Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5db1a819-9f05-3148-9e77-bfad52e06326.roa
File:                     5db1a819-9f05-3148-9e77-bfad52e06326.roa (raw, json)
Hash identifier:          8kCK1pKIVABcR2MVXzpIvc04DpP9b0HYgad4z5Fa4Gg=
Subject key identifier:   92:FA:F4:09:CF:C0:A6:A1:88:17:9C:BF:5C:D7:EF:82:F5:A2:21:93
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D45863BAA9D4EAA008E40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5db1a819-9f05-3148-9e77-bfad52e06326.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.179.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:45:86:3b:aa:9d:4e:aa:00:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=77254e05-6787-4a89-884d-84ac1316263a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:51:c2:a5:9e:c1:77:7f:ef:b5:03:e5:cf:
                    ca:d2:53:cc:0b:21:4d:fe:57:87:9f:36:2b:28:36:
                    ee:8b:7b:bc:19:bb:d1:ca:9a:d4:57:f2:8c:bd:c0:
                    21:2e:01:64:45:f5:61:46:e0:3f:21:cb:0e:26:f7:
                    b6:91:a3:fd:d4:cc:e5:8a:6d:da:d7:e0:46:3f:bc:
                    ad:72:d7:68:71:03:60:f8:6a:aa:92:5b:80:51:2d:
                    e1:a0:91:fa:1b:23:9a:f7:df:0e:4f:fd:c2:45:8d:
                    45:d3:cf:43:21:b4:47:ab:0c:a7:4a:e1:1e:5b:e2:
                    a6:a1:5b:96:70:28:20:c8:d3:b8:32:c4:d3:f9:e4:
                    d7:a6:24:ae:c6:9c:de:44:f8:8a:00:2a:f4:d3:34:
                    cc:16:cc:75:3f:25:f7:31:66:8e:15:2a:dd:e8:75:
                    b1:4c:dd:df:b1:3f:bc:82:f6:14:2e:38:b4:4f:01:
                    9c:5a:af:eb:3f:65:2f:ba:8c:5b:96:16:a5:14:da:
                    dd:97:2a:7d:f0:d6:ea:1f:ac:cc:52:d7:b2:49:77:
                    8a:d3:c7:36:4c:8a:02:42:e3:fc:a1:db:ba:0e:65:
                    8d:68:8c:06:87:8c:6d:09:7b:0f:40:8f:84:83:bb:
                    5c:7c:d4:92:16:43:3c:7c:59:62:db:c8:86:e8:e4:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FA:F4:09:CF:C0:A6:A1:88:17:9C:BF:5C:D7:EF:82:F5:A2:21:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5db1a819-9f05-3148-9e77-bfad52e06326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.179.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:9d:79:c3:6c:43:04:39:86:25:dc:fa:b0:33:77:fd:42:ea:
         23:ed:df:83:06:77:ec:de:a2:24:0f:48:47:eb:0b:68:28:59:
         31:8a:f9:2e:d3:44:e9:20:82:f1:ed:2b:66:44:62:fd:c9:b6:
         17:6b:06:0e:ca:50:2a:7a:6f:e8:02:6c:d6:ab:b5:e4:9b:34:
         77:5d:7d:a1:75:22:69:95:3b:5f:ab:1b:f8:33:ee:f1:d9:cb:
         19:fa:83:ce:e0:cd:34:89:8b:f2:d6:e2:55:60:d6:54:fa:24:
         27:26:10:8b:73:20:af:6f:c7:33:8e:79:77:6d:bf:1d:c9:2f:
         e9:13:29:5e:75:ce:d1:54:18:ec:d9:5a:d0:6d:13:e1:3e:71:
         d7:29:41:12:e8:0c:b8:46:f4:8d:32:f6:99:76:4b:92:e2:9f:
         a6:be:49:2d:89:86:36:54:93:b6:54:ac:57:99:2e:b0:76:c6:
         1f:e1:96:84:f5:ad:bb:48:24:8c:93:f0:73:02:2c:5e:ec:00:
         50:8b:8f:e7:ec:bf:ec:ec:c1:5f:c3:48:9a:69:c4:5e:8a:e0:
         6a:b8:34:18:22:65:68:6a:e8:23:8e:dd:82:fe:ca:2f:67:f6:
         e7:4d:51:54:1a:00:a3:45:42:6e:37:db:8c:15:3f:32:f9:11:
         86:1d:43:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUWGO6qdTqoAjkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NzcyNTRlMDUtNjc4Ny00YTg5LTg4NGQtODRhYzEzMTYyNjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtRRwqWewXd/77UD5c/K0lPMCyFN/leHnzYr
KDbui3u8GbvRyprUV/KMvcAhLgFkRfVhRuA/IcsOJve2kaP91Mzlim3a1+BGP7yt
ctdocQNg+GqqkluAUS3hoJH6GyOa998OT/3CRY1F089DIbRHqwynSuEeW+KmoVuW
cCggyNO4MsTT+eTXpiSuxpzeRPiKACr00zTMFsx1PyX3MWaOFSrd6HWxTN3fsT+8
gvYULji0TwGcWq/rP2UvuoxblhalFNrdlyp98NbqH6zMUteySXeK08c2TIoCQuP8
odu6DmWNaIwGh4xtCXsPQI+Eg7tcfNSSFkM8fFli28iG6OT1fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJL69AnPwKahiBecv1zX74L1oiGTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWRiMWE4MTktOWYwNS0z
MTQ4LTllNzctYmZhZDUyZTA2MzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGLMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMedecNsQwQ5hiXc+rAzd/1C6iPt34MGd+zeoiQPSEfrC2goWTGK+S7T
ROkggvHtK2ZEYv3JthdrBg7KUCp6b+gCbNarteSbNHddfaF1ImmVO1+rG/gz7vHZ
yxn6g87gzTSJi/LW4lVg1lT6JCcmEItzIK9vxzOOeXdtvx3JL+kTKV51ztFUGOzZ
WtBtE+E+cdcpQRLoDLhG9I0y9pl2S5Lin6a+SS2JhjZUk7ZUrFeZLrB2xh/hloT1
rbtIJIyT8HMCLF7sAFCLj+fsv+zswV/DSJppxF6K4Gq4NBgiZWhq6COO3YL+yi9n
9udNUVQaAKNFQm4324wVPzL5EYYdQ4I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:32:51 2025 by rpki-client