Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e172b81b-97f0-3cac-8690-9aab9c646a76.roa
File:                     e172b81b-97f0-3cac-8690-9aab9c646a76.roa (raw, json)
Hash identifier:          YgrNKVTIQOIZolTNHVTWBltueu09qDJfiUBnnhJQ3zo=
Subject key identifier:   EF:15:61:72:6D:47:A6:59:F0:5A:46:CE:8D:EA:D4:2A:C2:31:C6:6E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161333E877BB82EB5358C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e172b81b-97f0-3cac-8690-9aab9c646a76.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.216.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:33:3e:87:7b:b8:2e:b5:35:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3084ef7b-4eb9-43b5-89f1-72652736d495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:18:9f:c2:e9:5e:3d:ab:52:22:62:4a:ef:
                    1e:bc:66:50:28:0f:d2:81:00:6b:79:12:05:0d:0b:
                    03:d5:f2:5b:df:99:85:24:36:65:07:4a:b3:78:04:
                    c9:0c:71:00:03:ae:0a:d2:6c:ba:9e:a2:b8:8b:56:
                    c6:f1:92:91:43:03:b8:17:ec:e4:3f:32:67:98:3e:
                    de:39:99:a0:fb:c0:79:78:ea:0a:20:b7:ab:ff:df:
                    e9:a1:d6:30:c9:69:19:c4:7d:d4:4c:16:b5:08:92:
                    bd:49:86:68:f1:9a:8b:c5:e1:a0:5a:8e:17:f0:c3:
                    a0:84:d5:fd:ba:e7:02:6b:8c:dd:5b:6c:2b:83:12:
                    90:f6:58:ab:3b:8b:c1:25:08:9d:5a:04:a5:42:72:
                    8d:1c:ef:fd:27:09:a4:17:cb:1d:cc:38:3e:2e:b9:
                    c4:57:c8:89:e8:03:3d:27:c4:fc:63:a3:99:0d:78:
                    7d:87:c8:a2:b4:84:90:66:14:6b:04:c0:fc:e2:01:
                    db:11:96:5e:1d:0f:7b:55:0d:8e:b1:0b:61:d3:bd:
                    57:37:20:0d:16:93:26:07:be:cf:b8:93:63:20:66:
                    4a:06:c7:3d:f3:f2:a7:ba:a8:6a:a5:3e:79:7c:79:
                    cd:85:a1:fc:5d:df:78:95:1d:bb:4a:f5:28:a4:bc:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:61:72:6D:47:A6:59:F0:5A:46:CE:8D:EA:D4:2A:C2:31:C6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e172b81b-97f0-3cac-8690-9aab9c646a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:66:27:36:f0:7e:e3:b3:79:b8:eb:f0:2b:a5:c0:44:bf:83:
         a5:9d:34:f6:02:85:b0:0e:49:01:a2:5b:cf:6b:42:0e:7d:0c:
         11:86:02:02:e9:1d:91:99:fd:0c:83:ce:8f:85:f3:ba:ae:17:
         e3:0e:b7:03:87:23:4f:92:07:e0:a1:dd:e9:33:68:b6:44:14:
         10:ee:c7:e5:cd:ec:10:41:1c:c0:aa:5b:25:43:47:25:d7:fe:
         d2:98:a8:d9:c7:4a:ef:bd:e8:2f:de:28:57:d6:c6:2e:35:71:
         ec:87:ff:e6:2b:da:1a:b1:b7:03:b4:10:45:4c:0d:53:02:9a:
         52:1f:15:e5:fe:83:12:8e:fa:5c:9f:d8:6b:b4:dd:b1:95:9c:
         ed:63:4f:a0:d9:4a:a6:f0:59:5b:a3:bf:12:85:ae:53:ee:79:
         84:dc:79:ba:44:a4:bb:44:ac:52:1a:ce:a7:59:b3:29:23:0c:
         26:61:d6:b8:75:d9:4f:fe:b8:29:60:1b:a9:c3:ec:9c:d8:1e:
         65:e2:ec:55:d6:9b:66:22:e3:24:d3:04:93:0e:ed:68:68:84:
         3f:9b:43:8f:ea:13:dc:78:7e:78:96:b7:aa:2b:c5:47:24:43:
         d9:14:39:7a:82:3d:e2:8a:df:8a:0f:26:a2:1d:34:b2:d4:01:
         41:68:b4:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYTM+h3u4LrU1jIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MzA4NGVmN2ItNGViOS00M2I1LTg5ZjEtNzI2NTI3MzZkNDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloYn8LpXj2rUiJiSu8evGZQKA/SgQBreRIF
DQsD1fJb35mFJDZlB0qzeATJDHEAA64K0my6nqK4i1bG8ZKRQwO4F+zkPzJnmD7e
OZmg+8B5eOoKILer/9/podYwyWkZxH3UTBa1CJK9SYZo8ZqLxeGgWo4X8MOghNX9
uucCa4zdW2wrgxKQ9lirO4vBJQidWgSlQnKNHO/9JwmkF8sdzDg+LrnEV8iJ6AM9
J8T8Y6OZDXh9h8iitISQZhRrBMD84gHbEZZeHQ97VQ2OsQth071XNyANFpMmB77P
uJNjIGZKBsc98/KnuqhqpT55fHnNhaH8Xd94lR27SvUopLzBOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8VYXJtR6ZZ8FpGzo3q1CrCMcZuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTE3MmI4MWItOTdmMC0z
Y2FjLTg2OTAtOWFhYjljNjQ2YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNgkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVmJzbwfuOzebjr8CulwES/g6WdNPYChbAOSQGiW89rQg59DBGGAgLp
HZGZ/QyDzo+F87quF+MOtwOHI0+SB+Ch3ekzaLZEFBDux+XN7BBBHMCqWyVDRyXX
/tKYqNnHSu+96C/eKFfWxi41ceyH/+Yr2hqxtwO0EEVMDVMCmlIfFeX+gxKO+lyf
2Gu03bGVnO1jT6DZSqbwWVujvxKFrlPueYTcebpEpLtErFIazqdZsykjDCZh1rh1
2U/+uClgG6nD7JzYHmXi7FXWm2Yi4yTTBJMO7WhohD+bQ4/qE9x4fniWt6orxUck
Q9kUOXqCPeKK34oPJqIdNLLUAUFotLs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:38 2025 by rpki-client