Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f6181aa-3477-3f8d-bfee-be6f79370fd9.roa
File:                     6f6181aa-3477-3f8d-bfee-be6f79370fd9.roa (raw, json)
Hash identifier:          lCARJfpMx6W94K3AesZzp5Hju975cYNiZRTLTGjigbo=
Subject key identifier:   B0:AF:50:94:D6:03:61:A0:D8:3B:FC:71:BD:49:A9:87:5F:59:33:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB73DBC9E0D6D69713ADA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f6181aa-3477-3f8d-bfee-be6f79370fd9.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.240.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:73:db:c9:e0:d6:d6:97:13:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=e5a039e5-371a-47c3-8c4a-6427cdac0bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:db:a1:48:93:00:ae:6a:13:a5:cd:d4:d2:
                    ad:6d:74:2a:b5:d1:38:9e:1c:de:b8:22:17:b4:6c:
                    db:d4:cb:03:6b:88:c9:4f:5b:a5:91:72:2e:25:a6:
                    80:36:7e:78:e3:d3:98:80:4c:c5:86:5b:77:84:3e:
                    6e:84:92:6e:f9:ec:d6:67:e5:49:8f:e8:fc:fa:3a:
                    04:2b:77:a3:c3:03:cf:23:0b:7d:ac:df:a1:e4:30:
                    a3:54:14:e4:d1:e6:8d:f3:36:0f:9f:e7:a6:85:84:
                    45:15:2e:7b:28:d4:9d:b8:3e:ec:78:0a:5c:1c:06:
                    79:49:51:55:dc:40:26:8a:73:06:f2:96:2c:3e:cd:
                    a9:a7:26:ed:4b:7c:55:94:91:07:4d:32:dc:30:83:
                    64:50:50:b2:be:31:86:0f:05:46:7e:fa:a3:ae:20:
                    51:df:cd:e9:94:ba:17:b1:cb:f7:7a:dc:c2:a4:16:
                    de:12:fe:5a:53:3c:c2:c7:a8:75:db:25:e7:61:94:
                    ce:39:fc:a7:29:62:62:d2:aa:96:7d:a6:b3:b0:95:
                    68:ee:4f:b4:a0:20:62:9d:f6:64:e1:05:6d:fc:9b:
                    89:b5:92:ea:ae:ce:8a:c8:34:c5:6d:a6:20:57:6d:
                    03:19:f9:40:cc:12:f7:2f:4b:a0:4f:6d:74:c5:1e:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:50:94:D6:03:61:A0:D8:3B:FC:71:BD:49:A9:87:5F:59:33:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f6181aa-3477-3f8d-bfee-be6f79370fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:58:55:33:3c:0f:ad:11:f0:1d:6d:48:41:21:a0:fe:5d:
         b9:0f:b3:d2:b6:dd:be:bf:58:d5:e6:17:7e:49:0a:5b:98:61:
         f7:13:3d:86:e7:61:89:8a:c9:67:e8:20:3d:7d:33:33:a5:1b:
         a6:9f:47:65:3c:cc:26:87:ea:79:f3:90:9d:ce:bd:da:80:f5:
         86:d7:02:64:b6:38:e0:1e:5b:c0:78:e5:54:5d:2c:f7:08:4f:
         ad:d9:6c:59:de:e0:64:a0:48:1f:90:6a:8a:6b:bc:cd:fa:ff:
         66:9c:e8:c1:05:ed:ef:c8:6e:99:13:77:e5:8a:92:78:20:0a:
         e9:09:b1:98:be:4b:40:13:d8:70:f3:70:ce:98:15:03:ac:f5:
         a9:3f:f7:52:82:dc:5f:71:72:dd:df:c8:0f:8f:b9:36:34:b3:
         5e:03:9b:76:e5:17:eb:13:89:2b:1a:07:39:b0:eb:53:7a:38:
         22:b6:93:c1:5f:7a:32:7d:d8:ce:af:25:4e:77:f7:1b:bc:1b:
         ef:3e:f9:fc:e4:1a:2d:6c:88:34:d9:a8:19:f5:ce:00:57:a5:
         f9:d8:0c:0a:16:2c:aa:32:88:8f:69:08:fd:21:93:cc:56:74:
         77:f9:a8:0d:6c:76:18:c7:16:4c:43:b6:b0:f0:da:43:83:ae:
         a8:75:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:31 2026 by rpki-client