a2:d1:19:27:44:be:9b:8e:6e:86:3d:
                    0b:41:71:fd:78:91:c3:9a:78:24:cf:a7:8e:58:09:
                    27:f9:3e:d4:a2:3b:f7:7f:3c:82:46:e2:98:ef:f0:
                    a9:84:62:55:02:c6:ef:0d:83:9b:0b:62:be:9a:90:
                    a0:ba:c3:46:29:8d:1c:17:cb:7d:30:8e:5f:f6:ae:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:C8:92:E5:23:41:02:22:52:48:A7:A3:03:E4:93:5F:40:42:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/514f29ac-f834-353c-8f51-df5e2e76dc71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ad:d6:8a:44:35:02:4e:81:a3:75:ff:23:6f:ae:86:e0:c0:
         b3:cf:0e:dd:1b:34:4d:19:3a:1a:ee:dd:28:6c:77:0b:34:be:
         73:0b:81:0a:07:87:a0:34:77:de:02:ea:e8:c8:21:ac:f0:69:
         f1:ba:49:33:0a:e6:58:40:c1:f8:16:12:79:2d:dd:7b:3d:82:
         e8:66:7e:d2:de:c0:48:f6:a1:d0:2a:d0:03:ea:7d:b4:ee:17:
         e1:e8:e0:b0:b6:0c:dc:87:71:7c:5c:91:96:25:e5:ac:aa:73:
         ac:30:68:50:92:ee:c3:33:75:a3:55:a0:90:6e:b9:de:cc:96:
         10:21:d4:7c:c1:22:45:7c:aa:97:bc:ba:b2:07:85:0d:60:3f:
         e5:66:4d:ac:4b:1b:51:8c:76:4f:91:36:6e:9a:0c:86:95:b5:
         3c:6e:2f:4f:b8:0d:54:01:b7:ec:ef:f0:fd:02:54:24:ed:7d:
         d5:95:ed:b8:b1:a1:9a:06:dc:91:d4:af:ef:2f:09:da:ea:b7:
         ad:47:de:25:81:76:2b:a6:b3:46:73:94:37:31:1e:5f:9b:b8:
         68:88:c1:85:81:4c:08:44:c7:1b:fb:a4:70:40:d7:e8:5b:8e:
         8f:b2:52:6d:ed:34:65:43:f8:0c:b8:d2:70:4a:87:e3:fd:b5:
         ed:cf:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:37 2025 by rpki-client