Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/635f3f5f-7290-3665-9f6f-717d82082940.roa
File:                     635f3f5f-7290-3665-9f6f-717d82082940.roa (raw, json)
Hash identifier:          aW5RCS3hDq5zoiZNz9Xm+p2gDW/lqcZ9a/B2pPTfwO4=
Subject key identifier:   2D:83:71:87:FA:C3:15:D1:0A:1C:5E:1D:3B:1F:69:04:27:B6:FE:F1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB543B896CE22A9416D280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/635f3f5f-7290-3665-9f6f-717d82082940.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.216.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:54:3b:89:6c:e2:2a:94:16:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=f928ebb2-070a-4130-92f5-a04395ac39f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:be:ae:85:3d:42:87:5e:3f:4c:29:5e:f8:
                    ac:2a:65:86:cb:47:ba:c5:33:a8:9c:a8:94:62:bb:
                    de:c6:00:97:b0:75:62:c2:d2:1f:ec:bf:b0:ab:11:
                    28:c3:de:b1:49:ea:61:95:d1:4a:ea:f1:0d:38:92:
                    5a:03:f2:95:66:42:20:eb:16:5b:e0:98:a8:70:7d:
                    df:db:d6:d0:20:fd:c3:40:8c:2a:d7:c5:df:a5:98:
                    8a:12:04:6c:01:57:17:14:b2:9d:87:79:3c:d0:38:
                    bb:eb:61:8d:1f:e1:fb:16:3f:3a:31:e9:62:09:75:
                    84:68:91:5b:24:05:05:2d:79:aa:a8:96:45:df:0d:
                    fe:11:72:27:2f:a6:1a:f5:ed:d8:a0:51:80:3a:2d:
                    87:20:dd:47:8b:1c:ae:85:f2:56:ea:8c:6f:2b:d9:
                    ea:2d:bd:6a:b9:51:77:e7:77:42:8d:f5:82:dd:c5:
                    36:4b:2d:ae:a8:51:07:c5:ce:cf:7c:e1:4c:1c:a1:
                    b3:e1:20:54:44:37:53:12:b1:3e:b9:40:93:59:4c:
                    83:b2:66:3d:1e:50:5d:93:cc:8b:ab:b3:77:a1:a6:
                    a7:58:71:1d:f0:51:88:77:34:40:c5:17:d0:bd:48:
                    f6:37:13:7a:3a:10:fd:4a:c7:2a:b0:12:a9:ac:d8:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:83:71:87:FA:C3:15:D1:0A:1C:5E:1D:3B:1F:69:04:27:B6:FE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/635f3f5f-7290-3665-9f6f-717d82082940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:87:f9:48:80:ca:2b:e5:96:a6:34:c2:b1:f7:e5:fe:61:
         c3:4c:56:34:a1:80:31:e7:59:39:f2:9e:16:2a:a2:90:b4:5a:
         c7:02:30:98:1b:4b:dc:83:28:a4:5c:7b:08:f3:9f:6f:ae:99:
         7e:bc:96:94:1f:8c:1a:a2:6e:40:e9:04:06:a1:56:ac:ad:60:
         b6:32:17:10:0f:c3:a5:2b:76:8e:78:cf:b9:49:1d:07:3a:76:
         e2:36:48:56:8a:7f:26:34:58:41:84:9f:f2:58:cf:eb:de:19:
         31:81:1d:17:97:62:92:a7:6b:a7:2b:56:a2:38:22:f7:82:10:
         eb:49:68:0a:81:3b:57:63:72:01:a6:32:51:14:23:38:1f:09:
         f7:8a:85:13:3e:44:90:1c:2f:07:ff:78:34:66:33:c0:e6:e1:
         4c:4d:22:28:1a:b7:f9:ec:8e:8a:45:be:d9:01:34:76:21:13:
         ac:c4:7d:ac:4f:e1:28:a2:96:bc:93:2e:7d:bf:63:2a:2e:eb:
         20:41:dc:8e:31:e7:1e:da:04:30:07:79:46:0e:1f:a9:4a:35:
         2f:cf:e7:a4:c9:30:f5:03:e1:9d:04:c8:ba:72:1a:15:3d:e5:
         92:e1:91:15:e8:c2:d8:29:6b:c2:40:77:42:75:44:8c:73:1b:
         20:44:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:03 2026 by rpki-client