Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9158615a-ae68-377a-a9da-3e5619d77a7f.roa
File:                     9158615a-ae68-377a-a9da-3e5619d77a7f.roa (raw, json)
Hash identifier:          WvZCtaG7hM/909gEqpCyB4FrcpOanC2nY1W5XEtrMNQ=
Subject key identifier:   4B:F3:AE:22:91:65:D6:8F:A9:11:9F:F0:3F:EA:35:C5:D9:6A:B8:09
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAAF6A250B02342DA0A254
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9158615a-ae68-377a-a9da-3e5619d77a7f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.107.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:af:6a:25:0b:02:34:2d:a0:a2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4e08d09d-bbfa-4acc-a75a-9e6e1da971fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:7f:9c:5a:30:3f:c7:5b:38:91:ff:f1:00:
                    c4:4b:48:a0:d9:ab:61:68:2e:55:f0:08:e7:3f:47:
                    90:cc:bf:a1:16:23:31:94:05:2a:4d:5f:66:8e:c9:
                    74:26:8c:e2:57:e7:48:15:20:9d:88:94:56:0b:9a:
                    30:00:b8:8a:ba:33:9a:3e:4d:0d:17:5e:43:2d:66:
                    3e:e1:54:79:fd:fa:4e:b8:dc:8f:51:ad:1b:e9:ff:
                    e3:6b:c6:04:86:09:f6:03:63:b6:09:7e:dd:e3:91:
                    5b:ce:0b:2a:13:c2:ef:8d:05:94:23:4b:34:f0:1f:
                    a8:c9:02:c7:ec:60:86:06:f0:00:f2:f2:3c:fa:29:
                    e7:fc:aa:7b:0b:a0:30:98:87:a5:df:e4:12:a3:71:
                    d0:39:a9:8a:dc:ef:a4:bd:8b:b3:90:48:0c:ca:1a:
                    9d:a0:02:9e:3c:e4:7f:00:08:44:2f:5a:77:04:43:
                    a0:06:a0:10:c9:51:83:32:3e:5e:76:62:df:4b:7c:
                    02:21:6a:51:45:24:90:6a:1a:c0:d0:4f:2c:57:8e:
                    f8:0e:e4:c2:00:b5:3f:ed:05:0e:ff:44:0b:9d:51:
                    7f:6f:f3:03:97:79:07:ec:ba:4c:54:c0:f6:77:bc:
                    02:ba:fd:39:5b:dd:b8:69:a3:52:fc:c3:89:35:6d:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:AE:22:91:65:D6:8F:A9:11:9F:F0:3F:EA:35:C5:D9:6A:B8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9158615a-ae68-377a-a9da-3e5619d77a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.107.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:5c:a2:6e:17:3f:8a:e0:6b:4f:a0:3c:77:87:bd:8f:97:
         36:4f:a3:7f:25:f5:06:b7:4f:40:0d:2c:d0:da:08:b8:14:41:
         00:90:12:ab:58:49:6b:69:ac:4a:06:92:59:31:69:25:56:95:
         a0:1e:11:39:6d:01:3d:1d:53:63:6b:a9:45:1a:51:da:b4:c9:
         62:88:ec:c4:b5:51:52:b9:b0:3b:9b:da:62:8e:a5:69:80:a7:
         a3:e4:35:df:9a:26:c3:ab:38:fe:8b:66:bd:df:57:a8:c5:29:
         65:a6:90:ae:88:29:f7:cb:27:5d:d6:05:41:7b:d9:0f:24:38:
         70:46:7d:13:93:ae:b8:81:ee:d2:91:e1:c4:1c:7a:4b:99:bc:
         76:a5:11:2a:93:d6:df:e3:d1:38:4a:7e:de:97:59:72:24:7b:
         9c:af:04:35:6d:5d:ce:0b:c9:85:75:88:86:08:95:bf:f6:a9:
         72:3a:e9:8b:be:36:22:8a:e1:99:07:1c:e2:5d:0c:ea:36:a7:
         1b:7f:5b:7b:e4:06:d8:fe:6b:a2:ee:38:cb:f8:51:42:51:32:
         66:49:42:47:96:39:6a:81:04:18:37:d9:06:86:34:de:9f:b0:
         c5:d5:16:3a:c1:e8:84:7b:96:5b:a8:53:db:9c:38:2b:94:ca:
         b3:ff:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:11 2026 by rpki-client