Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7892ded5-964a-33e0-9699-5adebb7e451b.roa
File:                     7892ded5-964a-33e0-9699-5adebb7e451b.roa (raw, json)
Hash identifier:          /yZ1psJHAaSg2XEd0f4Ovz7xxT6Ig9kVfdKo9S8nThk=
Subject key identifier:   6B:85:B1:42:8A:60:D7:B2:4D:5A:90:5B:8D:68:EC:34:85:B5:C2:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F3C0FA56E14A2415CB06C
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7892ded5-964a-33e0-9699-5adebb7e451b.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.159.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:3c:0f:a5:6e:14:a2:41:5c:b0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=03861cfc-10ea-4e93-9d9a-ee47136746f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d8:45:6c:a6:03:11:f1:9e:f4:00:73:d7:74:
                    31:f5:79:f1:da:02:25:e2:4c:31:8d:e2:df:49:c1:
                    8f:c6:06:ad:a3:8d:3e:a4:2c:35:5e:2e:34:86:ad:
                    0c:fa:b9:25:dc:9c:14:ab:6c:89:8e:7b:fd:41:3b:
                    dc:7c:72:68:07:ee:1d:8d:9d:00:cb:5d:91:98:58:
                    59:3c:a4:b3:21:48:39:9a:8a:f1:f2:a9:18:9d:26:
                    4d:b8:58:5d:67:17:a4:bf:07:30:17:af:1f:ac:41:
                    af:ee:5c:5e:97:7f:48:49:0e:c2:da:1e:1b:fc:5f:
                    fd:12:44:c9:18:a3:1c:6d:98:b2:73:0e:ee:ee:58:
                    a1:12:9f:a8:cb:52:46:8e:5f:fe:1b:78:1b:45:71:
                    b8:61:f5:6d:8b:a7:0c:29:8e:ac:c3:0b:ca:81:b2:
                    70:d9:7f:d8:e2:d4:f0:3b:e0:94:f3:52:73:31:73:
                    d2:0a:a0:6e:bc:22:a2:04:a1:f0:db:5b:fd:7d:86:
                    ba:6d:c1:27:b7:71:90:ec:5c:ad:e7:55:92:1d:c9:
                    ab:30:c8:64:48:29:d2:a4:9d:04:b5:c5:f1:22:5b:
                    b7:b1:68:71:43:f1:bd:4d:50:47:6a:15:e4:81:e0:
                    7a:a5:57:60:ae:df:1d:6a:fc:39:ba:07:d4:1a:2a:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:B1:42:8A:60:D7:B2:4D:5A:90:5B:8D:68:EC:34:85:B5:C2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7892ded5-964a-33e0-9699-5adebb7e451b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8d:a7:ed:81:92:a7:e7:55:22:c6:48:4e:d1:00:72:9d:81:
         46:54:af:e9:bb:06:6f:5f:8f:01:ab:1c:cc:e9:2a:6b:aa:8b:
         5b:65:7b:19:aa:f9:fd:76:7a:8d:fd:53:f9:f4:24:c4:20:44:
         15:13:05:e7:37:24:c4:bb:1f:17:be:dc:32:c5:40:64:d0:98:
         33:4c:28:97:cc:57:a8:b3:b0:d3:60:3c:7f:1c:54:a1:f2:4f:
         e8:2f:9d:40:31:b3:46:e1:e3:1b:5a:cb:d1:3a:02:2b:c2:69:
         01:4a:5a:5f:01:82:44:b7:12:3b:ec:64:04:f5:41:1e:06:69:
         67:81:e2:3d:20:6a:81:48:0d:93:d1:53:73:8c:88:78:da:49:
         55:5b:15:25:85:26:95:c5:6b:f0:a8:5d:e0:7e:3e:8d:c2:73:
         4f:61:b9:52:39:f3:1f:d9:4b:13:b9:18:fe:a1:d9:8b:79:ca:
         09:e5:8f:79:f7:2c:a5:f0:cb:9c:75:0f:88:c6:ef:f3:3e:f7:
         c2:e0:cb:81:23:94:ce:11:d9:1c:2f:27:38:f0:f1:db:28:72:
         5f:3f:0c:f0:a4:c4:ae:2a:59:3c:e3:df:65:70:4e:1a:bd:0d:
         ca:fa:7e:7d:20:0d:5d:ac:ac:bf:2d:62:d0:bc:a3:55:aa:7d:
         fd:3c:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:31:39 2026 by rpki-client