Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92b5d18b-961b-3c2d-93c4-db0d5103499b.roa
File:                     92b5d18b-961b-3c2d-93c4-db0d5103499b.roa (raw, json)
Hash identifier:          +Nd2+aow/B4x82qHzYSJ2z9jozB1SUDqyxxwCFJ7pvY=
Subject key identifier:   A5:90:AD:32:BB:B1:9E:07:83:CB:74:8C:7A:E0:D9:69:47:53:C3:5C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD8ADF340683BDF12F680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92b5d18b-961b-3c2d-93c4-db0d5103499b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.196.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d8:ad:f3:40:68:3b:df:12:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6cbf23b4-bb5a-4c72-b7bf-8d63df807c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:b7:59:59:13:75:53:f1:9c:39:53:d3:22:
                    d7:4e:d5:7f:2b:53:40:d9:0f:e4:28:0b:4f:0b:1b:
                    65:3e:c7:9b:df:6b:0b:fd:50:3c:41:30:75:48:03:
                    2c:b0:22:46:c4:74:ae:f1:c2:03:7e:38:83:1f:47:
                    03:72:6c:26:27:5f:41:ea:0c:0b:9e:e1:bc:79:93:
                    c6:fb:b7:dd:e1:e8:5e:2f:0f:34:52:59:ec:64:58:
                    c0:70:70:88:55:06:0c:51:7b:94:81:a9:2f:90:c4:
                    7b:71:37:62:15:ae:3e:27:3e:c7:7d:c1:5b:a0:6a:
                    05:49:59:fa:d5:6f:08:c3:0c:0e:f3:7b:a2:bb:54:
                    8f:84:8b:bd:c7:3e:09:9d:fc:98:3e:a2:de:3e:57:
                    e5:d1:ca:56:11:ad:47:b9:e9:da:34:64:d4:4c:f8:
                    4c:c9:ec:f7:21:e3:1b:d7:20:f4:f7:09:07:4f:b7:
                    fb:07:d4:3c:a0:7a:ca:57:c3:2c:0a:8d:77:c3:17:
                    ba:97:76:6c:e8:bb:27:90:d4:ca:e4:01:01:95:2f:
                    33:ef:a5:d9:d4:cb:69:8e:5b:e5:78:9e:39:a0:2c:
                    3d:8e:37:00:e9:9a:ac:b4:62:27:c7:60:4b:bf:e3:
                    70:a4:55:09:f4:46:db:bf:8e:3c:1f:a4:78:6a:83:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:90:AD:32:BB:B1:9E:07:83:CB:74:8C:7A:E0:D9:69:47:53:C3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92b5d18b-961b-3c2d-93c4-db0d5103499b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:30:a8:f6:01:2e:f2:06:95:a1:18:6b:b2:68:36:5d:69:ca:
         92:52:9f:ad:3d:d0:c3:ae:c5:cd:d7:1a:07:67:fe:5c:ef:82:
         03:68:9b:c9:af:3f:3f:9b:4e:19:a6:dc:56:53:67:55:59:14:
         a1:22:c9:d2:6a:23:70:d8:b8:fc:31:d1:fc:a1:f2:33:c9:67:
         cd:31:37:82:1e:4a:a3:b6:0b:b2:75:10:15:e6:71:24:a4:87:
         46:0c:88:69:3e:94:37:2a:e1:88:49:cd:6d:7d:bb:bd:70:3c:
         fd:1a:86:ed:02:1e:b6:24:9d:25:ae:f6:84:87:89:f0:88:0f:
         ab:fd:52:8a:7f:74:51:83:40:69:5d:b4:55:98:f4:80:1a:70:
         cc:c0:ff:83:9d:3c:eb:ba:89:f5:02:61:20:02:66:0f:b3:70:
         0c:5d:66:13:6d:cf:a6:2a:d5:e9:a7:d3:ae:56:7d:dc:fd:53:
         40:c6:18:a5:04:44:65:e4:9c:09:fd:a7:1d:7a:a1:f8:29:9f:
         a4:41:fe:d1:7e:0d:05:9c:ef:04:e7:6f:c3:a0:9a:5a:be:3f:
         78:b8:83:39:f1:a7:7b:4e:ad:1d:11:18:c5:75:0b:87:3e:f7:
         12:9c:21:19:03:a7:34:ac:03:6e:32:69:7e:b0:8d:29:1a:54:
         44:2b:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:34 2025 by rpki-client