Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0b2fbf21-7878-3477-81dc-a34a4834c7d3.roa
File:                     0b2fbf21-7878-3477-81dc-a34a4834c7d3.roa (raw, json)
Hash identifier:          /GwyU0Jwgky7cDAZ03717YtigOWSLJ6TuFx+N2k517Y=
Subject key identifier:   AC:A4:A1:63:9B:6D:FA:7C:12:A2:DF:6C:D6:F9:D5:17:D7:B5:7D:21
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F46BE8FFB350619855900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0b2fbf21-7878-3477-81dc-a34a4834c7d3.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.241.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:46:be:8f:fb:35:06:19:85:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=75b8dcc9-003f-43bc-b536-d66bbbfe4191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:f9:6a:c2:ba:cb:78:8f:ec:26:07:c4:66:
                    d0:8f:73:8d:c3:4e:0f:89:83:d3:80:9b:c1:fc:7c:
                    64:e9:aa:81:02:13:86:c7:29:ee:54:d4:59:a2:1d:
                    f6:94:d3:4f:2a:4a:9d:41:74:a5:11:f0:ee:dc:59:
                    be:b7:d4:3f:09:8a:34:c7:86:2d:0a:73:aa:52:9b:
                    a9:46:3b:01:f8:aa:5c:2b:bb:c0:7c:7c:d3:49:16:
                    8c:2a:d3:13:06:b0:03:8a:c7:65:7c:59:ff:c3:0d:
                    57:f4:b8:1b:54:ec:ac:f0:e0:1e:86:e4:64:96:42:
                    8e:b1:a9:7f:8b:2d:04:eb:26:cf:f9:0d:53:9e:a7:
                    f9:a6:00:ae:b3:60:67:47:6c:49:72:d3:3a:ea:d8:
                    4b:92:72:0c:29:3e:ad:4b:e5:29:da:7f:6e:7a:98:
                    92:59:3e:02:ad:b2:d5:80:88:fb:46:2e:71:30:b6:
                    a3:e5:24:45:17:f3:85:d2:56:81:87:a2:39:33:bb:
                    2a:cc:cb:fa:19:19:94:80:78:0f:de:ab:27:d1:39:
                    4b:5e:fc:73:3f:96:a0:5c:d9:b2:0e:07:0b:c6:1f:
                    87:7e:20:88:bc:a6:5c:94:8e:38:15:de:d5:46:f8:
                    ff:50:4e:b7:2b:f6:78:17:97:08:31:83:7e:8d:11:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A4:A1:63:9B:6D:FA:7C:12:A2:DF:6C:D6:F9:D5:17:D7:B5:7D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0b2fbf21-7878-3477-81dc-a34a4834c7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.241.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:25:cb:bb:bb:2d:71:e6:f4:43:86:c9:e6:81:7f:c0:8e:57:
         19:ad:ea:0c:56:c2:4e:02:36:be:42:0d:dc:b1:26:c2:ff:28:
         4f:5c:bb:dc:ed:c1:0a:54:e5:00:a5:8c:45:77:e2:4b:65:29:
         bb:25:b2:1a:15:74:9d:2f:40:dc:b8:45:e1:9d:d6:ea:69:be:
         39:3f:12:2d:5b:70:97:44:49:3a:eb:ed:a3:52:71:7a:77:b1:
         5c:ea:99:76:08:70:0a:fe:9a:46:76:ef:23:98:f6:60:15:05:
         0d:40:d3:bb:ee:04:14:c9:81:83:89:2f:eb:a9:99:84:78:8a:
         aa:d6:78:6b:18:03:27:32:62:78:be:1a:d4:47:c0:71:fb:50:
         5d:09:ae:66:24:35:ab:b4:06:c0:36:34:37:b3:ce:d4:74:db:
         f6:ac:c4:7f:0b:c4:df:3e:f2:15:90:73:25:94:b7:34:9e:fd:
         3c:45:7e:b1:b9:29:c2:41:92:37:8e:57:4d:cd:52:08:c6:d2:
         48:d4:25:18:38:d5:09:0e:d3:b2:65:21:0d:f0:2d:04:f2:b8:
         7b:b4:dd:89:d9:f3:d5:fa:23:56:af:4b:b3:4b:5d:6d:23:a6:
         cd:70:fa:eb:66:42:63:68:59:c0:83:a2:e0:5e:41:15:bd:1a:
         57:9f:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:14 2026 by rpki-client