Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71b3db55-c047-3f33-9fc5-101e5f68a46a.roa
File:                     71b3db55-c047-3f33-9fc5-101e5f68a46a.roa (raw, json)
Hash identifier:          KqQmzn64PdCAgwouhPDxl0I0ttVJwTLf+IW0lM8nIPI=
Subject key identifier:   B4:4D:EA:05:9C:E9:6B:41:16:6C:35:44:C2:B4:F4:A8:EF:16:2E:D4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD7D73D1B92AFE27286B5
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71b3db55-c047-3f33-9fc5-101e5f68a46a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.197.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d7:d7:3d:1b:92:af:e2:72:86:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=13636ded-b365-4897-8611-dc3ff43a129c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:b9:2a:d6:4f:11:34:0e:b7:a0:7c:d1:17:
                    f9:3e:85:06:54:8f:5c:8f:7a:5a:a3:42:09:25:28:
                    30:22:a0:0f:71:60:fe:a7:b5:7e:85:5e:9c:8a:a9:
                    5b:c3:1a:24:69:ce:67:ad:da:73:61:8b:17:80:5d:
                    cc:52:5b:87:f1:ec:75:0b:dc:8a:2a:0e:f8:56:47:
                    cf:b4:66:19:2d:49:12:8a:11:96:08:5a:97:c5:5b:
                    0b:8a:53:b6:dc:be:26:55:2b:c7:be:73:a2:fd:ef:
                    51:f4:75:f1:fe:d2:5c:61:69:9e:fd:6d:71:c3:99:
                    95:6f:ac:87:6e:e6:b5:ee:92:c7:d2:2b:9d:2e:2f:
                    af:04:51:04:b5:33:dd:1d:b4:c4:d7:61:00:14:95:
                    94:25:e3:00:8e:40:c8:09:8a:16:b4:d5:ef:29:a2:
                    89:ef:2b:42:f7:9c:76:21:bd:7c:6b:c5:85:17:32:
                    5e:79:b9:64:0b:2d:34:86:64:f7:01:b7:0c:e9:7e:
                    f9:89:02:4d:0b:63:a9:84:47:d4:ed:0d:3f:bd:72:
                    3c:6a:20:ec:de:29:39:fc:29:0c:fc:52:9d:62:96:
                    69:f9:3d:bf:81:6f:a4:03:da:90:6a:63:1c:4d:aa:
                    ad:f1:49:07:a8:4e:7d:9a:3e:fa:69:aa:db:8f:b4:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:EA:05:9C:E9:6B:41:16:6C:35:44:C2:B4:F4:A8:EF:16:2E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71b3db55-c047-3f33-9fc5-101e5f68a46a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4e:69:8b:3b:b8:c2:81:ff:07:03:22:8a:55:47:18:2a:42:
         92:cd:2b:ec:db:99:f9:16:30:16:aa:0c:7b:02:4f:8c:57:35:
         a1:23:5f:6b:ab:4c:eb:7b:29:30:66:c8:df:a5:9c:ba:16:07:
         21:2c:a2:50:f3:eb:4e:2c:ef:c1:c8:11:ca:9a:0c:7f:0b:b3:
         10:0d:87:01:f0:d0:88:e6:61:5c:b2:71:a2:06:83:54:95:24:
         d3:db:c1:61:4b:2e:b3:25:3a:82:19:61:41:84:57:4b:5f:ea:
         c8:de:4b:31:44:d6:4a:39:9f:85:90:cb:16:58:bd:77:9b:33:
         72:0c:e0:30:13:80:b2:fe:6a:7e:74:e3:bd:36:56:3b:61:e1:
         11:0b:7c:9b:43:c2:96:ea:9d:4e:e3:57:e7:e1:f6:53:20:58:
         dd:bd:22:ef:82:70:bc:44:36:66:17:ad:b9:cc:eb:1c:91:3a:
         51:b9:d2:5e:9e:8f:10:e4:00:8a:d2:d9:b5:c6:db:41:b9:4d:
         c6:75:ae:58:d0:45:e4:3b:20:3d:e2:ca:79:31:33:86:7e:28:
         ac:e4:4b:a3:eb:77:e8:1e:8a:90:78:eb:7f:d8:b0:83:c2:8d:
         99:ae:a7:93:d1:a3:09:98:e5:bd:86:60:1f:c0:49:60:59:21:
         87:af:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:05 2025 by rpki-client