Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c4781732-ff03-36fd-a4ac-43f403ad6153.roa
File:                     c4781732-ff03-36fd-a4ac-43f403ad6153.roa (raw, json)
Hash identifier:          Pm8qgToUaKtMGmk1+Bl72mh8evHchT9ZuKLc8FL1G6k=
Subject key identifier:   DD:0F:E5:DA:60:DF:06:11:0C:DC:E5:0B:E4:11:98:E6:12:CF:CA:03
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD9311D436B5DEEDEB7C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c4781732-ff03-36fd-a4ac-43f403ad6153.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.247.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d9:31:1d:43:6b:5d:ee:de:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a0ea2441-cdc1-49e8-a0df-53ee934498c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:94:28:b1:e1:0d:4d:3a:7f:c0:96:47:cb:
                    20:e3:26:79:26:21:35:60:67:cb:c1:2f:da:cd:0b:
                    27:71:18:60:7b:0b:dc:26:ef:1e:f0:89:9b:91:16:
                    15:12:f4:fa:6b:ae:f6:ae:b3:73:20:80:62:95:46:
                    c3:0f:53:10:56:70:2f:57:94:ce:be:00:2d:ef:b7:
                    0e:b7:67:e6:a8:e5:a9:d5:01:88:3d:5c:b6:99:22:
                    1b:13:9b:a3:93:22:11:55:e4:f3:a5:99:50:10:12:
                    b2:2e:17:38:ca:2f:4c:d5:3b:35:20:37:a6:db:41:
                    1a:00:4a:e7:cf:de:bc:45:45:c4:85:e3:02:2c:aa:
                    49:aa:46:15:07:f0:90:3c:bc:50:e4:7b:b2:4b:bf:
                    3e:45:f1:0f:f1:8b:40:fa:e5:dc:aa:d2:25:8a:11:
                    6e:6f:39:35:e1:6b:96:f4:88:92:fd:0f:9b:0a:3f:
                    7a:18:75:1d:c5:a8:d9:24:ca:2b:cd:01:44:a0:e4:
                    ed:68:9f:6f:87:0c:d7:09:b2:d2:57:72:59:90:36:
                    5d:98:17:e4:a4:a6:b8:cf:67:07:cb:f2:d8:a9:da:
                    3c:cf:ec:ad:b9:87:30:eb:dc:33:2e:7b:e2:bf:19:
                    c3:2c:b6:78:00:64:a1:1c:41:a9:eb:5c:1e:6d:c7:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0F:E5:DA:60:DF:06:11:0C:DC:E5:0B:E4:11:98:E6:12:CF:CA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c4781732-ff03-36fd-a4ac-43f403ad6153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:e4:7e:eb:02:69:e0:32:c3:ef:c5:3e:b8:46:63:7d:6e:
         26:b1:1a:ce:ee:99:bf:a2:1a:b1:ad:aa:5b:92:2f:8b:8f:2d:
         24:7d:0f:5c:7b:ef:d2:67:20:a6:bf:36:38:65:b3:24:a4:03:
         ea:f4:ae:e2:8d:41:27:6c:70:6e:96:ef:d5:69:6f:37:30:56:
         e3:9d:59:0e:ae:05:00:0c:df:c6:41:cd:fa:80:cb:4b:c9:bb:
         4c:2e:d8:7a:31:24:fe:2b:c6:17:dc:af:f4:92:6e:71:10:56:
         8b:bd:c6:42:2b:c4:34:f9:8a:1c:c0:74:7c:04:0a:12:ba:f9:
         85:21:bc:db:91:42:46:2b:a0:c7:ec:ea:4b:57:78:1f:78:0a:
         31:0c:a4:bc:01:d7:77:5a:23:90:53:9f:10:c6:3d:f6:99:83:
         20:1e:00:ee:79:a9:e3:25:b0:16:22:db:60:0a:9c:c7:9b:af:
         1e:5d:13:2e:b9:95:67:8b:f6:2e:32:b8:21:43:92:73:b1:65:
         70:7f:b8:b9:32:48:fa:7e:b9:45:bc:cd:ac:48:a7:68:2e:c1:
         99:3d:27:87:3f:2a:e9:d8:e8:7a:1e:9b:4a:26:5e:ef:3c:b7:
         76:6e:e7:22:03:7e:83:a3:6a:29:e1:fc:44:64:fc:73:5f:5c:
         80:3b:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:35:35 2025 by rpki-client