Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c6b762d-03ff-3299-aafa-fad53220cd8d.roa
File:                     7c6b762d-03ff-3299-aafa-fad53220cd8d.roa (raw, json)
Hash identifier:          o2qcyh1r23A96V9l5Qqn6eUfBlxMbieKL39Ll8tvehs=
Subject key identifier:   F0:38:D7:56:E3:42:16:56:45:A8:8F:70:A3:70:C8:AE:F6:F6:7C:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD8FFCD2B53387482C180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c6b762d-03ff-3299-aafa-fad53220cd8d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.231.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d8:ff:cd:2b:53:38:74:82:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=709c69cb-cede-4563-9ede-333b18a7f39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:e7:30:d8:72:0c:86:75:8e:36:82:28:02:
                    21:50:ef:7b:3d:32:fc:dc:bf:50:85:6d:36:e0:05:
                    65:41:9b:26:65:eb:22:6e:fd:41:a1:73:b1:f3:43:
                    b3:6a:68:ee:ca:e8:eb:43:ce:61:ca:1a:a0:91:ad:
                    55:13:41:33:8c:2d:c7:48:a7:d3:6c:4a:81:ec:a4:
                    e6:1e:d6:f9:c7:c8:d5:97:83:22:0a:3a:47:eb:96:
                    ba:f4:f6:ac:04:32:81:80:b2:9f:3f:76:0e:94:00:
                    f9:bd:3f:2c:6c:35:d4:a5:f2:ec:80:c4:75:0e:5b:
                    34:25:f7:03:2c:1b:09:62:c4:fc:bd:dd:13:7c:a9:
                    e5:6b:f6:6d:13:f1:0f:78:d2:5f:19:ce:cb:12:a1:
                    ed:72:31:02:9c:da:85:17:04:4d:df:62:7b:6a:40:
                    91:59:c8:40:00:87:f4:fe:51:d8:ad:cb:0e:8d:e8:
                    68:e4:71:9b:97:08:b8:5e:4f:8a:32:c3:47:b7:29:
                    89:f9:66:42:f7:30:e2:85:cf:e5:9a:0b:a6:6e:9e:
                    e4:ef:dc:ce:ba:7f:86:18:26:c3:ce:ac:53:8f:09:
                    42:89:b1:d1:c9:d1:f2:d7:56:06:da:78:0e:91:8e:
                    88:d2:46:89:b2:93:ce:e6:28:22:0a:93:ff:c3:2c:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:D7:56:E3:42:16:56:45:A8:8F:70:A3:70:C8:AE:F6:F6:7C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c6b762d-03ff-3299-aafa-fad53220cd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:40:c8:8e:7c:8b:8b:10:85:e8:b3:50:f6:97:11:16:96:
         4e:db:91:e0:b9:2c:05:a5:6a:8f:b2:c9:68:df:89:72:f4:71:
         67:21:1c:96:55:76:8a:ec:b0:b3:3f:c4:8d:8e:d5:87:93:76:
         f2:d9:a5:62:b0:cf:f5:57:be:66:71:83:f4:34:95:27:97:6e:
         b2:d4:ea:9e:7c:20:9e:23:4d:07:02:c3:57:12:72:80:70:16:
         1b:14:05:02:f6:dc:c5:ac:11:12:58:b6:f7:9d:52:61:f5:2b:
         4f:30:b3:e5:cf:80:3a:4f:03:aa:94:e1:09:8a:09:12:97:be:
         70:fb:af:09:6b:52:b2:78:a7:ad:ed:24:f6:ee:35:67:e2:98:
         f3:ef:b9:9b:cf:43:5b:4e:0f:12:90:f4:55:6f:3b:2e:87:10:
         83:b7:39:3a:11:82:ec:80:7c:04:47:36:a6:68:62:e2:34:ed:
         70:39:76:07:14:f8:73:59:6f:23:ac:77:80:d4:8b:db:5a:14:
         e1:a3:b3:85:fe:e7:01:79:b0:db:92:d3:b2:e1:60:34:21:f3:
         98:91:a2:2a:8b:dc:d2:e9:3f:65:15:21:31:5a:ce:1f:f7:21:
         17:d7:34:42:76:ad:a6:fa:bd:61:7b:c0:54:a0:e7:bd:b7:36:
         ee:fa:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:52 2025 by rpki-client