Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/155c84bd-2296-371a-9e47-3057e08f05bb.roa
File:                     155c84bd-2296-371a-9e47-3057e08f05bb.roa (raw, json)
Hash identifier:          ebGREhAt7Hjnu+YGQSzxtymrG6PNVCVGk3M1jyab3wI=
Subject key identifier:   2E:B8:45:6D:9E:41:83:8C:A3:B5:09:B0:4C:13:25:F4:A9:BA:0E:D3
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584F49761AB7679B9EF5BDA0EB00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/155c84bd-2296-371a-9e47-3057e08f05bb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394437
IP address blocks:        74.124.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:1a:b7:67:9b:9e:f5:bd:a0:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ded07a3c-765a-4d7f-8760-036eb5e09421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:d6:34:24:ec:69:25:d9:c9:82:d5:82:36:
                    ae:83:19:db:57:60:3b:5a:87:58:90:ea:67:ab:1e:
                    f2:a9:ed:56:f4:30:53:8a:3a:da:b5:b4:95:0c:6c:
                    d6:ab:a1:af:7c:c7:6b:b0:37:92:c2:9c:a2:7d:12:
                    6f:60:6c:5f:c0:bf:c3:20:85:be:78:17:a3:0f:f5:
                    1f:94:80:86:3f:4c:df:e9:1d:d5:9e:c3:e1:c7:3d:
                    8c:ef:8f:ab:42:76:a2:da:a7:30:ca:0c:72:51:25:
                    78:cb:61:ba:ac:06:86:a6:77:8e:41:c6:12:b6:8f:
                    0d:ed:07:9a:92:49:25:a4:f0:30:a3:08:ff:36:ec:
                    c7:67:aa:77:ca:d3:57:b7:75:0b:5e:fb:42:14:17:
                    54:90:45:4d:77:54:b3:a3:e8:89:3c:05:24:55:a5:
                    a3:39:f6:aa:07:b0:19:30:a5:1a:d8:a8:6f:62:11:
                    46:26:e5:a5:ec:30:ab:04:7e:d3:bd:93:0d:13:bb:
                    ee:5e:e3:ca:34:52:9b:bf:da:fa:20:93:94:a9:8e:
                    7f:7c:88:11:44:12:fa:61:fc:5e:3d:9c:d5:8a:96:
                    0d:ef:a9:4c:c9:bf:7a:29:26:48:23:2f:ee:3d:c0:
                    25:62:a3:a7:db:d6:60:5c:bb:d9:bd:46:80:10:6c:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:45:6D:9E:41:83:8C:A3:B5:09:B0:4C:13:25:F4:A9:BA:0E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/155c84bd-2296-371a-9e47-3057e08f05bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:5a:66:9d:52:94:70:2b:a3:22:a0:46:80:ff:c7:8f:39:
         0e:69:c2:8b:d3:ce:70:3b:ac:53:c5:be:99:ad:2e:74:fc:f1:
         ef:97:72:ee:30:ed:63:6b:6e:ac:04:a4:62:67:20:16:41:7a:
         a1:b0:eb:8a:82:1a:fa:89:aa:80:b0:67:49:96:aa:dd:af:0a:
         f8:70:8a:5a:16:0c:fa:9a:dc:00:94:1f:0b:96:64:b0:1b:a0:
         e4:23:05:53:3b:2f:bc:f6:35:2f:29:8c:fb:f6:97:ba:46:f5:
         ce:31:26:1f:a0:5b:97:a2:24:32:0e:00:c5:23:6e:72:11:f7:
         f0:9b:c8:05:fb:f9:dc:0c:28:87:da:50:73:4d:42:08:17:9c:
         17:13:da:db:fb:5e:fc:15:66:86:7f:b1:08:a8:39:99:22:0c:
         c8:03:33:17:e8:68:03:79:ef:60:d4:f8:97:ec:2b:9d:15:d8:
         9b:a4:d8:52:22:a4:4e:77:90:6b:eb:2f:31:cb:9a:59:8f:c9:
         99:cb:9d:72:58:c2:76:a6:fa:0f:d1:1e:dc:b8:8e:34:fa:59:
         4b:07:1f:72:3d:d1:27:49:20:38:88:b9:df:cc:89:88:14:cc:
         69:7c:45:f4:fd:09:5c:ea:c2:62:8b:48:20:9e:d2:ae:3b:de:
         0c:82:33:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdhq3Z5ue9b2g6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGVkMDdhM2MtNzY1YS00ZDdmLTg3NjAtMDM2ZWI1ZTA5NDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/PWNCTsaSXZyYLVgjaugxnbV2A7WodYkOpn
qx7yqe1W9DBTijratbSVDGzWq6GvfMdrsDeSwpyifRJvYGxfwL/DIIW+eBejD/Uf
lICGP0zf6R3VnsPhxz2M74+rQnai2qcwygxyUSV4y2G6rAaGpneOQcYSto8N7Qea
kkklpPAwowj/NuzHZ6p3ytNXt3ULXvtCFBdUkEVNd1Szo+iJPAUkVaWjOfaqB7AZ
MKUa2KhvYhFGJuWl7DCrBH7TvZMNE7vuXuPKNFKbv9r6IJOUqY5/fIgRRBL6Yfxe
PZzVipYN76lMyb96KSZIIy/uPcAlYqOn29ZgXLvZvUaAEGy3AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC64RW2eQYOMo7UJsEwTJfSpug7TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMTU1Yzg0YmQtMjI5Ni0z
NzFhLTllNDctMzA1N2UwOGYwNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnOWmadUpRwK6MioEaA/8ePOQ5pwovTznA7rFPFvpmtLnT88e+Xcu4w
7WNrbqwEpGJnIBZBeqGw64qCGvqJqoCwZ0mWqt2vCvhwiloWDPqa3ACUHwuWZLAb
oOQjBVM7L7z2NS8pjPv2l7pG9c4xJh+gW5eiJDIOAMUjbnIR9/CbyAX7+dwMKIfa
UHNNQggXnBcT2tv7XvwVZoZ/sQioOZkiDMgDMxfoaAN572DU+JfsK50V2Juk2FIi
pE53kGvrLzHLmlmPyZnLnXJYwnam+g/RHty4jjT6WUsHH3I90SdJIDiIud/MiYgU
zGl8RfT9CVzqwmKLSCCe0q473gyCM7c=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:26:51 2026 by rpki-client