Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbdcba10-cb9a-3694-8c42-6c565a951857.roa
File:                     fbdcba10-cb9a-3694-8c42-6c565a951857.roa (raw, json)
Hash identifier:          ClbNZo2kDOyYwWyq9Z9kGeqCviWojsPjTydVpAkvqeM=
Subject key identifier:   69:33:37:B2:8B:89:9F:7D:EB:7D:96:10:83:C4:AB:CE:C3:DA:6B:73
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D4648DD2EF20171042500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbdcba10-cb9a-3694-8c42-6c565a951857.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        24.182.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:46:48:dd:2e:f2:01:71:04:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=62f8d5ff-a094-4cff-9d03-f7a2885ae600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:5c:21:0e:02:df:b8:e6:56:e8:dc:9e:08:
                    7f:ab:8b:cc:75:f0:34:65:c4:d5:05:b5:e4:37:09:
                    41:25:07:b1:18:49:a1:68:68:18:64:66:57:64:fd:
                    7a:41:e0:08:42:de:a6:bc:06:6a:3c:28:16:85:28:
                    79:98:00:85:3e:96:76:b5:48:55:4d:f8:2a:40:9e:
                    02:68:34:a2:42:f2:de:88:6f:51:63:80:18:78:4e:
                    60:29:0e:1f:4f:4a:e8:94:0b:c9:d1:22:b4:e2:8f:
                    31:a3:ab:1d:97:28:24:1c:b6:02:0e:f3:da:e8:56:
                    18:35:7f:9d:56:9d:98:d2:ed:36:66:3c:48:5b:54:
                    a8:4f:0e:06:9f:4a:5d:dd:b0:08:f8:8e:d2:55:0b:
                    77:66:d8:77:fd:f9:0c:9a:42:3b:a3:80:09:2e:09:
                    c3:72:0a:e5:05:a5:14:32:01:04:09:b7:6c:ab:c1:
                    34:1a:80:97:42:c6:8b:c7:c5:2c:23:77:3d:4b:ba:
                    29:6c:d3:83:99:fc:25:b5:50:e5:1f:34:a9:c2:22:
                    e9:25:72:6d:ca:fd:0a:ed:14:c5:df:c3:d3:97:ef:
                    f7:d8:3f:6e:0f:3c:70:54:1b:61:5a:f2:de:4e:23:
                    a6:8b:36:f4:c6:80:c4:4c:bb:5e:53:08:23:3f:de:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:33:37:B2:8B:89:9F:7D:EB:7D:96:10:83:C4:AB:CE:C3:DA:6B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbdcba10-cb9a-3694-8c42-6c565a951857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.182.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:c7:40:5a:9f:d5:84:fb:63:55:3b:f8:27:cd:83:b1:db:
         b2:2a:1f:fa:69:57:37:b6:0b:e8:6d:33:97:26:6e:ee:2d:38:
         ca:f1:d8:7e:23:ed:eb:9f:51:e1:a8:e1:54:82:78:ee:c4:54:
         fd:82:6a:90:ad:cd:e7:4d:2d:8d:81:12:a8:c6:c7:59:db:9e:
         c3:0c:21:db:86:58:c3:7a:9b:66:d5:41:a1:75:c0:29:6b:1b:
         14:fb:68:90:ee:a9:72:ed:f5:78:5a:85:79:26:3d:36:7b:eb:
         53:1c:77:d2:11:a9:f4:02:39:07:9c:e6:ed:69:ae:7f:ad:cd:
         2e:63:73:b5:e0:c0:b0:2a:a4:91:94:01:00:b9:0c:2d:a6:82:
         95:a4:f5:c5:22:a6:4d:d2:4b:47:87:30:1d:6c:b6:d7:dc:eb:
         27:37:d0:76:62:ac:15:f5:fa:e1:17:94:01:30:d0:9c:13:f0:
         a7:70:a4:04:64:90:43:ea:4b:77:30:b3:c3:30:62:de:2b:30:
         2a:16:6d:f3:eb:a5:c8:39:3c:64:da:ff:09:2c:3a:34:06:ec:
         79:3c:ef:80:c6:48:ff:e9:1d:8e:db:a6:07:af:84:ff:a1:59:
         0b:4a:30:6d:78:d9:25:91:c9:30:b6:de:31:4e:d2:fd:04:cb:
         e2:60:8c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:53 2025 by rpki-client