Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3f307cd-57c7-365e-aca9-d47adc795936.roa
File:                     b3f307cd-57c7-365e-aca9-d47adc795936.roa (raw, json)
Hash identifier:          FDo3I/ZjGrTEBjy3Dl0/Z0x3YYbiiCIXgH+K1kuUy9c=
Subject key identifier:   5A:E5:07:07:72:C1:F9:25:FC:FB:DF:2D:15:15:DC:19:9D:00:52:89
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CACDA058EF4E59EDD24280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3f307cd-57c7-365e-aca9-d47adc795936.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.158.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:cd:a0:58:ef:4e:59:ed:d2:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=68b97062-10cf-4a46-8ee1-b7184ea80585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:69:9d:52:b7:18:dd:15:42:50:36:dc:1d:
                    b4:2a:5d:4a:65:29:8d:c9:7a:0c:23:ed:a1:ff:02:
                    23:c6:10:10:71:bb:9d:c6:27:79:45:d7:29:41:57:
                    82:e9:c5:4c:5c:10:d6:47:82:be:c4:11:7c:a4:07:
                    83:23:9e:2a:3a:bd:d7:46:e3:26:ec:9e:d0:6d:b0:
                    dd:1d:af:e7:56:3d:e0:85:20:9a:25:db:20:ac:fa:
                    50:85:80:f7:97:9a:41:8f:60:d8:1a:2a:b5:c9:01:
                    4d:fd:91:05:b7:b6:9f:cb:51:99:c2:78:c7:d8:b8:
                    66:39:04:0c:8f:25:e3:8b:e8:fe:a9:1f:b3:86:45:
                    94:95:42:17:e0:81:45:6a:99:fa:a0:3f:5d:1a:06:
                    e3:b4:2f:2c:39:f8:7c:03:44:94:e1:35:96:79:0e:
                    14:93:79:25:72:da:2a:d8:1a:53:ce:9d:ea:61:ac:
                    e3:8e:2f:47:22:dd:a4:83:bc:da:ac:07:1c:ac:a2:
                    2c:46:4c:1b:82:2a:ad:f2:7c:69:35:40:3f:e0:e6:
                    9f:40:a1:b8:1b:42:83:7b:04:ae:3d:f9:23:e9:da:
                    d0:8d:f4:d9:c3:be:ce:36:6a:43:93:c8:ec:52:76:
                    26:d3:b6:34:cb:f4:36:23:3a:40:94:e7:78:df:47:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:07:07:72:C1:F9:25:FC:FB:DF:2D:15:15:DC:19:9D:00:52:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3f307cd-57c7-365e-aca9-d47adc795936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.158.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:14:f0:62:56:5a:1f:fd:b8:fd:49:dd:6c:e5:ad:6e:1e:bb:
         ba:2f:6d:7d:ed:81:1d:27:ee:79:dc:04:00:d7:3e:9b:89:70:
         f4:0d:9e:30:91:94:26:56:04:41:6f:44:6c:d4:9c:a1:e0:c9:
         e9:0b:fe:18:79:f3:5b:76:b5:c5:85:3a:38:10:0d:a6:2c:cd:
         de:4b:a7:77:d1:cb:52:c5:d2:6f:65:00:75:53:b6:a0:0d:50:
         dc:9f:32:cf:63:24:c8:73:41:c9:f8:bd:27:d6:e7:f7:2c:7f:
         d9:09:94:55:de:43:da:96:2e:9e:c8:74:b1:ba:a7:be:1b:5a:
         52:b9:3d:e4:30:52:73:a9:1b:17:f8:56:f1:c9:2c:f3:8f:d0:
         ce:9f:f6:b3:be:b9:77:0b:2b:74:85:8e:f8:c0:cc:b2:31:34:
         be:84:8c:94:f0:75:4f:2f:3f:60:c9:74:1e:84:07:8d:8f:e9:
         69:86:91:49:24:bc:04:a0:54:f6:1b:c2:30:e8:7b:80:b4:a7:
         3f:00:4d:df:d7:02:0d:60:03:d9:75:47:90:30:74:19:55:d4:
         68:f2:44:f3:eb:50:ce:df:3b:7c:b4:c1:bd:ba:ee:2f:e9:ad:
         7b:4c:89:da:70:6c:e7:83:59:a0:9a:c3:40:71:15:e8:f1:33:
         db:af:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:39 2026 by rpki-client