Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf995973-ec6d-37aa-84e9-47ae99f761e7.roa
File:                     cf995973-ec6d-37aa-84e9-47ae99f761e7.roa (raw, json)
Hash identifier:          4KNwMCIphx1ZVepZxYQBfLhT9seQAmvhOpU+Iggb6qc=
Subject key identifier:   C4:0E:06:08:B6:B3:A5:A3:F5:11:F7:3D:C0:E4:40:96:57:A6:F8:78
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D44C6E892C6A1914C0B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf995973-ec6d-37aa-84e9-47ae99f761e7.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.176.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:44:c6:e8:92:c6:a1:91:4c:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c3388b30-679d-4e07-909e-0a49d38c6192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:83:27:72:2b:01:50:81:82:29:3f:90:e7:
                    42:13:e5:99:2e:34:7f:0c:c2:9c:11:81:f9:ff:71:
                    da:30:94:e5:a9:08:c0:61:4a:a1:c1:f1:eb:07:75:
                    fd:1d:25:06:f8:09:d3:2d:39:8a:f6:59:f9:06:de:
                    33:68:77:dd:e2:8d:28:3b:9c:b5:0b:95:ec:10:23:
                    14:7b:7b:d0:16:8c:c5:99:2b:2e:38:61:0e:fa:36:
                    9f:76:4b:6c:92:1c:69:6b:91:cd:c3:bc:9d:c5:d9:
                    89:30:26:9e:78:8b:fb:a4:f8:12:f3:10:bf:24:15:
                    23:03:1d:7c:54:bd:d4:bd:42:0a:e0:7b:c3:ce:51:
                    3c:0d:2e:ba:9d:a9:7c:09:22:9a:2c:05:c4:64:ca:
                    5b:aa:6f:8a:32:df:31:4b:ad:79:37:6f:01:c5:12:
                    19:59:9e:0f:0c:11:ca:19:b0:65:44:a9:12:47:29:
                    16:4d:35:96:79:8f:2c:91:07:e7:ef:2a:55:53:e7:
                    3b:22:de:79:ea:20:a7:9a:18:be:4c:df:f0:50:d7:
                    b8:8a:0c:a4:18:2c:6b:e0:2a:37:d1:91:e7:a6:2c:
                    0d:65:fe:e3:0b:a3:bf:f1:bb:27:1d:58:72:67:90:
                    79:2e:ba:9a:b9:02:fd:a2:16:20:3a:b4:7d:8f:c5:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:06:08:B6:B3:A5:A3:F5:11:F7:3D:C0:E4:40:96:57:A6:F8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf995973-ec6d-37aa-84e9-47ae99f761e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:87:9b:c5:57:7a:4d:ad:61:e3:b3:b5:16:9b:f4:10:f2:8c:
         79:38:13:fb:f0:5e:2b:cc:98:9a:4e:2c:6f:ee:9e:da:42:90:
         ac:e6:9f:36:45:d1:ef:e9:a9:c6:25:57:4a:96:c0:75:33:7a:
         02:28:53:13:49:64:4e:25:3b:ee:be:97:33:fb:cb:71:20:12:
         6a:d6:e0:4b:06:35:79:02:34:8e:59:06:12:bb:5c:c0:0d:d8:
         72:cc:94:b0:50:8e:04:aa:cf:10:ff:b7:c1:ba:21:c5:43:82:
         ef:3d:40:63:fe:a8:42:77:30:20:7b:5b:95:b1:6b:77:a5:3e:
         32:28:88:4c:8b:37:d1:62:9d:a8:49:72:92:0f:9a:bb:f1:6e:
         4e:af:bb:6c:0d:3c:ac:b3:52:27:dd:a7:37:b5:d2:17:eb:23:
         c9:a0:f9:9e:35:d9:15:28:79:b6:d4:67:05:79:cd:ef:c8:51:
         96:d9:4c:f5:81:df:ac:8f:28:f2:4a:63:a0:85:39:e6:bb:0e:
         80:5b:2d:65:fe:61:a1:2d:6d:31:dd:91:3e:f3:d5:79:1f:d4:
         75:df:7d:52:c6:00:01:91:c9:d3:bc:eb:ce:b3:e8:9c:cf:6d:
         56:4e:a2:3a:10:1e:c4:c0:a5:bf:85:44:de:70:2e:40:f0:d9:
         67:02:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:02 2025 by rpki-client