Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b495c0-ce23-3e9c-ac1c-652f5322c137.roa
File:                     89b495c0-ce23-3e9c-ac1c-652f5322c137.roa (raw, json)
Hash identifier:          sFWPgcYaBkMQHXCmEsDFOuZyaWgqstWG+ycaCa/ROaQ=
Subject key identifier:   1C:D2:B4:C5:AB:2E:39:30:E9:3F:F9:75:00:16:FA:5C:ED:86:19:9A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDB5DDA84D0732C3573C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b495c0-ce23-3e9c-ac1c-652f5322c137.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.196.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:db:5d:da:84:d0:73:2c:35:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=9c723b7f-766e-41ae-be3b-b0dbea5ff8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:80:b2:b6:2c:05:e0:d9:ee:da:0a:22:15:
                    06:d3:ac:51:74:24:72:8b:4a:d8:cd:80:b7:48:74:
                    ce:59:22:2a:aa:a6:4b:4b:e2:64:96:60:a1:2d:ae:
                    35:35:b1:5e:ae:92:69:e6:92:11:59:17:7c:81:7f:
                    80:1c:6b:fb:d2:1b:c3:19:4e:f0:49:46:62:b6:94:
                    8d:01:3d:51:f8:05:18:21:6e:5c:f0:2a:c7:95:21:
                    db:1d:d6:77:e5:4f:e5:4b:ea:d1:1b:30:24:31:2f:
                    13:99:4a:5a:c4:c1:31:45:9f:39:2e:13:2e:42:3e:
                    04:88:d9:42:07:a9:e7:8e:39:03:c3:5e:d2:cd:31:
                    f0:47:8c:54:df:d8:e0:6f:5d:03:5b:e6:4f:cc:34:
                    21:a4:83:18:80:ac:05:26:d8:ce:f3:7e:81:f9:75:
                    03:80:60:c9:dc:4c:ce:9d:23:68:bd:99:6d:62:6e:
                    98:aa:62:ec:e6:69:9f:9e:4b:76:01:9c:50:d0:9f:
                    bc:9b:f9:43:67:1f:84:2b:8d:f3:05:66:f8:f9:e4:
                    a9:d5:ea:f3:1b:fc:02:77:4f:0c:5c:96:30:a7:7e:
                    94:20:88:c8:80:2e:ce:e8:e5:da:f1:c8:cc:a6:e9:
                    56:1d:64:d6:d8:9e:dc:fc:37:41:bc:99:1b:e9:6a:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:B4:C5:AB:2E:39:30:E9:3F:F9:75:00:16:FA:5C:ED:86:19:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b495c0-ce23-3e9c-ac1c-652f5322c137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6d:e5:c0:09:1e:de:77:a5:4a:8b:cc:b9:e8:5b:ee:ae:5f:
         cc:e9:3b:5e:7b:ad:a9:5a:9b:e2:64:28:9f:24:e9:fc:4b:a5:
         fd:13:27:79:f9:d1:92:7e:89:2d:0e:23:03:6c:18:63:ce:0c:
         19:a7:7e:c8:bf:96:1c:7c:8f:86:ce:45:eb:fe:36:12:8c:44:
         0a:e2:3c:89:dc:b8:36:0c:dc:b7:9f:b1:68:cd:d3:5a:8d:8d:
         37:ea:fe:ec:ef:84:27:85:90:9e:7e:6c:c4:42:f8:d9:35:f3:
         fc:02:6e:8b:c8:d6:32:17:87:5f:b3:b8:7c:4f:df:12:57:14:
         b9:15:d9:e9:28:f9:76:72:6c:47:76:1f:5f:89:21:bb:ea:e0:
         ed:b3:f7:17:48:01:1b:41:2c:13:09:9b:02:dd:03:8d:08:32:
         8d:b8:8e:ed:a9:86:22:5f:6e:dd:4f:1b:75:3b:55:c7:88:ba:
         33:d3:5c:37:34:15:f0:5d:64:d3:50:f1:3e:df:1b:15:69:26:
         27:bc:12:4a:10:7d:65:f3:00:e2:d0:bb:e0:56:28:d4:c8:f1:
         38:a9:3e:d4:e9:ee:2b:bd:9a:af:88:af:b4:0f:39:7f:fb:97:
         fb:73:3f:1d:0c:c5:2e:91:7d:ee:a0:f9:98:2a:25:1c:fe:1c:
         eb:a8:3b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:53 2025 by rpki-client