Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccad7d13-4cf1-39bf-af54-bcb008788e90.roa
File:                     ccad7d13-4cf1-39bf-af54-bcb008788e90.roa (raw, json)
Hash identifier:          uyNqy7Qo1JTOjs4Ium+DD3RDjpwJhb86sWiJHrGLkck=
Subject key identifier:   C2:66:3D:D1:89:C1:E1:56:5A:E7:D4:EC:11:C4:8B:CA:16:0A:A9:F2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DF55B15F1C10957E8FA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccad7d13-4cf1-39bf-af54-bcb008788e90.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.176.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:f5:5b:15:f1:c1:09:57:e8:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=14e7ca9d-ac69-4112-b723-405ba9ef5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:62:8c:b3:58:7f:95:00:0c:24:6f:36:f1:
                    86:f5:ba:40:5d:93:0f:37:bd:7e:2d:1b:f5:b1:af:
                    ee:42:9c:8e:ea:a8:bd:c4:f8:72:ac:83:e7:52:73:
                    46:16:9c:e1:46:b6:20:38:21:6a:69:9e:bf:4c:d1:
                    12:0c:88:58:87:fe:09:ce:87:5f:6c:da:92:d8:bc:
                    96:26:64:a3:96:c9:b4:ff:bc:ab:ff:fe:5f:54:9a:
                    c6:2a:7a:3f:55:3f:fe:48:7a:ec:79:b1:18:48:ed:
                    52:6c:fb:b4:49:61:7b:32:dc:10:a1:6e:f0:f8:85:
                    7f:a8:7d:8c:61:ef:61:85:9d:3b:a0:b5:f8:d2:8c:
                    aa:83:10:28:4e:96:de:98:78:27:72:43:43:d4:54:
                    95:81:f4:a7:a2:e4:8a:34:7b:82:d4:a3:25:fc:b9:
                    86:c5:dc:98:44:0b:3d:41:95:e6:c4:a7:aa:87:99:
                    26:ef:ad:12:23:e4:b0:92:9b:04:6f:26:fe:4e:cb:
                    d4:eb:c6:ba:9f:a9:c2:60:9f:5f:ca:fb:cb:d5:1c:
                    1a:c8:b6:5f:70:fd:6b:9f:89:de:f2:6c:7b:13:22:
                    e1:c7:c5:44:02:9f:3f:c8:6e:1b:a8:30:c3:2f:8d:
                    e1:dc:60:7f:95:c2:e1:77:04:3b:54:61:4d:1d:f6:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:66:3D:D1:89:C1:E1:56:5A:E7:D4:EC:11:C4:8B:CA:16:0A:A9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ccad7d13-4cf1-39bf-af54-bcb008788e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:45:64:6d:09:33:8c:4d:3b:10:d5:d8:41:b6:b2:2b:dc:d2:
         c9:57:24:6e:f1:e4:83:ed:df:e9:c6:b7:42:9d:5e:97:fe:2b:
         9d:93:7e:57:a2:c6:f7:54:bc:f3:78:56:29:0d:4a:db:29:be:
         35:53:57:19:de:1d:1a:77:ca:cd:b3:53:c0:35:c6:53:3f:b7:
         6f:1c:c4:c1:da:04:78:b9:59:0f:87:48:4f:23:16:4e:ce:ca:
         8d:1e:37:f0:4c:b7:12:c3:eb:91:e9:be:22:39:98:bf:77:7a:
         75:66:b3:cd:59:de:3d:63:d7:3a:e2:98:53:a6:40:eb:8f:98:
         bf:66:ef:de:4d:16:57:98:da:9f:ae:05:8b:d6:e5:49:73:b5:
         32:23:4b:f4:c5:76:a4:19:84:5f:d3:27:9b:5d:ae:85:ba:02:
         3e:36:03:0c:14:ed:be:07:83:27:56:d2:88:1b:4c:00:3a:24:
         33:89:47:3e:ba:c7:96:33:cc:65:43:45:bd:43:6d:dc:f7:7f:
         e1:65:75:d9:95:15:f7:5e:f6:03:87:b6:40:e5:95:61:9f:b3:
         a8:f7:fa:b6:17:b1:79:60:fe:03:d6:68:87:2b:75:c3:28:67:
         52:54:e7:b6:a9:e0:2b:b4:d2:7d:97:37:c9:cc:cd:a1:fe:95:
         95:24:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:54 2025 by rpki-client