Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53344180-752b-3b18-be20-4f2130758166.roa
File:                     53344180-752b-3b18-be20-4f2130758166.roa (raw, json)
Hash identifier:          p5h9eZ0Q4Vr9PkLj4sUQSUfZi7/7S9UCeGXQYYnK3sQ=
Subject key identifier:   10:7E:BF:DA:B4:65:EF:0B:C0:56:DB:04:D5:32:10:53:CE:7D:4F:33
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E17D9E2CFB83FA1D41B40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53344180-752b-3b18-be20-4f2130758166.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     22415
IP address blocks:        24.205.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:17:d9:e2:cf:b8:3f:a1:d4:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=bac5e682-2aa4-47d6-9204-4565c070680d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:7a:69:c8:cf:75:fc:ce:d3:e2:c5:69:c6:
                    4b:f2:32:77:42:e6:5e:61:87:6a:c0:0c:c2:dc:81:
                    5e:69:c3:44:ed:10:e6:d4:98:de:af:39:85:d2:fa:
                    13:48:9a:dd:a1:8d:85:58:42:fd:2b:f5:37:6a:2c:
                    57:64:93:ef:be:01:5c:68:de:75:55:c2:f5:22:e8:
                    66:f9:86:f3:24:7c:2f:73:83:7c:35:70:88:0c:cb:
                    03:ef:9d:5b:93:2b:e7:8c:73:12:37:94:68:d0:f4:
                    4d:6e:48:2a:bd:e2:8e:97:9c:1e:b1:4f:3e:03:a0:
                    e4:8a:c9:18:24:b1:44:cc:85:af:de:ea:89:e2:68:
                    b6:50:70:f4:0f:55:8c:fc:ca:8c:da:1d:29:72:0a:
                    00:0b:a3:4b:f7:a7:35:44:b2:69:a4:6c:d4:ff:97:
                    b0:0c:4f:f6:9c:3a:c9:c0:aa:3d:ec:66:4c:cd:cd:
                    88:04:8d:43:32:f4:20:16:93:e2:08:6b:10:74:23:
                    eb:bd:65:8e:55:95:2d:31:99:bf:8d:2d:e6:e8:03:
                    c6:e0:43:90:7d:a8:b9:ad:62:99:c9:48:69:39:bf:
                    45:83:3e:fd:5a:0f:aa:0f:97:50:96:55:17:9f:3d:
                    1e:21:55:ca:80:12:06:07:b2:66:ae:57:55:cd:78:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7E:BF:DA:B4:65:EF:0B:C0:56:DB:04:D5:32:10:53:CE:7D:4F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53344180-752b-3b18-be20-4f2130758166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.205.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8d:47:a5:3b:fc:5f:58:77:4e:0b:4f:13:34:da:cd:93:b7:
         ab:30:c8:a3:d3:32:c6:59:e2:10:f6:b3:52:79:34:c9:e9:df:
         84:85:47:3e:41:3f:2d:95:2e:1f:25:ad:2c:75:d4:5a:96:07:
         71:56:8b:cb:fa:95:a3:08:ac:a8:75:69:16:d7:4e:f9:4b:fb:
         8c:a6:7a:a7:29:f2:8d:28:23:61:b2:5f:3e:8f:c0:c2:3f:89:
         7a:c8:53:9e:dd:f4:b4:55:6b:89:19:0a:95:70:ae:c7:2f:c8:
         41:34:44:09:fd:dc:35:0d:1a:ce:18:7a:6f:ee:0f:16:b7:ac:
         1b:9c:a5:e1:41:8f:05:cc:69:61:d2:78:95:c5:10:22:5b:e8:
         06:b4:db:45:a4:7a:65:2d:34:9a:18:98:3a:b5:8c:fc:e7:f9:
         c1:28:ff:72:82:be:00:87:51:e8:48:6d:fc:97:09:cf:fd:cd:
         e4:8b:92:c0:16:8e:0f:6c:0d:45:69:4f:f4:cd:de:38:fa:a9:
         c5:35:33:bb:b4:a8:9d:bf:be:76:2b:99:2b:73:53:8c:c7:d5:
         be:27:a7:29:42:cc:9e:e3:d7:df:a8:52:1f:30:a8:f2:a8:a1:
         d8:73:3b:ec:07:55:cc:1f:39:40:62:d0:ea:34:09:32:1c:8b:
         29:6c:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:09 2025 by rpki-client