Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/238763af-5287-32a8-a256-de6cbfcd7132.roa
File:                     238763af-5287-32a8-a256-de6cbfcd7132.roa (raw, json)
Hash identifier:          7kLVHJpisWfO1T3lWKdv6MJv4w/0AQtYmZDRnBWl3eA=
Subject key identifier:   4D:19:2B:00:0C:C5:5F:B6:2C:D5:50:83:20:11:10:52:3C:3B:D9:32
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FA30985AC46EA316C8200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/238763af-5287-32a8-a256-de6cbfcd7132.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.107.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:a3:09:85:ac:46:ea:31:6c:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=e6b12bc6-7d13-4f4e-b9b5-9651e185c3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:aa:76:82:14:86:f8:44:7f:9c:85:0a:d7:
                    58:03:d7:55:99:bb:4b:d2:26:11:1e:f1:d0:95:f8:
                    28:fd:a2:6e:84:d8:16:dc:15:b3:37:ff:53:42:fb:
                    8a:81:64:01:f3:be:ba:b5:03:64:fc:e6:57:ad:68:
                    5d:48:ff:27:fd:5c:68:8f:76:bc:42:64:61:aa:d9:
                    cf:5a:bf:3e:72:55:a5:75:9b:2c:20:44:cf:a5:ee:
                    b5:16:81:74:14:31:ec:c8:ee:c3:a8:eb:62:06:1c:
                    1e:8c:08:ca:8c:2c:24:a9:5b:f9:e6:15:57:a0:83:
                    50:f3:7c:7e:57:d9:79:2c:cf:ef:43:b4:6e:e0:4c:
                    36:83:44:05:94:54:21:4b:97:19:18:04:98:a3:90:
                    0a:ba:34:dc:1b:c5:ec:b1:64:14:5b:64:4f:a9:d5:
                    00:ff:a7:6d:bf:a3:03:96:46:db:3e:e0:2a:f7:43:
                    0b:e4:6d:f7:4c:bf:e4:f7:c1:b2:5c:d3:5f:be:42:
                    0d:61:8f:69:05:18:97:6d:6e:5f:a9:3a:42:18:c3:
                    36:c4:a2:ac:e0:1c:6d:3c:ef:9b:06:0f:6d:78:40:
                    c1:80:0e:f8:d3:60:00:df:f4:77:61:d9:93:25:d2:
                    07:c9:e9:7e:61:ca:11:b7:f1:a4:5b:88:a9:e5:26:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:2B:00:0C:C5:5F:B6:2C:D5:50:83:20:11:10:52:3C:3B:D9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/238763af-5287-32a8-a256-de6cbfcd7132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.107.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:19:a5:3d:8e:a6:3e:ad:cd:51:82:2b:8e:0d:84:97:84:8d:
         dd:18:95:83:4b:fb:65:45:b2:3f:63:45:ae:53:e5:d6:2d:12:
         57:b6:07:55:65:19:01:c4:44:d7:df:f9:1b:e4:37:69:03:64:
         03:f4:ec:56:3b:9b:f0:57:7e:3c:ff:ec:87:15:5b:f1:27:8e:
         61:52:d6:11:6e:2a:0d:39:f1:c2:50:56:8b:e8:a9:59:55:3b:
         f9:39:7d:9d:7f:44:7e:bd:a3:29:16:59:8b:5d:17:28:8c:1e:
         4c:19:3b:2c:80:f2:34:c9:0e:95:a1:cc:8f:48:6b:be:7e:23:
         fa:4a:b7:6d:0e:ea:d0:91:0e:61:7e:a5:44:59:d6:24:97:04:
         86:38:a5:fa:cd:f2:ff:1e:c5:9a:5e:fb:09:be:19:f7:04:84:
         76:f4:ea:19:da:df:cc:bb:1c:d9:c0:6d:21:3d:60:d3:f5:37:
         89:77:1c:1e:0b:04:3e:43:d5:ea:9d:f2:bd:21:30:96:df:9e:
         31:41:b6:4a:81:cd:16:6d:d5:1a:2f:2f:52:d9:ca:18:40:36:
         13:32:8b:70:09:48:b6:2c:c8:80:e0:9e:e6:30:53:71:8c:56:
         38:d4:a3:76:af:7d:0d:ff:f5:d4:5d:2a:29:3b:ee:5e:5a:1d:
         b0:23:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:59:29 2026 by rpki-client