Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ef2d3aa-3c40-33b3-b9ee-7ccc9a5a0c62.roa
File:                     1ef2d3aa-3c40-33b3-b9ee-7ccc9a5a0c62.roa (raw, json)
Hash identifier:          DHed0WHWqkgBBdNv/Wa/A8OD4fC1f84CNG/aBKY2Upo=
Subject key identifier:   51:7A:9F:BC:44:D8:2D:A9:B9:4A:E0:74:C7:DB:FC:A6:F7:CC:B2:8B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FB6CC67D069F146A0C080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ef2d3aa-3c40-33b3-b9ee-7ccc9a5a0c62.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.177.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:b6:cc:67:d0:69:f1:46:a0:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ad87e8b7-56ff-43ea-9868-96a3bab33ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:28:34:8c:cb:cc:5a:46:53:42:e9:08:4c:
                    d9:e8:ca:ba:1e:15:a7:2b:e1:81:c4:50:35:5d:0d:
                    51:46:fe:c9:3d:21:2d:94:e1:06:ba:5c:0e:3d:fc:
                    ae:d3:5a:70:52:79:f7:34:a5:5c:f4:83:fb:d6:56:
                    81:05:5b:21:29:51:15:ff:5c:0a:ef:94:c1:20:6d:
                    0e:0e:ea:e0:7a:25:da:f7:79:f2:b9:e5:02:0c:c9:
                    52:79:1c:cb:85:03:1b:ce:2e:ca:63:9a:1a:a8:eb:
                    72:92:4a:e6:e0:ce:c3:ac:bb:42:bc:1a:b0:63:0d:
                    b4:32:5d:60:da:25:7b:6a:96:8f:72:9f:93:72:44:
                    f8:7c:03:a6:84:eb:ec:e3:da:ab:1a:96:76:a8:4c:
                    f9:06:6f:b3:12:fc:e2:90:cc:7a:df:c6:01:93:13:
                    8a:10:10:c2:cd:13:7b:89:a1:4c:3f:8d:2c:c7:b8:
                    70:d4:ae:0c:f1:14:be:fa:c5:8c:b1:c9:c4:ea:36:
                    00:26:fb:96:b7:04:30:7c:dd:ec:da:c2:08:48:a9:
                    88:f5:5e:92:69:a2:1c:80:32:e4:23:ad:58:c7:1f:
                    ce:8f:50:52:fb:fc:ce:29:11:cd:25:2e:e1:22:a4:
                    61:00:e4:14:04:4f:a9:e5:ba:e8:2e:40:00:82:ed:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:9F:BC:44:D8:2D:A9:B9:4A:E0:74:C7:DB:FC:A6:F7:CC:B2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1ef2d3aa-3c40-33b3-b9ee-7ccc9a5a0c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:03:e7:dd:8c:f6:54:f2:aa:fc:ab:1f:ce:55:6c:c9:99:61:
         49:a0:37:05:bb:08:03:f7:a9:e5:09:cc:b2:d2:a3:c4:68:b3:
         b1:f8:22:ed:c0:14:59:26:49:10:e0:26:c1:3f:13:25:fe:90:
         6e:1f:cf:d9:c9:c5:61:bf:72:63:ed:21:59:16:6c:7c:a0:d7:
         c2:29:90:3f:86:c4:d6:e2:6b:d6:b7:c6:9e:48:c3:dc:4a:14:
         9a:0f:1e:b3:0d:ca:ef:a0:23:6f:96:b7:0a:93:da:a7:45:bb:
         72:f5:59:34:f0:05:73:a6:6d:62:b1:73:1a:fa:fb:14:99:c2:
         33:00:ca:5a:6f:2c:ce:3d:e0:3a:31:03:89:f3:23:fc:0a:57:
         b8:92:7f:6b:21:31:6a:ab:05:b6:11:a4:77:e1:74:7c:70:a4:
         7d:66:e2:64:e0:b8:fa:ff:bf:1d:a2:9b:21:31:88:ea:0a:90:
         bb:e2:2f:3e:ad:97:f0:13:2d:0b:05:7f:4d:45:cb:7e:3a:fc:
         3d:35:0c:a7:97:a4:62:67:90:e4:0a:dc:9f:3b:5b:1f:38:b2:
         d1:54:5b:03:3e:e6:ba:0a:40:6a:00:48:e5:1f:b5:01:0f:ea:
         93:66:a0:b8:70:38:13:fa:76:39:20:aa:61:a6:a6:37:01:f9:
         a7:8f:7c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:11:45 2026 by rpki-client