Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d488a9eb-b5cc-3da9-b5c3-44eab2b9a810.roa
File:                     d488a9eb-b5cc-3da9-b5c3-44eab2b9a810.roa (raw, json)
Hash identifier:          k9G/o8FWuKwC+5PPmo3QmURLpCmbF4Hn7Z8JU1G+JQg=
Subject key identifier:   B8:2F:10:FA:04:0C:7A:6A:9C:B5:92:21:BF:D3:1B:FE:96:3B:81:07
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAB763B8597EE5B2135D40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d488a9eb-b5cc-3da9-b5c3-44eab2b9a810.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        24.247.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:b7:63:b8:59:7e:e5:b2:13:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=ee0d6dc1-2d20-48bd-8370-9c7d077d8625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:d6:93:0b:bc:4e:9b:bf:f1:10:a2:d9:ac:
                    ca:6c:67:5c:28:0b:96:32:8e:12:4c:66:f2:7e:14:
                    b4:f6:37:8f:66:48:54:79:24:99:3b:95:0d:7c:31:
                    13:67:65:d0:3b:a8:4a:a6:c0:c0:9c:32:97:40:8c:
                    fe:13:b0:08:54:ff:84:4d:67:a5:f4:69:a0:3b:36:
                    91:15:9b:ac:12:e7:34:ed:b7:bd:1e:25:d7:16:1d:
                    6b:19:89:64:b2:ac:e4:f2:7c:7c:29:c3:93:a4:a4:
                    a7:22:b4:a2:19:b2:6f:81:ac:ed:30:92:12:94:a6:
                    6d:9d:ef:b3:dc:49:79:2a:24:90:70:64:41:60:2c:
                    6c:10:49:d6:be:f4:4b:15:1c:a7:5b:33:4b:1b:d9:
                    6b:52:ce:66:5d:a4:2a:1b:6a:d4:b1:81:fc:83:44:
                    98:4f:83:6e:11:49:f6:16:9b:0c:a0:70:93:af:df:
                    a4:15:38:bd:ed:85:35:55:27:9c:57:66:d3:b5:e9:
                    49:13:71:77:f6:fe:94:d2:dc:a3:de:b9:1c:1b:28:
                    d4:44:57:86:45:df:04:44:c2:26:9a:52:8a:29:33:
                    93:77:6d:7a:dc:bd:e3:cc:09:0d:eb:e3:51:65:7c:
                    f1:07:5a:9f:bf:eb:f1:4c:37:72:73:55:3a:d9:4e:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:10:FA:04:0C:7A:6A:9C:B5:92:21:BF:D3:1B:FE:96:3B:81:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d488a9eb-b5cc-3da9-b5c3-44eab2b9a810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:90:2a:b5:44:3a:0d:a4:b8:86:d9:c9:e5:4d:92:88:55:9e:
         c6:bf:4c:49:7c:ce:1b:3f:21:f3:eb:5f:78:40:6e:9c:4e:7b:
         91:67:10:19:30:7f:d8:2d:b4:51:1c:fd:d1:87:c8:c8:14:02:
         09:66:8a:bb:f0:e9:57:de:fc:2c:fc:cb:88:d6:fe:c0:8e:5e:
         11:38:c1:13:7c:6c:bb:51:05:ad:0e:4b:e4:7a:77:4d:57:c9:
         ab:6c:c4:e9:40:1b:d1:54:e9:19:1a:ea:72:ce:8a:0d:8d:54:
         1a:99:26:4e:3c:2b:f2:12:bb:60:92:98:70:a2:b0:f5:97:ea:
         ab:f7:e5:f7:cb:9a:a3:1e:63:0b:16:bb:82:f4:f3:2e:c1:d8:
         07:53:a9:4d:80:48:76:a3:41:75:47:36:5a:6d:a3:ac:1c:36:
         77:50:f7:c4:c8:c7:ff:9a:a7:26:b5:06:e7:62:d7:f8:8d:71:
         27:22:79:6a:ef:4d:26:12:62:11:98:f7:ad:b2:f6:60:c8:91:
         63:0d:80:00:5e:48:38:6b:09:45:d1:8d:ec:49:f5:73:e2:ee:
         de:ec:2e:0e:1b:5a:31:e0:9f:4a:83:90:b8:29:40:57:b2:af:
         1b:36:c1:ae:a6:a8:4e:d1:88:16:6d:b3:e9:0a:97:31:af:e7:
         af:29:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:22 2026 by rpki-client