Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72ae4e35-8847-306e-8087-0340c06f4d4e.roa
File:                     72ae4e35-8847-306e-8087-0340c06f4d4e.roa (raw, json)
Hash identifier:          xPhKHBtAOcdlNEsYNvMEfc/mglOxVu1MavqBfKa3VPA=
Subject key identifier:   78:25:DD:DF:E3:1E:46:CE:BF:A6:5F:2E:BE:40:4D:8D:27:CA:D3:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F481BB05FF30D182078C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72ae4e35-8847-306e-8087-0340c06f4d4e.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.176.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:48:1b:b0:5f:f3:0d:18:20:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=d86e4454-1d78-4801-8949-0eb3831ecdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:ac:6e:13:86:4b:94:bd:d5:36:e6:01:05:
                    42:9c:81:c6:6b:a2:cd:0a:5f:4c:07:ba:c9:60:0e:
                    2e:59:82:ec:1b:05:25:ef:72:85:4f:b2:b8:c3:55:
                    61:90:96:f4:72:31:4e:d6:c9:b9:8a:35:a8:5d:27:
                    59:16:6b:e8:30:07:a3:5d:a6:15:96:97:06:db:e6:
                    ba:93:20:8c:43:f9:20:ef:60:8e:b1:12:0e:f8:ae:
                    c9:47:00:37:10:b3:76:43:46:fa:e2:97:b4:05:ef:
                    d4:91:b0:df:cc:52:f5:82:0a:65:b5:7a:84:45:57:
                    51:c1:70:84:5f:c1:fd:21:46:87:8f:24:73:32:9a:
                    e7:c8:45:a9:ae:b9:fe:7a:27:e3:fc:a1:ed:27:dd:
                    27:42:dd:4d:1d:2d:55:4d:99:cf:fc:83:66:ab:5c:
                    5a:00:30:5d:cb:d3:6c:fb:ee:3b:f3:ec:57:97:e0:
                    47:ca:58:2c:72:b3:07:0e:38:38:f4:ed:93:30:4a:
                    1f:fe:d1:e8:a5:c1:e6:69:d8:69:25:0c:0a:9c:21:
                    77:46:df:a8:1d:b5:76:4a:67:78:3f:79:7f:1a:c6:
                    76:d0:f2:b7:a3:7f:83:f8:5a:27:33:68:c2:62:27:
                    60:b3:cb:00:14:2b:0f:c8:77:a8:d3:58:5b:b4:ea:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:DD:DF:E3:1E:46:CE:BF:A6:5F:2E:BE:40:4D:8D:27:CA:D3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72ae4e35-8847-306e-8087-0340c06f4d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:ec:28:c2:37:ef:18:8e:6a:67:4c:74:2e:a0:f1:0b:f5:
         bd:ac:5c:15:2d:92:72:66:1c:25:70:aa:1b:00:d5:af:47:88:
         5d:9e:34:b4:9b:be:21:fc:91:f2:30:78:e7:d5:bd:ff:ae:64:
         11:2b:64:e9:64:df:06:25:23:2e:44:ee:50:e7:dd:84:21:2d:
         84:a2:01:ce:44:5b:0e:ea:07:1f:97:8a:39:7d:98:9b:b8:b6:
         54:ec:07:f4:8d:8c:af:1f:af:df:9e:b5:de:73:06:b2:81:06:
         a9:ca:0c:63:4f:e3:72:d3:1a:03:3d:ab:9d:e3:98:76:90:35:
         7a:34:3c:be:41:e2:f8:ef:17:d1:90:e5:9c:5b:a7:dd:79:9b:
         2b:f0:c5:4a:6d:1a:16:34:fc:9d:9d:5e:cd:05:44:98:2a:03:
         c5:eb:89:c2:7d:c2:04:22:6b:d5:4b:9a:49:b5:4a:16:76:20:
         b3:4d:4b:33:11:7f:33:48:0f:a2:bf:e8:fb:b6:a2:0d:a3:fd:
         e3:63:a7:05:56:1f:d2:af:68:be:ce:39:58:b9:a8:64:d1:c7:
         d0:3f:ad:d9:27:dd:51:c3:5b:cb:a5:ef:d3:4b:8f:e1:10:5c:
         9c:21:1c:b7:ca:95:7b:ab:9d:1c:5f:d2:dd:2e:01:8e:a5:b3:
         a2:07:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:00 2026 by rpki-client