Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58459512-cb56-3775-a96b-5287db927a80.roa
File:                     58459512-cb56-3775-a96b-5287db927a80.roa (raw, json)
Hash identifier:          agzlJrywwTKeJg48eikx/h2Zjd1lbcC3sphHT3YkLFg=
Subject key identifier:   30:90:D1:17:8B:43:11:6D:B9:F4:F2:F2:16:BF:9F:AD:6C:A5:DA:E0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E6697224BD62E43DF8900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58459512-cb56-3775-a96b-5287db927a80.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     40264
IP address blocks:        71.87.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:66:97:22:4b:d6:2e:43:df:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=345e4ce4-7fb5-4104-9546-52652bedf7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:2e:f8:e2:b8:de:e4:fe:ef:41:37:e5:31:
                    bf:5c:e8:3d:2a:b5:f0:d9:4d:c2:de:61:83:d7:89:
                    11:78:13:24:d4:c8:34:ce:2f:fe:8c:c5:31:38:25:
                    86:4d:9f:50:68:71:9e:57:62:f3:30:9b:c4:17:41:
                    86:d1:be:c0:dd:30:2f:e0:9d:d1:6e:fd:dd:51:64:
                    22:ba:d2:52:5d:4a:e1:0c:35:19:30:2a:39:e1:67:
                    d9:54:02:56:34:ff:1a:94:3c:f4:e6:ae:71:c3:09:
                    7a:c2:77:b3:ff:e2:04:c0:51:a0:ea:f6:ae:ee:fa:
                    ac:38:56:5c:55:87:59:7e:47:13:ef:2a:4e:05:bb:
                    66:d9:ec:89:f8:bd:2a:8e:b7:df:69:26:d7:de:b5:
                    94:5a:48:15:01:4c:6b:ba:df:21:8e:1f:f9:6a:46:
                    49:ea:3d:90:09:5b:37:ba:85:7c:3a:2b:c3:41:59:
                    12:e1:79:9b:3b:82:5d:0b:63:c6:9a:88:e7:35:fc:
                    2c:de:77:ae:93:52:48:1b:a9:1d:45:c5:a6:ed:84:
                    f3:91:e2:42:ed:24:2d:86:00:12:fb:c6:e1:ad:de:
                    b6:cf:ee:9d:f4:d8:6a:03:9c:93:7d:b0:7e:ae:85:
                    70:d4:7f:3b:1d:7c:b7:0e:dd:8c:b4:a7:06:cd:38:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:90:D1:17:8B:43:11:6D:B9:F4:F2:F2:16:BF:9F:AD:6C:A5:DA:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58459512-cb56-3775-a96b-5287db927a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:12:58:cd:5e:ac:b5:72:d6:17:03:0a:66:00:95:5f:51:27:
         22:64:e4:e2:ff:7e:a4:28:34:43:14:ba:65:26:2e:d7:10:a3:
         0b:db:c0:94:7c:8b:78:ea:2f:c0:d5:a5:ef:81:d6:b4:1c:f2:
         8e:0b:4d:1e:a3:28:08:c4:7d:66:f6:d4:fa:9e:b3:1b:bc:c1:
         b6:d2:4d:02:00:51:c1:37:83:81:16:5a:f1:98:b6:35:3b:bb:
         a1:4e:0e:7b:c6:6d:31:16:18:da:19:3b:bd:41:19:56:d4:d9:
         0c:8e:70:88:cd:75:e9:73:1b:c0:d5:a7:b9:13:c2:68:26:d1:
         8e:0f:37:68:bf:30:16:66:ef:ec:59:17:86:c7:4a:3a:23:01:
         15:c9:af:ed:fd:cc:bf:af:ff:c4:7e:30:97:93:ee:21:23:5d:
         82:a5:6a:5d:27:d2:29:ff:6d:2b:4e:76:ba:37:46:ec:4f:67:
         26:f7:1c:09:4d:90:6d:e4:aa:75:a0:e8:8a:0a:13:c5:c2:39:
         19:77:20:7b:00:a8:38:9e:be:c1:42:2d:d0:8b:a6:bd:c2:70:
         d9:f3:f7:82:c5:40:7c:eb:5c:be:3f:29:21:46:b4:b1:a5:77:
         9c:1b:0d:5e:00:9e:65:f2:16:9f:fe:1f:df:f6:b1:21:2b:ae:
         de:c6:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:32:48 2026 by rpki-client