Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1a16fc8-c5a8-38fe-be6f-76890cee0252.roa
File:                     b1a16fc8-c5a8-38fe-be6f-76890cee0252.roa (raw, json)
Hash identifier:          KAjdtj2n7a/cu0li3HSjGVFKce4ohiFqg5jmRYwqGzM=
Subject key identifier:   75:32:55:DC:23:35:59:48:09:35:AF:66:B9:1B:71:33:4A:5F:9F:36
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD9216664B1403E5EC700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1a16fc8-c5a8-38fe-be6f-76890cee0252.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.247.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d9:21:66:64:b1:40:3e:5e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8c1534c1-c159-4206-9467-5052e4d8e454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:56:d1:08:61:6d:92:bf:fc:69:3c:66:52:
                    89:4f:c1:00:b0:2f:c5:8c:b9:45:f5:36:ad:0a:18:
                    54:57:bc:f0:e6:bf:c7:87:4f:5d:8e:5b:ce:78:4b:
                    fc:2e:9c:5f:e5:d2:96:68:6e:aa:82:23:cf:06:fd:
                    48:80:2b:53:86:48:1c:ee:24:f4:ce:29:0c:ee:8c:
                    7a:e1:c3:2f:33:23:22:8e:8c:b4:5c:68:7b:03:07:
                    f1:64:41:ec:64:4c:b3:7c:35:e7:90:2f:04:e2:36:
                    0b:03:9e:f9:d0:6d:ba:2f:63:92:b5:8a:f3:37:a6:
                    09:76:ce:65:84:96:00:d6:62:7c:c0:d2:75:08:76:
                    84:cf:b9:df:40:5a:43:f2:17:a3:f2:71:3a:74:be:
                    ee:9e:94:b4:76:f4:8a:1b:f3:67:7d:61:d5:97:bb:
                    1d:87:a6:7f:0d:37:51:df:4e:51:0c:8b:9b:4f:2a:
                    4b:4e:d6:dd:51:33:4f:53:d7:d5:66:eb:d5:e9:a2:
                    c0:a5:28:fa:6e:0e:03:e6:e1:a6:0c:fb:16:f8:eb:
                    f8:69:3c:df:ae:11:56:ff:b3:1d:44:2b:61:84:dc:
                    75:04:e9:37:21:9b:51:3f:81:c6:36:71:ac:4e:b0:
                    ba:bc:51:c7:71:4a:9b:24:13:48:be:9c:22:e0:5b:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:55:DC:23:35:59:48:09:35:AF:66:B9:1B:71:33:4A:5F:9F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1a16fc8-c5a8-38fe-be6f-76890cee0252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:aa:5a:a9:11:fc:e3:79:29:f6:b3:b5:92:b7:a7:b2:f0:
         7b:25:a7:31:f0:46:f0:fc:38:dc:5b:1e:e8:b1:f8:33:7b:60:
         38:b0:09:27:99:53:3b:85:8f:0d:bc:94:60:1c:fd:e9:49:ef:
         cd:e5:19:2f:63:6f:e3:83:81:d3:3c:8d:ef:9d:99:3d:da:87:
         28:08:8f:a6:41:52:69:86:a8:97:a4:ad:4a:99:95:b2:34:66:
         38:32:60:15:53:33:da:3f:cb:10:2b:24:22:3d:07:89:81:27:
         b3:43:12:41:4f:f3:d1:bc:0b:5f:43:cb:c0:d7:da:69:6a:03:
         3b:09:a6:b6:4a:e7:da:ce:25:a1:1f:5a:29:f5:80:9b:a6:94:
         64:e7:aa:13:0a:11:06:3c:90:61:c2:55:19:ee:ca:fb:79:f8:
         44:58:bd:51:f1:d7:d7:ba:37:ee:e5:95:f4:68:fd:34:65:f2:
         c5:3f:58:1f:7a:14:95:62:da:52:3b:80:4d:f7:4a:2b:7f:e9:
         15:38:0e:75:f7:20:1d:27:2a:cc:8e:d2:8d:b1:fd:4e:53:43:
         2a:fe:1c:de:5c:03:8f:19:21:a8:f6:e8:fd:62:47:1e:47:c6:
         67:ca:b2:70:1b:69:62:66:14:63:c9:5a:8b:33:d8:b2:55:eb:
         0d:36:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:07 2025 by rpki-client