Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6822174a-2b73-3290-8f95-8590761464df.roa
File:                     6822174a-2b73-3290-8f95-8590761464df.roa (raw, json)
Hash identifier:          oJ4r4PrFYsTfnrhzYp/C3+75kRfrciSSTm7YjkDYDGU=
Subject key identifier:   14:AC:ED:7A:DB:9C:2B:4F:68:0B:B6:EE:5F:FE:D2:B2:9E:CC:63:5F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161C68B13B94E10305E3580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6822174a-2b73-3290-8f95-8590761464df.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.196.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:c6:8b:13:b9:4e:10:30:5e:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9ba8f15d-f064-4fb3-9284-bf13c9f2c971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:eb:7e:69:2a:76:4d:95:eb:d9:20:45:14:
                    a1:20:05:7b:67:03:a9:b9:9a:36:03:51:9c:7f:28:
                    e2:ce:a5:1d:f4:51:d3:85:8b:da:4b:1c:86:1a:d0:
                    cc:76:c4:ea:fb:c0:6e:64:a4:38:37:46:48:ed:09:
                    c0:c0:6f:23:05:92:4d:b7:7f:70:2a:7a:f7:5d:47:
                    4d:57:ff:00:20:8b:1f:fc:7b:43:d7:28:5f:b2:12:
                    cd:95:17:aa:ad:61:70:c2:c9:67:e2:25:3c:ba:be:
                    42:f6:0f:b1:b2:d7:40:b6:0d:b5:0d:4e:7d:84:d0:
                    50:fe:93:da:4e:1e:b7:3d:fb:76:ea:cd:92:dc:6f:
                    f4:2a:6d:f7:f1:c4:aa:d5:26:ba:b8:76:5c:83:a3:
                    57:bb:1a:16:72:29:86:74:d4:7f:b9:86:97:e9:e0:
                    f9:32:16:63:a5:bc:90:3a:5a:61:f1:56:aa:04:d8:
                    57:9e:c5:c7:f1:5b:37:9d:50:f6:5a:80:87:87:5e:
                    fc:ee:0e:44:44:79:ab:74:b8:a2:e3:ed:4d:41:ab:
                    25:11:4b:9e:63:4e:0e:e8:3e:3b:9a:be:21:07:1f:
                    12:c4:e3:71:24:70:38:8a:62:7c:48:a1:e5:83:88:
                    c7:da:18:af:57:59:18:e8:b9:43:b0:64:5d:ab:05:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AC:ED:7A:DB:9C:2B:4F:68:0B:B6:EE:5F:FE:D2:B2:9E:CC:63:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6822174a-2b73-3290-8f95-8590761464df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:17:0c:fd:72:23:7a:c7:0e:db:db:90:4e:f3:f9:0b:93:a2:
         0b:c2:4f:64:26:f9:2c:42:14:2f:a4:09:93:bc:38:fe:d3:12:
         79:f4:68:c4:0c:0b:d3:3a:c8:19:ec:72:7c:34:ed:d3:ca:b3:
         b4:e9:09:ed:02:64:b4:68:1e:d4:6f:e0:85:5b:d4:6e:5a:2d:
         64:49:b2:79:87:f7:fa:ea:0a:5f:f8:43:da:c3:b9:78:b2:68:
         8d:38:7d:42:e8:35:d4:91:62:c2:5b:c2:80:09:d0:e4:24:30:
         ec:42:3e:70:b9:e9:26:6e:54:d5:12:34:00:99:62:de:22:7b:
         8a:b7:61:68:57:9f:e3:99:30:ec:df:97:40:15:6e:4d:6a:2b:
         1a:3b:d4:b1:dd:20:2e:97:fd:70:94:0c:21:58:e3:be:56:83:
         a1:f8:11:0e:89:a9:66:a0:36:7b:4f:e0:ce:29:1e:03:76:18:
         fe:8d:96:ef:0f:8d:28:29:85:c5:85:ab:97:a6:7b:aa:20:0c:
         d1:da:a2:e5:f6:40:88:67:08:2d:e9:42:60:95:f0:14:92:ab:
         67:2a:42:75:7c:2d:e8:32:43:9e:94:ad:86:17:a7:87:90:62:
         6f:ff:2a:39:cd:ef:d4:57:7e:a4:09:ad:e4:37:ce:cc:32:80:
         ca:34:2a:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYcaLE7lOEDBeNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OWJhOGYxNWQtZjA2NC00ZmIzLTkyODQtYmYxM2M5ZjJjOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k/rfmkqdk2V69kgRRShIAV7ZwOpuZo2A1Gc
fyjizqUd9FHThYvaSxyGGtDMdsTq+8BuZKQ4N0ZI7QnAwG8jBZJNt39wKnr3XUdN
V/8AIIsf/HtD1yhfshLNlReqrWFwwsln4iU8ur5C9g+xstdAtg21DU59hNBQ/pPa
Th63Pft26s2S3G/0Km338cSq1Sa6uHZcg6NXuxoWcimGdNR/uYaX6eD5MhZjpbyQ
Olph8VaqBNhXnsXH8Vs3nVD2WoCHh1787g5ERHmrdLii4+1NQaslEUueY04O6D47
mr4hBx8SxONxJHA4imJ8SKHlg4jH2hivV1kY6LlDsGRdqwVCywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSs7XrbnCtPaAu27l/+0rKezGNfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjgyMjE3NGEtMmI3My0z
MjkwLThmOTUtODU5MDc2MTQ2NGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGMTYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUXDP1yI3rHDtvbkE7z+QuTogvCT2Qm+SxCFC+kCZO8OP7TEnn0aMQM
C9M6yBnscnw07dPKs7TpCe0CZLRoHtRv4IVb1G5aLWRJsnmH9/rqCl/4Q9rDuXiy
aI04fULoNdSRYsJbwoAJ0OQkMOxCPnC56SZuVNUSNACZYt4ie4q3YWhXn+OZMOzf
l0AVbk1qKxo71LHdIC6X/XCUDCFY475Wg6H4EQ6JqWagNntP4M4pHgN2GP6Nlu8P
jSgphcWFq5eme6ogDNHaouX2QIhnCC3pQmCV8BSSq2cqQnV8LegyQ56UrYYXp4eQ
Ym//KjnN79RXfqQJreQ3zswygMo0KiY=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:57 2025 by rpki-client