Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7768e63d-9d18-3d24-8195-06335e9626ab.roa
File:                     7768e63d-9d18-3d24-8195-06335e9626ab.roa (raw, json)
Hash identifier:          TTMOtvv3jCdatpPSxF40sd9L1ExYWBpb/Mj3mRLP4r8=
Subject key identifier:   D6:03:AE:3C:53:9E:AE:A2:E8:E1:17:8B:BC:C0:FB:73:A0:46:CD:C8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E439EE4C6F916BE8BB280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7768e63d-9d18-3d24-8195-06335e9626ab.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        24.178.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:43:9e:e4:c6:f9:16:be:8b:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=508f9b58-270e-4534-8351-50ddba1139c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:49:8b:49:6f:21:73:bf:d8:9f:25:28:fa:
                    d2:70:24:9e:99:aa:f0:3e:01:94:b5:02:18:73:ef:
                    70:2f:cd:47:f0:3d:e3:48:dd:f7:04:33:00:e4:8c:
                    e9:41:50:0b:83:8c:4b:8f:01:8f:05:23:f4:e1:ee:
                    e4:87:78:05:e3:c1:ec:c3:cf:9d:ed:ec:b3:0d:28:
                    e1:01:44:3f:28:ec:b0:f3:28:6f:bf:57:40:dc:6d:
                    b5:76:11:6f:1f:37:25:f6:a9:61:51:05:43:2c:29:
                    81:7e:95:56:b1:9b:ed:ad:a7:9e:46:4f:e0:24:8f:
                    e0:88:5a:ad:03:98:c2:ee:2f:a4:ef:29:bc:5e:35:
                    ef:ec:f1:83:69:cb:99:ac:5e:04:4f:fe:95:b4:56:
                    35:8e:e9:5b:16:a9:85:67:41:49:b1:2f:69:cf:f9:
                    c6:9b:22:97:78:0d:1b:6c:f9:bf:3e:25:79:80:1e:
                    30:16:a9:c8:bf:8f:28:b2:9c:7b:43:f8:8d:64:08:
                    ee:23:37:08:65:38:99:e9:0e:1e:60:5c:7e:f4:ad:
                    3a:5b:95:39:6f:9d:31:7f:75:a8:76:fe:56:31:f7:
                    29:5a:90:f0:03:27:76:28:a7:62:13:ae:50:c0:a2:
                    a0:69:eb:8b:c3:3a:50:04:06:6d:93:2a:a2:a6:b4:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:AE:3C:53:9E:AE:A2:E8:E1:17:8B:BC:C0:FB:73:A0:46:CD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7768e63d-9d18-3d24-8195-06335e9626ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:b4:8e:d4:4f:db:f5:db:96:a6:2b:34:66:96:2c:a1:af:
         f1:a6:8c:89:6d:98:2a:29:62:a8:f1:ea:bc:a3:a7:97:62:e7:
         00:33:52:d0:66:1d:68:31:fb:b7:f1:a7:8c:f7:a6:c6:0b:b1:
         3b:a5:3b:58:50:e2:cf:79:79:70:6e:d2:dc:bc:26:5b:9b:33:
         28:38:b3:92:89:82:19:b8:20:a9:69:11:7d:7b:6d:da:40:39:
         33:ec:53:4d:b6:14:96:71:e8:b9:31:ce:5c:1b:53:4f:9b:7c:
         1a:49:8d:86:db:0e:95:f7:0a:46:a1:34:2b:1d:8d:3f:05:0b:
         7d:a6:79:30:ea:ca:8c:62:3f:7f:c4:5f:9f:09:f1:2f:97:e7:
         9d:a5:6d:97:eb:a7:02:5e:1e:c2:a0:05:f5:df:e9:78:2c:4a:
         76:97:8e:54:50:6c:0e:f8:07:98:04:3e:de:59:bf:80:8e:ce:
         63:5a:cf:17:dc:05:1e:73:13:74:43:e2:e7:0d:ec:04:e8:a1:
         34:fc:8d:de:f1:e9:65:2f:7b:df:06:82:54:a2:67:f8:c1:95:
         ec:e5:c3:37:e8:a1:4e:97:8a:76:e1:ab:3b:99:6c:e0:c0:2f:
         22:8d:43:4b:e7:99:65:ab:54:49:21:2f:28:47:99:22:bd:70:
         28:13:74:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:35:41 2026 by rpki-client