Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc7f69bc-028d-3416-ab76-f66a57c84c0b.roa
File:                     cc7f69bc-028d-3416-ab76-f66a57c84c0b.roa (raw, json)
Hash identifier:          kVp6gJkr8PajqYm7DXRA98JWACmLiF5zVid9bL8VMe0=
Subject key identifier:   0A:D4:61:0C:24:CA:A6:55:BD:EF:4A:A3:0F:6E:F4:D7:86:17:00:C2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E35A7BB83DD9F3C8CB080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc7f69bc-028d-3416-ab76-f66a57c84c0b.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        24.216.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:35:a7:bb:83:dd:9f:3c:8c:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=501047cf-3fae-420d-a0a6-0e7ad927ef9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:1b:bb:42:dc:9a:3a:84:b4:a6:5d:5a:e0:
                    e1:12:29:81:ee:d2:42:0a:81:bd:67:b2:90:91:dd:
                    d4:32:37:99:2e:ca:d9:56:f5:bb:95:36:82:8f:dc:
                    69:00:48:10:8f:27:28:bb:ac:9b:60:1a:e1:ea:ea:
                    46:41:84:fe:20:df:10:df:bd:a9:3a:33:a8:45:01:
                    4f:db:6c:c1:4b:1e:27:5d:89:e7:d9:13:bb:88:f7:
                    59:97:5c:64:55:e2:91:21:24:f6:d3:7a:14:09:10:
                    57:57:eb:73:60:f7:8b:4f:f5:cb:3e:18:2a:73:4d:
                    23:1d:4f:f1:72:c5:8e:90:7f:52:b3:5d:97:44:09:
                    38:8d:f5:e5:e6:a7:c5:c0:b4:e1:e0:f8:19:7e:88:
                    d1:a4:59:3a:5a:f9:48:cb:0f:ca:1d:4b:59:83:42:
                    b3:86:65:f8:a9:f5:93:68:b8:3c:d5:02:d5:dd:a1:
                    17:b8:66:ac:2c:50:b3:8b:e9:ef:79:9b:6c:33:aa:
                    f2:b3:f8:dd:1d:8f:be:8f:2b:42:5a:d4:41:aa:d8:
                    07:ce:9c:57:15:a1:fe:81:f9:6a:08:b5:24:ed:31:
                    72:fb:99:a4:45:f6:20:aa:1f:45:aa:06:8b:a3:69:
                    dc:01:c9:b2:cb:ac:df:25:fb:1a:7f:cd:02:a2:2b:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:61:0C:24:CA:A6:55:BD:EF:4A:A3:0F:6E:F4:D7:86:17:00:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc7f69bc-028d-3416-ab76-f66a57c84c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:e3:a1:44:0e:6a:5e:fc:ac:f4:fa:22:f7:c9:cb:b9:d7:
         7b:ce:e3:5b:c1:f6:71:b2:d1:de:5c:cd:ab:7b:6c:77:4a:a2:
         e6:00:15:04:c6:6b:d7:a9:1e:25:f3:ce:35:ca:ba:7c:21:cd:
         fd:ee:fb:85:3c:3b:80:31:b8:e3:5d:d7:92:c9:f8:ae:58:68:
         a4:d7:e2:9a:16:d4:c2:b5:2f:e4:a5:40:fe:b2:a5:f2:22:0e:
         45:91:94:66:28:d5:ed:f5:26:0f:73:c5:78:c3:4e:62:8e:ca:
         91:09:42:fb:d2:95:0e:ea:ab:62:56:e8:67:30:05:65:d0:5a:
         04:b2:b5:e7:c4:22:4c:b9:54:7a:34:be:ad:b1:51:7f:f4:11:
         2e:83:c5:40:f2:93:e1:10:fc:98:81:1c:e3:ee:05:c6:2d:32:
         f9:5d:3a:f7:ef:79:19:cd:a1:0a:29:75:47:8a:8f:d2:84:1c:
         16:86:a1:cc:a5:b5:b1:04:51:56:c5:c9:6f:83:12:17:f9:51:
         1f:ea:e1:df:c3:82:34:0f:38:09:16:f2:e6:42:a8:2b:4b:8e:
         af:09:33:58:0a:04:5f:ea:fc:b3:31:22:a1:e1:f4:83:08:50:
         8e:12:90:a6:fb:fb:d8:14:dc:60:97:09:b3:5e:35:ac:f7:86:
         8a:75:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:52:54 2026 by rpki-client