Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa
File:                     b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa (raw, json)
Hash identifier:          xCikDCt1bKWpgvd6UN7D7v/e6gfxeXuTHCZmH57aAzM=
Subject key identifier:   77:EB:AD:A5:12:95:10:FB:15:54:6F:64:0D:7B:C4:F4:1A:15:8B:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DCFDC1C1FF06FFA60F180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.231.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:cf:dc:1c:1f:f0:6f:fa:60:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=068c9142-180f-4537-aa68-ecd838ccfe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:17:0e:fa:1e:1a:39:a1:2d:49:d7:3c:5a:
                    eb:f8:47:aa:ad:61:c8:ba:43:1f:3a:46:3e:48:0c:
                    b5:10:d8:e8:6f:58:ba:ae:cf:8d:a1:35:72:14:47:
                    28:6f:9e:bc:f7:86:27:68:e6:d7:38:8a:eb:d0:b7:
                    29:1c:b2:64:c7:7c:0b:04:56:84:ed:d5:48:f3:42:
                    eb:4e:10:3f:9c:d1:e9:42:c1:2f:e2:01:8b:a1:b3:
                    0c:28:99:db:1f:9c:e3:a5:b4:e7:01:ec:d2:5f:3e:
                    4a:8f:fa:1d:de:da:98:47:cb:f0:69:19:c7:ed:6c:
                    2a:ce:58:a2:89:dd:5f:55:41:0f:54:da:a7:b0:8f:
                    d7:67:d5:8f:c1:2e:97:43:b5:21:4d:72:ae:8b:8a:
                    3c:d1:25:22:85:83:88:93:1c:0d:c6:c8:64:80:0f:
                    f8:83:7f:ea:87:60:aa:20:11:ec:bc:a5:a1:6a:53:
                    39:a0:aa:a4:0a:22:65:23:4f:fa:fb:b4:a8:ac:84:
                    c7:a6:d8:6d:d7:ef:0d:70:d0:60:c0:f5:35:e5:45:
                    53:89:54:fd:cf:33:03:5e:cf:2f:98:4d:a1:e7:ed:
                    c4:c4:e7:e5:8e:ba:f2:0b:fc:24:26:df:21:7d:0f:
                    8d:1c:cb:79:19:2d:24:55:ad:12:4f:36:36:a3:06:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:AD:A5:12:95:10:FB:15:54:6F:64:0D:7B:C4:F4:1A:15:8B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96d5355-f29b-3299-aa29-a1c05cdf5eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:67:37:dc:97:92:0e:76:dc:c7:d5:a1:5b:7d:f2:07:5a:
         8f:66:29:f4:20:7f:b7:c3:f8:e2:78:29:4a:c5:ca:9c:b3:7d:
         55:43:f7:37:eb:39:45:60:8c:8a:d2:8b:69:cd:bc:11:18:4f:
         19:79:b3:fc:1b:c9:83:64:ba:b4:51:bf:5d:41:58:f7:68:7b:
         7e:95:fa:38:52:07:48:8e:9d:66:0f:0c:41:32:6a:45:e7:14:
         99:de:e7:e5:37:a6:97:8e:b2:9f:ee:06:9a:c9:8a:cb:8a:d8:
         2b:e0:2e:87:5f:8d:7f:31:7a:27:b2:cc:f0:0b:18:6f:d3:6d:
         87:ab:09:f9:ca:ac:69:3e:b3:cb:9f:d1:a9:6f:be:4a:39:7e:
         3e:59:d3:48:27:a8:6b:ce:c6:00:ef:c3:95:90:ea:39:6a:60:
         0f:91:cc:04:3b:03:59:d0:89:1a:59:46:a8:74:d6:4e:f3:be:
         83:57:52:20:d2:6f:73:e9:77:4e:bb:89:ff:d2:d6:16:2d:f7:
         2e:d8:dd:bb:bb:3a:0d:c1:29:df:dd:a8:a7:1a:fd:e9:77:c9:
         6a:34:59:5c:c0:65:4e:56:80:10:b0:7d:f6:5a:7d:c7:80:39:
         eb:16:36:23:bd:6c:91:fe:a9:1c:2a:73:c0:86:d6:e5:f9:6d:
         b5:a9:b6:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHc/cHB/wb/pg8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MDY4YzkxNDItMTgwZi00NTM3LWFhNjgtZWNkODM4Y2NmZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdkXDvoeGjmhLUnXPFrr+EeqrWHIukMfOkY+
SAy1ENjob1i6rs+NoTVyFEcob56894YnaObXOIrr0LcpHLJkx3wLBFaE7dVI80Lr
ThA/nNHpQsEv4gGLobMMKJnbH5zjpbTnAezSXz5Kj/od3tqYR8vwaRnH7Wwqzlii
id1fVUEPVNqnsI/XZ9WPwS6XQ7UhTXKui4o80SUihYOIkxwNxshkgA/4g3/qh2Cq
IBHsvKWhalM5oKqkCiJlI0/6+7SorITHptht1+8NcNBgwPU15UVTiVT9zzMDXs8v
mE2h5+3ExOfljrryC/wkJt8hfQ+NHMt5GS0kVa0STzY2owb8kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfrraUSlRD7FVRvZA17xPQaFYuSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjk2ZDUzNTUtZjI5Yi0z
Mjk5LWFhMjktYTFjMDVjZGY1ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGOeQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2DZzfcl5IOdtzH1aFbffIHWo9mKfQgf7fD+OJ4KUrFypyzfVVD9zfr
OUVgjIrSi2nNvBEYTxl5s/wbyYNkurRRv11BWPdoe36V+jhSB0iOnWYPDEEyakXn
FJne5+U3ppeOsp/uBprJisuK2CvgLodfjX8xeieyzPALGG/TbYerCfnKrGk+s8uf
0alvvko5fj5Z00gnqGvOxgDvw5WQ6jlqYA+RzAQ7A1nQiRpZRqh01k7zvoNXUiDS
b3Ppd067if/S1hYt9y7Y3bu7Og3BKd/dqKca/el3yWo0WVzAZU5WgBCwffZafceA
OesWNiO9bJH+qRwqc8CG1uX5bbWptr8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:35:52 2025 by rpki-client