Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8e319c8-8b10-35b9-83a3-d6f30decdf6c.roa
File:                     c8e319c8-8b10-35b9-83a3-d6f30decdf6c.roa (raw, json)
Hash identifier:          MInmq3KqbZd9VDMLYHMSeNYdA9NnuEHDOU1g9/OewMU=
Subject key identifier:   5D:49:FB:20:C2:35:CD:A5:73:B4:2A:15:68:5C:D5:79:2D:17:5D:3E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB6BC83D2BB7D8B032D500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8e319c8-8b10-35b9-83a3-d6f30decdf6c.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.182.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:6b:c8:3d:2b:b7:d8:b0:32:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c3feea66-cfde-4bbc-bf91-8c568fbeb137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:7d:f6:a2:f1:6f:5b:9b:9d:aa:5d:e6:06:
                    5c:f2:7a:82:63:41:39:14:ae:93:80:d2:3b:4b:39:
                    94:19:89:4c:bb:45:07:78:48:8a:c2:84:2d:92:04:
                    4b:ce:9d:a6:e3:52:16:dc:50:02:46:81:18:ad:43:
                    2a:04:1e:a6:eb:bf:d7:04:51:04:f4:38:7d:1d:c8:
                    ae:16:a4:54:fd:90:d0:a5:9f:78:38:e4:fb:a8:a9:
                    02:e6:69:88:ec:d1:4d:58:17:44:f1:b1:f3:81:cd:
                    ac:06:45:1a:f3:55:0e:ec:61:d2:4c:41:54:1f:bb:
                    73:05:a8:32:dc:df:d7:c9:d2:c2:89:e2:e3:0b:0d:
                    2d:64:13:58:50:db:12:24:70:7f:db:85:e4:5d:23:
                    16:1d:97:6b:4f:6b:b5:20:2c:85:ba:14:e7:a2:11:
                    b5:c0:a4:69:4e:04:20:d4:e6:c8:7c:ba:3d:94:04:
                    23:30:1f:ee:95:9b:3c:06:cd:12:80:96:9e:4d:a3:
                    21:a4:e8:26:f2:af:85:e5:89:86:d1:82:6a:fa:ee:
                    a2:af:4c:b5:c2:b8:93:84:6c:e7:36:86:be:f0:b1:
                    6e:f6:df:4c:7a:fe:7a:19:b9:ee:20:04:b3:de:18:
                    27:fe:19:70:52:d9:fc:16:65:f6:4a:27:09:a3:72:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:49:FB:20:C2:35:CD:A5:73:B4:2A:15:68:5C:D5:79:2D:17:5D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8e319c8-8b10-35b9-83a3-d6f30decdf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.182.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:da:b6:f0:54:eb:dd:ce:13:be:8c:33:99:60:74:08:1d:
         24:9d:73:d0:7c:e9:be:b4:58:e5:f1:6e:0e:d2:b9:07:1f:6a:
         1a:f9:fb:08:c2:55:14:60:42:6c:79:de:3e:9d:8a:32:84:5c:
         73:5d:c4:48:6e:14:24:f2:1f:c1:ad:a6:e2:79:f9:05:17:7e:
         72:cb:2c:e9:31:7d:72:a3:f7:51:a5:d1:43:a3:dd:41:1f:e5:
         e7:c0:ef:5b:2e:78:55:9e:d4:a1:0d:58:aa:c6:cf:74:c6:90:
         82:ad:f8:67:b8:07:db:dc:3c:c2:14:e1:22:9c:d1:01:1f:08:
         a1:cb:1e:86:0a:69:60:36:e2:30:4b:2f:57:bf:ad:a4:7a:ce:
         37:3a:8e:46:f7:30:87:88:8d:bc:a3:b6:01:3a:27:18:c6:67:
         e4:b6:90:59:f4:5e:5f:48:20:9a:86:04:c3:27:1c:32:81:95:
         15:69:d4:6d:a2:e4:7f:f0:f0:f9:e1:e6:ab:e3:67:f1:7a:f5:
         64:14:f4:19:ea:17:e5:0c:24:15:19:f4:0c:73:05:35:f0:29:
         e2:76:58:de:e4:2f:e1:9c:b5:49:cf:ab:ca:f2:14:18:62:97:
         21:c1:da:fe:f5:88:f7:b7:36:48:0d:68:48:fa:b1:9b:c6:8d:
         9b:a7:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:44:02 2026 by rpki-client