Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf995973-ec6d-37aa-84e9-47ae99f761e7.roa
File:                     cf995973-ec6d-37aa-84e9-47ae99f761e7.roa (raw, json)
Hash identifier:          +ppPAjfEP3E8iVNWHqLj28w0heLGEFiVgcnXgw41wEY=
Subject key identifier:   C9:96:D1:A6:AE:8F:3A:3F:C5:89:01:44:46:7A:0E:5A:1B:61:32:46
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAC7E936AC0730DE1B1680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf995973-ec6d-37aa-84e9-47ae99f761e7.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.176.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:c7:e9:36:ac:07:30:de:1b:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=53fc73fc-2589-4333-8672-0256d1d0fdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2f:1d:a7:37:03:59:e0:9b:7e:a4:b5:6e:e0:
                    47:ab:fe:e9:17:99:70:72:10:20:d2:a8:89:dc:04:
                    e2:22:27:dc:26:a0:56:76:20:ca:86:dc:ab:cf:77:
                    78:e9:80:d4:ba:25:57:b2:00:8e:9f:3d:85:a8:5c:
                    1b:0b:a1:e8:82:15:32:10:fc:f7:4b:bb:43:1d:26:
                    bc:74:4e:29:42:94:74:9e:a7:64:25:9a:1a:26:ee:
                    58:04:d2:fc:22:c0:46:7d:23:71:a6:16:fd:e8:92:
                    43:b1:79:4c:99:ed:eb:0e:62:c9:d4:da:ba:51:ed:
                    39:f2:4e:42:9f:70:f2:05:eb:95:1e:54:44:0a:13:
                    1d:de:f7:92:b5:17:8b:65:d3:1d:6f:9a:0f:07:96:
                    17:3f:c4:a3:50:e2:ec:34:0f:36:7a:75:09:67:b0:
                    af:d2:b4:cd:d5:6e:ae:5d:15:c7:06:26:8a:fe:36:
                    a4:23:3f:4e:6d:d7:77:cc:a2:04:2d:eb:9e:4a:86:
                    c1:ba:08:a3:f7:0e:52:1f:14:7b:04:21:e9:7c:eb:
                    69:c7:ee:e5:2d:6f:7e:3e:08:db:75:19:39:6c:97:
                    47:92:c2:11:f8:6f:92:e7:17:ca:44:45:c5:4b:3e:
                    d5:f9:8f:7e:05:7d:ff:59:dd:cd:29:06:3f:9a:ff:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:96:D1:A6:AE:8F:3A:3F:C5:89:01:44:46:7A:0E:5A:1B:61:32:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf995973-ec6d-37aa-84e9-47ae99f761e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:a7:8d:77:4c:f7:6d:79:28:fb:e7:fe:96:15:b1:3b:c9:
         2a:71:fe:87:ab:c3:9d:68:33:30:b2:8b:1b:8c:27:65:52:41:
         7c:4d:68:87:91:e4:ed:8b:92:a9:71:a7:ab:b7:97:3b:e2:38:
         db:0f:e2:fb:eb:9d:60:d7:22:50:5b:56:d1:f4:b8:a8:86:dc:
         01:5d:16:b3:c7:fb:ce:8e:a7:17:8b:e6:61:7d:ab:08:70:aa:
         fc:88:20:6c:77:58:4d:1f:68:f4:f5:db:f2:8f:0e:7f:29:58:
         98:83:15:f6:85:a9:61:3e:dc:7f:60:06:b7:df:77:6d:d3:4d:
         94:0d:48:37:29:58:c3:c7:da:fa:76:17:ce:1e:c6:47:35:2d:
         0b:b4:fc:26:02:97:ca:e9:92:31:8f:56:93:a7:b6:bb:cd:ee:
         03:a4:60:33:46:57:9c:e8:f9:36:5e:da:d3:2d:aa:ac:6e:85:
         41:a4:2a:b6:09:d1:a9:33:7a:52:d9:dc:a8:94:4d:da:b0:7f:
         42:65:ec:e1:e3:f8:95:87:17:7b:49:5f:13:b4:14:7a:6b:c2:
         1e:48:ab:30:89:fe:72:fa:ef:91:b8:a5:86:40:39:a5:94:af:
         f0:75:5a:e6:bc:82:b3:93:b2:3e:be:fa:b6:79:fc:1b:76:15:
         d0:c3:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:14 2026 by rpki-client