Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9108f89c-878f-3fb7-a593-080ca216bb30.roa
File:                     9108f89c-878f-3fb7-a593-080ca216bb30.roa (raw, json)
Hash identifier:          RRz3BI/0K7EAxi6d3b8Iy0IDh/vw38L470QPkIfiOVk=
Subject key identifier:   1F:E9:A6:CB:DC:63:87:F1:96:8C:26:55:E3:5C:69:04:34:0F:DE:CC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D407DAA7660CD8E6F4200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9108f89c-878f-3fb7-a593-080ca216bb30.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.205.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:40:7d:aa:76:60:cd:8e:6f:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=78638b26-a7c8-4835-a0e5-f758002453df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:e2:ec:2c:b0:55:4b:52:06:50:a1:d3:55:
                    f9:d7:b5:ae:6e:f3:58:e8:3a:be:d7:13:ec:ee:d5:
                    8c:f1:03:5e:7c:5e:f1:f3:ef:3a:2d:8e:03:17:fa:
                    1f:a4:4c:94:1c:dd:c9:55:a0:bb:45:cb:ce:5b:1a:
                    94:d9:ef:8f:b2:2d:96:0b:2d:c9:80:1d:f9:35:78:
                    3a:86:fd:f1:44:58:c2:38:2f:5d:5d:fa:f6:fd:26:
                    7b:9e:b0:4d:09:0e:25:1d:9a:9f:5e:fb:f4:35:68:
                    fb:88:21:e1:14:28:4f:8a:63:3b:82:37:62:52:4e:
                    65:99:dd:a6:83:0d:4a:45:d3:24:3f:ea:69:cd:81:
                    cf:fc:06:49:d3:76:fe:c0:cc:bc:c4:2a:2d:4c:4a:
                    f2:79:16:c5:6d:9f:b0:ef:36:61:48:7b:71:04:7f:
                    82:ce:9e:01:37:b8:58:4e:a2:92:ef:16:1f:c0:f4:
                    99:55:43:a7:66:c2:af:0e:96:7d:43:c0:c1:52:30:
                    d4:8d:e9:d7:49:0e:41:77:66:33:eb:5b:82:43:09:
                    79:03:47:f1:de:8a:7f:20:e2:44:d7:be:e2:11:22:
                    6c:a0:3c:8d:81:82:a7:bf:72:84:35:04:9b:51:cb:
                    f9:cb:26:97:71:23:09:69:e5:80:3f:e2:b0:80:ea:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:A6:CB:DC:63:87:F1:96:8C:26:55:E3:5C:69:04:34:0F:DE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9108f89c-878f-3fb7-a593-080ca216bb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.205.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:94:40:21:a7:98:32:56:d5:29:47:9e:94:44:cf:21:d7:
         7a:16:84:6e:57:e8:54:34:97:87:a6:d5:66:0c:91:03:1c:fa:
         d1:ec:7b:6f:7f:17:52:ba:e3:33:e3:ef:0c:1f:4f:44:46:0e:
         82:62:df:62:92:2c:14:4d:a8:fa:fa:b1:05:a7:94:5a:a5:87:
         a4:7a:1f:2b:a6:41:64:fe:7c:37:2d:ac:61:bf:a7:ac:f0:21:
         bd:ea:d9:2c:fe:ef:b4:d9:d4:a8:62:45:1d:07:77:08:48:ae:
         10:87:3a:a2:ef:40:ca:76:aa:29:44:66:b3:fd:de:7b:8f:00:
         52:34:ae:15:c3:8e:49:49:84:9b:5b:7f:83:27:8f:dc:cd:20:
         36:6a:43:a2:04:82:8c:07:8a:cf:f4:d8:1a:e9:b8:b8:f9:c9:
         14:98:28:ca:4a:a8:5d:3e:f6:ef:76:4f:96:90:44:47:86:b0:
         d3:c0:d4:b4:5c:8f:d8:08:8c:9f:5b:15:23:ee:a4:42:05:21:
         73:fe:97:3d:aa:f6:ee:08:6d:88:fd:35:66:3d:b5:10:39:09:
         9c:8b:af:48:5e:12:80:ab:8b:99:33:3f:14:3b:96:32:c6:e7:
         71:cb:e1:f8:43:8d:e7:9e:bd:4b:67:34:da:57:e1:b1:c1:5d:
         9d:43:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:36:03 2025 by rpki-client