Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa
File:                     948a4eb4-2363-37ae-bcd7-e82c57868f30.roa (raw, json)
Hash identifier:          IdKM+qxXD/G3cTwUpbeAUdCgmj52WLYUE2OyiGt3874=
Subject key identifier:   7A:1A:D2:A4:48:1F:E2:2A:24:CA:D8:0D:02:15:9B:01:0D:E5:8C:58
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1614596B82F6281DCEE5380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.159.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:45:96:b8:2f:62:81:dc:ee:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3e3b28b0-b9b8-4242-bf61-9b58bd0408e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:db:41:68:09:73:be:9f:00:f9:81:04:0a:
                    54:36:b1:0f:94:26:17:79:2d:82:4b:20:ad:3d:ab:
                    5f:45:a9:ad:43:e3:b9:14:67:b1:ee:85:1b:f2:0b:
                    96:6c:db:aa:70:a4:7f:a8:0d:b5:a0:20:9b:24:94:
                    f8:0a:3c:c3:99:b2:29:86:33:3d:13:03:d0:82:fe:
                    d9:a7:e6:05:6b:5a:13:1c:2b:f0:49:80:31:2a:5e:
                    23:b0:9f:06:18:35:9c:66:a9:86:b7:14:3b:b1:8b:
                    c2:98:0e:18:1a:ef:b6:19:03:d4:08:e5:e7:74:3f:
                    b2:e0:19:98:4c:64:28:f4:01:7a:d3:28:64:3d:b4:
                    26:aa:c3:97:97:78:f4:f2:1c:0a:80:06:33:7b:62:
                    f7:dd:47:86:89:44:04:5b:72:0d:11:ad:8a:3d:23:
                    71:78:40:bb:03:bf:3d:e5:5e:41:55:91:af:3f:d7:
                    72:14:ee:b8:c3:bf:ce:81:a3:d6:bf:e6:a0:0a:86:
                    6f:2e:24:5e:ab:06:67:e4:d4:56:db:34:2c:05:e2:
                    e9:50:ea:eb:0a:56:96:69:ac:41:bf:72:8d:5f:f4:
                    b5:6c:ae:df:82:b0:a3:a0:92:95:10:86:55:e1:96:
                    34:8b:81:05:bc:eb:59:08:64:af:b2:82:9d:a0:2f:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1A:D2:A4:48:1F:E2:2A:24:CA:D8:0D:02:15:9B:01:0D:E5:8C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948a4eb4-2363-37ae-bcd7-e82c57868f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:74:19:88:ea:46:27:86:21:20:c8:9c:45:e4:b6:2a:b3:9e:
         a4:6d:4a:ba:04:16:0e:7d:60:61:6d:d5:0f:af:42:5a:25:25:
         e7:ff:5e:11:6f:f2:71:5a:f5:f5:24:3a:56:8d:f1:17:53:c8:
         8c:a3:fe:81:84:eb:06:77:47:ce:03:11:42:3b:7a:85:bb:53:
         89:42:48:3f:e4:d3:9d:67:c2:10:b8:3e:d2:f0:8d:dc:96:1c:
         d1:69:df:61:31:75:6f:6b:8e:5a:48:2d:84:58:51:d5:b0:d1:
         c6:30:ec:fc:a9:95:96:4c:70:1e:e1:b0:5f:72:ee:b4:e0:ff:
         4f:94:a5:e1:35:ff:89:87:67:f5:fd:1e:2c:31:71:50:f5:ca:
         04:15:f5:76:e1:35:26:8f:4c:56:f5:67:d0:37:34:dc:f7:39:
         d0:ed:e6:47:e7:54:1d:33:b5:2f:b9:ad:aa:7a:54:b7:2a:ed:
         1c:25:c6:1c:7a:0d:44:54:9a:98:58:d4:27:67:3c:b7:11:8d:
         b5:51:40:85:23:66:2d:e4:74:c4:4d:97:31:63:bc:0e:86:16:
         8c:d7:22:f6:66:ad:d7:5f:41:07:2f:aa:f5:ba:93:9d:3d:dd:
         a3:2d:c0:20:cc:a5:1d:49:87:03:84:45:5c:ea:eb:8b:ae:6e:
         8b:ed:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:31 2025 by rpki-client