Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5bc6c50-37bd-3c43-a10a-58442eb487bb.roa
File:                     f5bc6c50-37bd-3c43-a10a-58442eb487bb.roa (raw, json)
Hash identifier:          BcCE5DxjXuRYJ821uThyrwtqvHkutuANZdV9MFlO7J8=
Subject key identifier:   46:8A:C2:DE:17:89:B4:F1:F3:D1:33:FB:19:A2:DF:A9:3F:27:72:88
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DCB65130114E4C5304600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5bc6c50-37bd-3c43-a10a-58442eb487bb.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        24.240.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:cb:65:13:01:14:e4:c5:30:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=8b8ba76d-01dc-48ec-b913-4d4b12d2ca91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:ae:f9:9d:0e:29:e7:a3:08:2d:57:dd:bd:
                    d2:09:aa:b7:2d:da:16:cd:2f:0c:20:a3:7d:fc:fb:
                    95:c4:9a:0a:7b:d7:32:11:66:4d:bd:8e:e0:59:dd:
                    1b:f3:a9:95:24:0a:78:f2:17:a0:1f:fd:ae:74:1a:
                    7e:36:0e:0c:2a:06:a7:5f:a8:d1:73:01:6d:39:2a:
                    1a:a9:f4:cd:de:89:cf:85:e7:ef:05:44:18:73:e9:
                    cd:ad:14:f8:b2:d9:5a:e2:3a:69:d1:0c:5f:74:23:
                    c2:c4:05:85:a2:84:d7:20:67:56:b5:94:4a:d9:98:
                    6c:97:6b:9a:3f:ca:72:7e:73:ed:ca:b9:60:10:61:
                    0e:9e:f1:ef:c1:db:c3:80:f5:e7:5e:d5:5a:c0:e3:
                    bd:fd:d5:2e:4a:77:f6:a8:af:dd:d2:c9:b1:26:94:
                    44:22:8b:bc:88:78:01:a6:36:bc:cf:65:bc:f6:5a:
                    46:30:af:26:56:bb:1b:e9:68:dd:f7:5b:64:64:41:
                    d8:17:76:26:30:60:b4:a1:77:cc:5f:f8:cc:14:c1:
                    33:ee:8b:3d:8f:8f:84:d1:7a:73:74:98:3a:bc:77:
                    61:45:5a:84:23:28:a4:40:47:a2:cc:42:24:b7:6c:
                    59:41:69:49:e0:07:34:ef:d2:a1:25:e2:44:f8:a9:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:C2:DE:17:89:B4:F1:F3:D1:33:FB:19:A2:DF:A9:3F:27:72:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5bc6c50-37bd-3c43-a10a-58442eb487bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:a9:a7:8c:54:b6:e1:39:aa:5f:c2:2b:42:23:a4:3f:71:
         9e:ee:f1:c3:a7:23:06:56:ff:9b:42:24:3a:3b:4d:ed:a9:f1:
         e0:89:4c:94:8c:11:d6:41:84:e8:06:53:68:3c:ff:76:ba:b6:
         3d:47:e7:6a:a8:2f:e7:19:a1:1d:43:d3:5c:68:b4:4f:bf:44:
         51:e0:a9:76:64:b5:b0:93:88:81:41:7c:16:d7:81:c0:95:d5:
         94:e9:a3:97:64:27:8c:96:89:4a:0b:66:9e:ee:3f:fd:f1:32:
         d3:47:07:66:be:ef:09:f6:9b:95:67:ba:87:74:bf:0f:a1:0c:
         c0:78:2d:35:d3:2a:fc:b5:0b:b6:df:12:81:f2:c3:d5:33:94:
         d8:4e:a8:91:35:88:15:bf:32:b0:ff:90:62:29:44:4a:4e:97:
         ab:51:51:d8:0d:ec:79:81:41:c3:85:18:3b:be:d6:fe:12:f6:
         68:23:ea:7b:31:bc:e1:84:bf:cf:89:1c:df:41:2a:f8:3c:25:
         c0:bf:bb:15:2f:34:5e:7c:e3:b6:f5:0a:6e:07:da:6a:5c:25:
         62:9e:29:62:2b:83:69:3c:0d:96:de:7f:82:71:38:74:fc:05:
         c8:84:6e:45:51:88:25:ea:bf:d9:6f:ce:03:2f:1f:28:90:08:
         1d:b7:55:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXctlEwEU5MUwRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
OGI4YmE3NmQtMDFkYy00OGVjLWI5MTMtNGQ0YjEyZDJjYTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPiu+Z0OKeejCC1X3b3SCaq3LdoWzS8MIKN9
/PuVxJoKe9cyEWZNvY7gWd0b86mVJAp48hegH/2udBp+Ng4MKganX6jRcwFtOSoa
qfTN3onPhefvBUQYc+nNrRT4stla4jpp0QxfdCPCxAWFooTXIGdWtZRK2Zhsl2ua
P8pyfnPtyrlgEGEOnvHvwdvDgPXnXtVawOO9/dUuSnf2qK/d0smxJpREIou8iHgB
pja8z2W89lpGMK8mVrsb6Wjd91tkZEHYF3YmMGC0oXfMX/jMFMEz7os9j4+E0Xpz
dJg6vHdhRVqEIyikQEeizEIkt2xZQWlJ4Ac079KhJeJE+KnuUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaKwt4XibTx89Ez+xmi36k/J3KIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjViYzZjNTAtMzdiZC0z
YzQzLWExMGEtNTg0NDJlYjQ4N2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0UqaeMVLbhOapfwitCI6Q/cZ7u8cOnIwZW/5tCJDo7Te2p8eCJTJSM
EdZBhOgGU2g8/3a6tj1H52qoL+cZoR1D01xotE+/RFHgqXZktbCTiIFBfBbXgcCV
1ZTpo5dkJ4yWiUoLZp7uP/3xMtNHB2a+7wn2m5Vnuod0vw+hDMB4LTXTKvy1C7bf
EoHyw9UzlNhOqJE1iBW/MrD/kGIpREpOl6tRUdgN7HmBQcOFGDu+1v4S9mgj6nsx
vOGEv8+JHN9BKvg8JcC/uxUvNF5847b1Cm4H2mpcJWKeKWIrg2k8DZbef4JxOHT8
BciEbkVRiCXqv9lvzgMvHyiQCB23VbQ=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:54:30 2026 by rpki-client