Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98361b63-60c7-341e-b817-00443a79a66f.roa
File:                     98361b63-60c7-341e-b817-00443a79a66f.roa (raw, json)
Hash identifier:          o2TIpFFFlrIcRZz60wJNOd4G+oXwmbJHI4VsYlnGje4=
Subject key identifier:   7C:10:6B:CC:64:F2:C7:E8:CA:BF:07:4F:2C:08:A1:77:7B:5F:AA:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D4768B74A79199B88FE40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98361b63-60c7-341e-b817-00443a79a66f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.240.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:47:68:b7:4a:79:19:9b:88:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=76b791a2-e8c7-47d2-9df8-8d92a2f77c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:a8:b3:56:b6:50:bd:16:ba:9b:86:57:33:
                    13:da:65:e3:db:e6:a5:7a:7a:6e:05:08:d1:d9:1c:
                    c7:4e:38:1a:ca:f9:8a:5a:0a:10:9d:b8:f3:0c:49:
                    31:41:1a:34:ba:f1:b5:8a:b0:0a:21:4e:21:57:80:
                    39:ba:8b:75:a3:7a:35:d9:c0:d2:10:b8:cb:52:fe:
                    e3:19:ac:02:46:d6:45:c9:b7:52:26:b1:f8:59:51:
                    75:0c:17:3e:f7:49:59:d5:ba:34:67:30:9b:09:c2:
                    f0:bf:7f:4f:b0:bd:ea:7c:b0:b9:74:b6:3a:4d:f7:
                    e5:49:ee:78:c7:6e:2c:bb:f9:d2:0c:90:f2:86:d2:
                    14:48:ed:18:ed:d2:12:6e:c9:4e:f0:45:63:02:92:
                    f1:f7:26:83:ef:a1:85:b9:82:66:d5:ad:22:de:24:
                    80:00:d4:6e:e4:bc:4a:94:f2:0b:12:b7:1d:6b:59:
                    59:ce:67:aa:c6:cf:16:e8:87:11:0b:fe:89:b5:7a:
                    e4:39:16:8a:34:db:56:18:67:8d:1d:92:32:b0:55:
                    60:a9:f0:11:11:42:0e:35:73:d1:a6:cf:bf:a6:e5:
                    35:08:92:24:38:ce:31:d4:c6:ea:b4:bf:f7:d2:53:
                    5f:6b:89:2f:23:5b:48:ef:d2:47:74:5c:11:69:f4:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:10:6B:CC:64:F2:C7:E8:CA:BF:07:4F:2C:08:A1:77:7B:5F:AA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98361b63-60c7-341e-b817-00443a79a66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:f6:37:1f:d3:60:cd:cb:9f:f0:94:83:b6:dc:43:54:ba:
         88:c0:91:37:1c:d6:97:86:e8:40:2d:48:46:f9:65:63:e9:c3:
         4d:3c:d4:9e:7c:1b:81:c5:96:5f:4f:11:6e:7d:a5:6a:23:53:
         e0:d4:5e:0c:15:2f:f6:a5:b2:63:9d:e4:73:a3:48:af:2a:ce:
         b3:0b:64:ac:85:d3:62:8d:77:5a:1a:9c:3e:c5:6b:70:41:d5:
         53:68:13:41:dd:c7:38:72:b2:78:12:1b:7f:64:04:fa:dc:ed:
         73:c6:f5:8d:82:ae:98:30:50:16:14:18:49:8a:b3:de:36:f4:
         2a:42:10:49:c3:56:34:6e:f7:4d:f0:ba:9a:19:a9:0b:57:02:
         7d:d8:4e:3c:23:5d:e5:b8:82:35:7a:2b:5b:89:3b:30:05:8f:
         44:43:bd:1a:18:ee:a8:a2:2e:3c:a2:9b:21:c3:3c:d1:e9:d6:
         ab:83:29:cc:59:91:f6:36:65:e0:f1:4a:00:55:a0:56:9c:b6:
         e7:69:75:71:5d:1a:02:79:d3:c9:d8:c0:71:d5:70:d0:78:0e:
         20:ac:1d:e4:8d:7d:68:18:31:af:e9:6d:00:dc:8f:8a:13:4d:
         4f:dd:26:04:4d:4b:6c:e4:69:a5:8e:ab:88:d8:e9:bd:cd:07:
         1c:a4:38:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUdot0p5GZuI/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NzZiNzkxYTItZThjNy00N2QyLTlkZjgtOGQ5MmEyZjc3YzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOeos1a2UL0WupuGVzMT2mXj2+alenpuBQjR
2RzHTjgayvmKWgoQnbjzDEkxQRo0uvG1irAKIU4hV4A5uot1o3o12cDSELjLUv7j
GawCRtZFybdSJrH4WVF1DBc+90lZ1bo0ZzCbCcLwv39PsL3qfLC5dLY6TfflSe54
x24su/nSDJDyhtIUSO0Y7dISbslO8EVjApLx9yaD76GFuYJm1a0i3iSAANRu5LxK
lPILErcda1lZzmeqxs8W6IcRC/6JtXrkORaKNNtWGGeNHZIysFVgqfAREUIONXPR
ps+/puU1CJIkOM4x1MbqtL/30lNfa4kvI1tI79JHdFwRafTGYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwQa8xk8sfoyr8HTywIoXd7X6qYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTgzNjFiNjMtNjBjNy0z
NDFlLWI4MTctMDA0NDNhNzlhNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGPBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVB9jcf02DNy5/wlIO23ENUuojAkTcc1peG6EAtSEb5ZWPpw0081J58
G4HFll9PEW59pWojU+DUXgwVL/alsmOd5HOjSK8qzrMLZKyF02KNd1oanD7Fa3BB
1VNoE0HdxzhysngSG39kBPrc7XPG9Y2CrpgwUBYUGEmKs9429CpCEEnDVjRu903w
upoZqQtXAn3YTjwjXeW4gjV6K1uJOzAFj0RDvRoY7qiiLjyimyHDPNHp1quDKcxZ
kfY2ZeDxSgBVoFactudpdXFdGgJ508nYwHHVcNB4DiCsHeSNfWgYMa/pbQDcj4oT
TU/dJgRNS2zkaaWOq4jY6b3NBxykOBo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:59 2025 by rpki-client