Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/126f2955-bc87-38e8-91a9-8e909889e2ec.roa
File:                     126f2955-bc87-38e8-91a9-8e909889e2ec.roa (raw, json)
Hash identifier:          D5Q09+EyurP5HHNoLBoKQ8DB4yM/96D56b8mEm4+Yss=
Subject key identifier:   22:2F:22:91:3C:78:36:5D:FE:72:47:48:78:4D:86:AF:F3:1A:F4:7C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F480F3C055F53A17D7480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/126f2955-bc87-38e8-91a9-8e909889e2ec.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.159.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:48:0f:3c:05:5f:53:a1:7d:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=85ab18f4-49c7-4b8d-abba-6d07dec20d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:21:20:80:f6:d5:b5:89:b1:26:5b:e1:7f:
                    2a:68:f9:c3:ea:61:bc:49:3c:79:c9:c1:37:e9:d6:
                    50:11:ac:19:da:19:17:de:53:b8:b1:a3:57:e9:1d:
                    cd:60:9f:37:ac:fd:03:39:9d:2f:fd:51:58:53:ec:
                    7e:1a:de:8b:96:0f:c4:ae:85:c9:a6:01:49:e5:6c:
                    81:c7:86:7f:18:10:fb:8b:55:14:a7:87:25:63:03:
                    91:0e:9b:7f:cc:71:4c:27:e0:8f:fc:32:3c:02:59:
                    b1:2d:f9:b2:cb:fe:9b:a8:45:9e:7c:db:db:bc:cb:
                    e9:87:9f:ef:7e:99:02:02:e1:01:0a:21:e1:d8:4b:
                    71:2c:51:9f:9a:67:f6:27:54:ca:d3:8a:14:e8:52:
                    b4:79:7d:2a:c0:40:4f:c7:0c:ec:52:a2:2a:9f:6c:
                    9f:ae:b5:92:02:72:9e:c9:c1:c3:3b:9d:01:b3:7b:
                    bf:99:ed:43:e8:47:f8:12:33:cb:ff:14:a6:eb:5e:
                    06:f8:06:6a:a4:b9:3d:07:14:0d:b1:3a:5e:d0:2f:
                    c9:53:38:ea:0c:fd:50:99:1f:98:70:f1:ab:6f:03:
                    7e:05:24:ca:df:af:a2:f7:29:e0:64:40:93:13:a7:
                    08:fc:20:ca:72:24:90:fb:3d:d0:70:8a:9e:8c:3e:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2F:22:91:3C:78:36:5D:FE:72:47:48:78:4D:86:AF:F3:1A:F4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/126f2955-bc87-38e8-91a9-8e909889e2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:e2:a0:69:c2:e0:79:5b:68:d8:60:a6:4f:bf:62:98:9a:
         ca:4c:e9:98:35:4c:c7:d1:a3:40:52:a9:a0:00:be:5f:97:11:
         b8:fd:d4:e8:b2:1d:c8:1f:22:32:fc:57:4c:5a:f7:d6:98:8f:
         cf:46:26:33:e9:b4:bf:99:46:21:3c:8f:3e:cf:50:43:8b:cf:
         78:07:89:9e:4b:77:d0:58:21:f9:e0:6f:75:90:e5:92:7e:95:
         74:c3:d0:69:e2:4f:c9:83:4b:75:25:c9:94:38:49:dd:25:b4:
         99:fb:4d:8a:b4:98:6b:a9:8a:c7:3a:ca:cc:ab:4c:54:95:55:
         75:2e:d9:ba:bd:e2:52:4a:78:10:d0:b3:e9:79:28:ea:28:77:
         56:bd:1d:50:5b:48:a8:95:42:94:6b:3e:ba:d7:29:c1:33:9f:
         ca:26:dd:ea:61:91:f7:22:63:58:ec:a2:ae:f7:ec:6d:11:1d:
         2b:c3:bb:17:44:a3:79:0b:29:98:79:81:ac:16:fb:55:5d:07:
         f4:da:27:91:6c:d0:6b:69:98:40:ec:78:49:b3:8b:74:ce:96:
         56:5f:a8:5f:e1:58:14:45:56:2f:53:00:cb:3c:42:d7:b4:22:
         42:2c:33:b8:ab:88:41:0e:6d:61:a5:86:64:62:97:72:81:ea:
         f7:b7:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:15:49 2026 by rpki-client