Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d547d0c-3007-333b-af0d-d87f36ed2518.roa
File:                     8d547d0c-3007-333b-af0d-d87f36ed2518.roa (raw, json)
Hash identifier:          EL3IXsTUkkZ1QfVNekfxOiABw5xoEuoO4n02GbEZcEY=
Subject key identifier:   A8:1D:97:DE:FE:98:2B:F0:F4:09:FD:82:F5:04:8F:CF:DD:07:EF:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAC8CF073305A60C933500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d547d0c-3007-333b-af0d-d87f36ed2518.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.179.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:c8:cf:07:33:05:a6:0c:93:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1b06f63d-49b9-47dc-b605-a3c67c781fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:de:37:9c:25:fd:e6:23:a7:23:d1:19:c8:
                    54:13:37:02:40:2d:bc:a3:79:43:2d:73:2d:62:36:
                    73:29:f2:b0:76:63:48:0a:24:7f:23:d8:e1:ff:91:
                    bf:7f:57:bd:b6:b0:52:84:3f:99:e3:27:cb:23:f5:
                    f8:79:02:9a:5c:f0:01:ba:4d:1c:25:d8:04:1f:24:
                    98:a0:0c:1b:f1:7f:29:a4:b9:de:10:5b:f8:e3:5e:
                    18:6d:10:0e:ab:ce:92:d5:c2:7f:21:40:7f:d4:f3:
                    68:5c:29:c3:6f:a9:40:7d:9a:a8:ef:ad:92:06:62:
                    47:e6:53:80:7b:9e:c3:7d:41:15:fe:7b:e1:e8:26:
                    fa:83:7e:c6:7d:80:32:0c:1a:05:7c:1e:03:80:24:
                    57:df:06:77:6f:ae:4d:ab:62:45:0e:e6:f8:47:11:
                    cc:08:44:af:51:5e:04:b9:2d:e0:df:72:e7:b0:c3:
                    a0:1c:79:58:b1:f0:d4:34:e8:07:b8:ef:d6:29:9e:
                    d0:23:88:0d:17:25:24:85:ba:0d:a3:a8:16:f9:ba:
                    5c:b1:3a:f7:d1:0b:e1:1b:f9:b6:f3:cd:02:a1:16:
                    a9:f9:3a:32:02:a8:78:23:89:b8:20:74:95:aa:1b:
                    64:12:b5:f9:02:95:09:4c:3b:bc:f3:1c:0a:e3:6b:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:97:DE:FE:98:2B:F0:F4:09:FD:82:F5:04:8F:CF:DD:07:EF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d547d0c-3007-333b-af0d-d87f36ed2518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.179.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:19:2e:5a:81:a1:9b:dc:b8:65:c9:27:82:97:5e:00:c2:
         0b:70:b0:61:49:3c:12:36:35:cf:8a:75:5b:4a:ba:1d:02:fe:
         fd:13:0b:5a:dd:75:e9:9b:75:7f:c5:e6:5d:3d:26:fe:7a:2c:
         50:e1:e7:8b:c0:4b:46:ea:8b:f2:29:49:e8:78:e6:a2:5b:77:
         0f:61:fb:1b:16:8d:e7:cc:6d:61:32:37:65:26:88:36:ba:8a:
         23:82:e5:26:96:80:26:50:6e:f7:7c:ee:bf:cb:89:a3:15:e5:
         9e:dd:87:cc:4e:58:02:71:93:8f:db:9f:2b:cf:d6:f8:92:8e:
         c9:b6:9d:6f:08:41:33:5d:57:d5:fc:e5:c0:5b:74:dc:f7:1f:
         75:ce:06:e4:00:c0:c4:fa:d2:a3:93:76:03:70:b7:80:db:29:
         e4:30:a9:a8:7e:9d:b1:03:8c:64:b8:8c:e7:35:7f:f9:31:d1:
         97:12:64:15:c3:4e:ed:95:f5:ee:a0:84:0b:87:c0:c6:90:b1:
         17:32:4f:8a:89:67:01:05:5f:ac:5c:2a:19:89:bf:df:3c:fc:
         04:cf:2d:5a:22:98:a7:a4:2e:72:50:c8:36:59:38:f9:83:0b:
         74:99:fb:c2:10:22:1d:27:3e:17:22:70:6a:06:63:7c:a3:b5:
         d6:38:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:36 2026 by rpki-client