Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa
File:                     83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa (raw, json)
Hash identifier:          sYpw7XipbN/gbSa6wFj/zn8Mmpc8funL7TYBSwvf6wU=
Subject key identifier:   EC:DD:3D:0C:39:F1:F1:D5:98:D1:F8:D2:48:67:92:2B:45:2B:52:34
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07EC6132D77F38E9492200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        24.240.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ec:61:32:d7:7f:38:e9:49:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=8b2621cd-7480-460e-979f-19d6a0d9e684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:a9:0c:62:55:a0:cf:88:f4:58:fb:98:9f:
                    0e:a4:42:d9:fd:33:99:66:81:2e:3e:15:25:32:18:
                    9e:41:16:3f:a3:3f:51:bb:2c:b7:09:eb:b4:7e:d2:
                    34:57:1b:43:e3:d5:f1:08:f0:bc:bd:80:99:fa:a5:
                    aa:fd:2e:4f:8f:84:1e:1d:26:d0:64:7e:64:4b:3a:
                    b5:4f:96:18:35:4f:81:0e:d5:16:35:5d:00:bb:4f:
                    06:54:ad:be:49:a7:eb:7e:1f:23:11:52:bb:fb:0c:
                    a5:a2:d8:b0:c1:59:53:97:ff:65:10:c2:54:44:e1:
                    1f:ff:54:69:34:48:7f:b1:27:74:cd:0c:81:be:cf:
                    7b:94:dd:78:35:05:41:1f:89:4d:2e:25:02:d9:cc:
                    c6:30:06:8d:11:74:05:8d:95:6e:35:af:f3:4b:d6:
                    7e:99:41:af:28:ef:c4:aa:f6:b9:a1:54:6a:83:ef:
                    bf:b6:37:26:31:b0:8f:b5:e5:b5:b0:9a:9a:af:23:
                    aa:42:9c:ea:a1:a0:24:52:61:46:11:7c:64:93:64:
                    ce:9d:36:93:64:65:62:27:3c:a0:81:e8:88:ae:be:
                    c0:ff:38:98:15:6d:1e:90:47:18:c6:a6:ce:2c:d5:
                    08:a5:81:35:6c:ba:f9:6d:50:c0:c6:87:cb:6f:21:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:3D:0C:39:F1:F1:D5:98:D1:F8:D2:48:67:92:2B:45:2B:52:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/83756db4-4cbd-3dbd-aacc-b1054fb2206a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:05:5f:f4:70:69:5a:c4:53:91:61:64:ee:63:ab:df:fb:f7:
         aa:ff:e0:b6:63:46:ce:0d:8d:2f:3d:86:44:bb:11:84:a1:31:
         ae:5c:a3:88:87:9c:8d:eb:ad:24:47:0b:11:ab:81:d8:32:6c:
         4f:bd:7b:da:2c:de:18:88:be:93:c4:24:2e:f1:04:f5:31:c1:
         f9:ec:a4:db:3d:67:37:6f:d8:2a:86:88:c8:71:c4:8f:d4:bb:
         b1:04:85:6f:88:05:ca:6a:e9:0e:9e:2a:3b:d5:c9:3d:7b:a3:
         0d:29:2d:b0:91:24:c6:ed:6e:c4:61:9b:0c:c1:f7:b9:31:86:
         98:11:4d:8c:ec:03:a3:bd:a1:a8:11:87:a3:44:fa:eb:23:e5:
         cb:a5:c1:a4:a9:b1:18:6f:92:37:2e:64:73:a8:d4:be:f4:2a:
         09:9d:1b:44:1a:e6:73:12:99:cc:93:54:6e:b4:46:4d:8e:33:
         47:14:60:36:4d:0b:48:74:a9:c3:8c:3f:7b:d6:65:50:f5:d8:
         83:83:81:85:a6:aa:32:1a:68:c6:07:52:3a:64:74:10:a8:88:
         f5:87:96:02:a6:0a:16:37:9c:aa:4b:d7:5f:64:50:cd:b0:35:
         05:b8:01:28:11:24:05:1c:3c:a9:36:56:22:f9:72:3a:3c:7a:
         07:69:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:20:18 2026 by rpki-client