Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9367eb78-e35b-359b-b20e-0aa952c7d51c.roa
File:                     9367eb78-e35b-359b-b20e-0aa952c7d51c.roa (raw, json)
Hash identifier:          VXKX88SIFXGOBu7EqqWbdM7Qx7ZgIepf5lSdCDeQR70=
Subject key identifier:   26:B1:44:08:F9:28:82:46:A4:A4:31:6B:14:60:7A:87:4E:A3:A6:4D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161CB4250AC647B20686240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9367eb78-e35b-359b-b20e-0aa952c7d51c.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.159.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:cb:42:50:ac:64:7b:20:68:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=1a2b4b51-8392-4c10-8ef8-6646e3350ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:3f:62:79:69:7d:f4:b9:a0:ae:40:7e:eb:
                    73:7f:61:6c:22:6e:cd:99:73:c9:82:0f:c6:ac:a7:
                    e9:cc:ff:28:b0:3d:ca:0a:59:13:cd:67:db:c2:4f:
                    48:ee:f5:99:87:80:c5:ad:16:a3:99:ab:8d:18:05:
                    b7:4d:56:f0:78:83:ef:86:28:6a:29:38:36:90:9d:
                    b5:dd:07:39:80:40:cc:34:46:9a:19:ae:96:58:6f:
                    f6:5f:e6:54:c3:8b:f8:ab:ec:ba:58:18:77:e0:fb:
                    95:94:7f:7f:bf:63:83:4e:d7:82:3d:3d:62:62:20:
                    6f:20:48:d7:26:67:6b:1b:fc:f1:50:89:cb:f5:ab:
                    e3:f9:f3:d6:88:66:72:ec:cd:24:52:df:da:6a:51:
                    df:20:36:b8:2a:0d:7b:ab:c1:72:be:5b:84:01:a9:
                    e8:40:6f:1b:34:84:96:7c:70:2b:ec:93:ef:7d:1a:
                    c6:d8:82:e8:68:a5:fa:53:5c:b8:cf:44:77:c6:6c:
                    45:d0:69:53:87:bb:6c:70:8c:e4:de:d0:c5:c5:1f:
                    fc:69:90:39:97:33:da:74:45:13:55:1a:aa:db:af:
                    e5:e9:9a:15:10:5c:4c:22:ca:82:de:d6:e3:be:f1:
                    da:3f:db:e9:17:cd:66:5a:4a:44:a7:0c:fd:1c:c8:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B1:44:08:F9:28:82:46:A4:A4:31:6B:14:60:7A:87:4E:A3:A6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9367eb78-e35b-359b-b20e-0aa952c7d51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:3f:b8:9b:35:33:05:0d:84:d3:7c:8a:cd:fe:83:03:00:
         1b:23:35:43:85:23:fa:f5:92:c5:04:4a:9f:8d:36:ea:70:1e:
         87:51:6c:26:b2:19:27:7e:dc:8c:24:64:03:5c:14:5f:67:fa:
         41:9f:b9:cd:df:f0:cf:85:f9:42:d7:1a:ff:a5:8b:56:db:3b:
         5a:a7:02:73:a8:5a:33:01:fe:28:d6:97:ec:2d:20:88:11:f7:
         6d:78:76:e8:25:38:59:31:12:3e:85:19:eb:69:59:25:26:c6:
         2c:ec:dc:cc:c4:17:e9:07:9b:3a:1b:7e:c3:4a:6f:23:b3:d8:
         ba:b9:f7:25:c7:aa:37:77:d1:46:9a:18:ef:36:ce:a2:84:ef:
         76:d0:fd:99:15:1b:57:1c:04:02:2a:89:87:08:85:34:e0:90:
         55:7f:3a:a0:90:ba:ba:14:6c:d9:46:32:79:c5:05:5e:61:dc:
         73:8e:db:28:e7:cb:41:4b:c4:29:1e:b8:43:1b:6e:75:01:85:
         b5:9c:36:22:74:9b:65:a7:d6:9f:10:52:93:71:5a:99:43:a7:
         2e:29:65:18:0b:57:65:25:4a:60:6c:cf:05:be:74:3b:18:e3:
         15:2d:c9:0a:7f:57:ea:03:be:21:e6:18:25:db:c5:36:aa:96:
         b9:c9:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:15 2025 by rpki-client