Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/001b6afa-d926-3723-9b13-3c2fd2fcb3e7.roa
File:                     001b6afa-d926-3723-9b13-3c2fd2fcb3e7.roa (raw, json)
Hash identifier:          KWH7+M2bzdUP0V5bItlu7qfUKTiJdOEshrUbA/b6dYU=
Subject key identifier:   C7:3C:46:2C:82:56:8F:D3:6F:13:D5:A7:06:FB:D9:DF:62:D8:7F:0A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E457224CA3930A2C11AB0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/001b6afa-d926-3723-9b13-3c2fd2fcb3e7.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.215.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:45:72:24:ca:39:30:a2:c1:1a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=74797400-66ef-41de-8cb0-189d427f421d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:d9:a8:fc:ec:b2:4d:fb:f4:1d:16:5c:b9:
                    73:9b:19:c1:e8:de:f7:81:33:66:50:9b:24:99:3f:
                    b3:61:60:96:f7:05:9c:31:d0:4e:41:2a:05:32:27:
                    48:23:9d:15:f8:1c:93:d0:a0:89:22:80:d5:d3:d5:
                    d3:bd:2d:83:3f:2d:cf:8f:13:e3:00:ba:3e:81:3f:
                    8f:7d:9c:c8:fc:37:ec:06:70:f7:6f:a7:1f:17:37:
                    fd:83:d7:56:66:02:a1:60:73:76:7d:27:13:f0:47:
                    e7:41:d9:57:60:9c:40:20:36:c6:7c:db:48:98:10:
                    15:06:69:c3:30:b5:50:b0:c1:2b:fc:17:68:92:9f:
                    23:03:ac:d5:db:6b:b7:a5:97:eb:ba:bb:4a:2e:a9:
                    16:fc:68:9a:31:f7:90:ad:f4:49:f1:1e:1f:74:e4:
                    87:32:90:fa:6f:58:de:72:30:0f:dd:13:46:e9:42:
                    23:68:db:d8:3a:49:cb:b3:d1:6f:bd:62:50:35:51:
                    fd:e1:7f:0e:f3:9a:77:0c:af:bd:e6:df:b0:d7:50:
                    cd:e1:08:1c:ac:28:5e:f7:a7:eb:be:93:f5:72:d0:
                    93:b6:5c:68:d0:86:4c:97:ad:be:52:fd:96:5c:86:
                    3b:74:a1:50:ad:93:80:51:ca:7f:5f:cf:b5:a3:a4:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:46:2C:82:56:8F:D3:6F:13:D5:A7:06:FB:D9:DF:62:D8:7F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/001b6afa-d926-3723-9b13-3c2fd2fcb3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.215.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:04:99:e5:9d:bb:8f:37:77:e4:9f:73:e5:d5:79:0f:71:
         19:75:8a:9e:1d:83:0b:f2:a9:b2:70:08:26:76:bc:cd:69:76:
         b2:ea:ba:03:25:63:88:86:b3:ad:52:e4:7b:84:51:a6:9d:18:
         8b:09:03:b2:22:01:04:3d:0a:da:7d:a6:dd:cf:03:93:eb:b1:
         fe:b2:cb:ea:4b:d9:73:f8:e0:f1:df:8e:5c:64:99:74:fd:4a:
         0a:77:34:5e:f9:0b:38:2f:e1:5a:dc:db:57:6d:9c:87:08:88:
         5c:26:e7:de:b1:76:18:6e:1b:e8:1c:61:04:0c:f4:cf:73:79:
         c0:05:a1:dc:eb:49:ec:cf:d0:c6:d4:7c:59:ed:c2:c3:3c:7f:
         7c:9b:c4:00:01:06:01:ab:a6:4b:5b:1f:ac:a9:ae:11:b3:8d:
         db:30:1b:29:60:ec:69:b3:c1:40:53:19:9b:64:cb:d8:75:33:
         b4:73:6d:48:05:41:f2:13:b4:14:24:4a:03:d7:8d:0f:66:41:
         12:27:ae:f7:2c:fd:da:a2:00:2b:5e:c0:cd:2d:68:46:7d:f1:
         11:a7:de:e3:d0:fa:6a:8f:0b:87:00:ae:53:83:4d:1d:1e:dd:
         32:c4:ac:d5:98:40:04:ba:be:c5:78:c0:f9:4c:73:d9:6d:4e:
         33:ed:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:54:59 2026 by rpki-client