Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/60f74c11-e82a-3537-a2cf-9a1c283c2575.roa
File:                     60f74c11-e82a-3537-a2cf-9a1c283c2575.roa (raw, json)
Hash identifier:          IzoeeHPdQQE1TjDaeZR146+kYPIztxgG/CqrCTX7cIE=
Subject key identifier:   81:32:A2:A9:9B:81:54:0F:AC:80:83:32:B6:D9:93:24:7F:B1:95:D5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FA49A1CB30729FCC88680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/60f74c11-e82a-3537-a2cf-9a1c283c2575.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.159.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:a4:9a:1c:b3:07:29:fc:c8:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=e8aa6cd6-f7ed-4622-9362-5e0e092c2425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:24:15:e2:e3:9b:4d:50:fe:46:ed:9a:ee:
                    27:3e:21:9b:46:80:f5:62:4f:83:04:33:f8:14:3b:
                    e9:7f:dd:38:62:14:f2:a1:0f:57:2f:67:b3:ca:aa:
                    6e:fa:f1:b4:94:af:5c:3e:ca:5a:9e:0c:06:ba:fa:
                    92:80:8a:9e:9a:e4:24:13:5b:cb:da:33:7d:cd:b2:
                    f2:4a:de:f1:91:cc:4d:1f:90:d4:93:07:0f:f6:02:
                    30:6f:01:a0:83:64:17:82:ae:9a:68:3d:16:29:01:
                    7d:40:76:b7:c7:12:d5:63:35:dd:d0:b5:2f:d0:cb:
                    2a:9b:18:70:4e:7b:4d:15:c5:ec:18:a2:ac:f0:6e:
                    05:d3:48:f9:b7:c5:ee:9f:7a:7d:96:8b:6e:3a:e6:
                    41:46:33:b4:cc:60:e6:d3:2f:ce:d5:a9:e3:50:f5:
                    16:7b:40:f7:c8:ed:d7:d7:e7:8d:fc:9b:ed:b3:d7:
                    87:ef:b0:b5:6a:1f:d8:df:65:73:96:bc:8d:a0:76:
                    3b:0a:13:a0:43:40:26:73:2a:5e:cf:41:c2:e1:9e:
                    1c:b7:0d:56:82:4c:9a:81:3a:e5:78:c9:50:8e:fe:
                    40:a2:f6:77:ca:85:bc:0b:19:da:8a:98:31:fa:0b:
                    2c:71:4d:53:42:3e:f3:d0:14:fe:04:ba:28:49:4d:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:A2:A9:9B:81:54:0F:AC:80:83:32:B6:D9:93:24:7F:B1:95:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/60f74c11-e82a-3537-a2cf-9a1c283c2575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:a8:fc:e1:99:20:55:04:a6:a7:e5:82:99:01:69:d2:05:
         16:2d:e1:1d:4e:35:f6:bf:1f:a0:30:f9:5e:75:c5:04:4b:cb:
         82:c9:f7:85:48:af:81:65:62:d1:50:cf:a1:a1:0f:95:76:20:
         a9:09:c2:af:93:86:04:03:66:fc:8a:d5:ba:85:96:3e:5f:46:
         ae:c5:ce:b2:39:d5:8e:a9:e9:88:f9:69:ec:fe:bf:34:2a:75:
         8c:23:6c:96:3b:cd:c8:7a:b4:93:11:8e:32:06:7b:a2:df:13:
         49:e3:dd:14:b5:bb:09:f4:d5:b3:16:84:ef:d9:8a:86:59:7e:
         0b:28:ad:c5:5a:92:a1:41:7d:e1:65:41:5e:22:89:c9:04:8a:
         f7:82:bf:db:0f:6f:5b:3a:a8:9e:c5:0c:62:70:fe:2e:62:b8:
         e7:91:12:96:df:20:40:25:52:e7:c3:b3:48:54:f9:7b:65:5b:
         37:0b:99:96:d0:26:0b:1e:98:41:34:c4:38:3f:b0:a1:33:36:
         a1:50:ef:fa:aa:94:56:99:a5:a3:be:84:c3:89:2a:ff:27:f4:
         69:9a:06:66:12:dc:f7:70:a8:77:cd:09:00:be:19:db:84:a8:
         98:a4:2f:60:db:fc:93:c6:5c:ff:a2:2b:d6:20:63:4a:d2:b7:
         64:bf:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:30 2026 by rpki-client