Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9511c6fe-a532-3015-8849-3639fb0b6a2f.roa
File:                     9511c6fe-a532-3015-8849-3639fb0b6a2f.roa (raw, json)
Hash identifier:          U9Mqlpu8oNWC0qa9uD+omQDsP5smLMMjqvHMaOmSGQg=
Subject key identifier:   58:9D:C4:5C:49:E6:B1:08:FF:E3:3C:A9:09:B6:D6:F2:DE:64:AE:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAB2C1115394AB0DFC1D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9511c6fe-a532-3015-8849-3639fb0b6a2f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.236.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:b2:c1:11:53:94:ab:0d:fc:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=04b6494e-9795-4d67-a0a8-e9a3edde780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:95:bd:07:be:4d:0e:41:81:34:1c:f9:2c:
                    9e:99:a7:0b:90:cd:46:f5:a4:ec:e8:b2:90:c8:18:
                    7b:14:41:17:77:1d:5a:ee:0a:90:5c:8f:63:96:d4:
                    b2:05:25:ec:75:3f:69:00:29:35:6b:1a:16:0f:a5:
                    f7:94:e3:b8:2c:8a:67:27:ee:84:89:b5:22:43:cf:
                    ce:f3:8d:54:24:22:6f:43:f9:a8:f8:bc:b2:a0:5a:
                    8b:27:bc:72:8c:ef:c8:d3:80:e4:96:01:a4:c4:46:
                    9f:b2:08:9d:b1:e2:de:61:48:ec:96:14:dd:96:d8:
                    8c:de:12:c3:b1:e5:c7:07:e2:0f:fd:23:f4:f7:23:
                    62:23:a2:33:89:4c:46:ec:f9:8b:cc:d5:d8:e9:51:
                    af:e0:35:1c:2c:69:c5:e4:9d:91:df:77:7b:71:e0:
                    4a:6b:a1:68:f7:e8:dc:90:1d:0a:62:f9:90:72:59:
                    90:f5:c4:40:de:cd:21:e4:ea:37:e2:37:81:77:3b:
                    fc:fc:61:43:11:4c:b9:60:ec:be:e3:e2:53:72:a4:
                    5f:b7:f8:75:3e:04:22:eb:8d:d1:ed:2d:c0:f2:df:
                    e9:13:b6:8e:f7:97:96:d9:31:b0:b9:db:9b:ed:ab:
                    74:67:52:89:97:14:2f:46:ba:59:ae:ab:df:74:fd:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:C4:5C:49:E6:B1:08:FF:E3:3C:A9:09:B6:D6:F2:DE:64:AE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9511c6fe-a532-3015-8849-3639fb0b6a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.236.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:5a:68:16:a6:d0:d0:50:76:12:ec:63:7a:10:99:76:e0:c5:
         89:64:15:6b:fb:71:3a:dc:b5:30:5f:83:44:7a:25:92:2c:a7:
         c1:72:a9:f3:56:d3:df:20:cc:f8:73:5e:f0:e0:1c:f4:8f:7d:
         b1:92:be:de:38:8f:12:98:f6:29:7b:b6:96:3e:20:e0:ce:df:
         00:60:ab:92:74:18:5e:fb:a4:06:9b:26:e2:38:d9:7e:d7:d1:
         ba:bc:6b:08:d5:7f:03:f1:26:25:4d:27:81:48:5f:52:cc:7a:
         b1:09:67:17:46:d8:75:4a:f3:e4:0a:71:45:23:9d:dd:82:ac:
         c8:fb:cf:a8:3f:f3:d6:af:8a:c5:b3:0b:10:3d:4f:5f:fb:c1:
         1e:47:37:d3:3a:78:53:6f:e0:76:75:6d:c9:af:05:c7:5b:3c:
         88:40:13:ea:ca:18:f7:74:9c:d4:45:f9:ed:38:0e:7b:db:e1:
         46:a9:f5:b1:53:fb:c6:62:ed:a1:f9:d3:3b:1f:62:13:5a:3f:
         54:a6:99:ba:bb:52:ae:d8:6f:d8:04:28:43:4d:22:5b:09:b3:
         b2:e3:9b:eb:1e:04:f6:d6:67:60:07:fb:25:a9:5d:ee:60:1b:
         2b:86:ef:5b:3d:53:0a:1c:bf:fb:72:1d:c3:e5:9c:f1:a6:f0:
         ea:66:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:00 2026 by rpki-client