Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1bc17406-9a48-33ba-861b-d62c74785cac.roa
File:                     1bc17406-9a48-33ba-861b-d62c74785cac.roa (raw, json)
Hash identifier:          DY+zciHxVQQ2osACDUChUlN6fpsBava7B7aZ4r1IQqc=
Subject key identifier:   2D:00:57:A1:A3:AA:2A:5B:3B:2F:C9:90:88:74:06:42:B2:0E:5E:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3727C4FB850F408F08AF680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1bc17406-9a48-33ba-861b-d62c74785cac.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.86.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:7c:4f:b8:50:f4:08:f0:8a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=2c71d3b6-c860-462a-abc3-913346235b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:e0:c9:5a:51:ef:c1:36:78:c6:05:01:92:
                    1c:0d:88:6d:73:90:d5:ed:23:96:d4:63:11:fa:cd:
                    fa:89:ec:e6:81:c5:77:a5:10:a4:84:9e:96:56:59:
                    9f:70:96:91:f4:81:93:0f:15:f4:59:32:60:b1:9c:
                    ce:d2:67:7e:74:9d:0b:37:be:8d:48:c6:e6:4c:7a:
                    4b:71:74:d9:80:94:45:e8:9f:d4:f8:8a:15:0a:d2:
                    dc:a2:51:10:d6:39:e0:7d:65:79:29:56:41:4d:11:
                    e7:15:b7:bc:db:47:a0:99:5e:c9:d5:94:5f:36:4e:
                    8d:7e:bf:51:0a:69:ed:f2:49:64:82:1c:86:0e:9b:
                    49:a1:83:6f:ab:eb:48:64:36:d0:cb:5a:68:c7:68:
                    59:06:b0:06:a9:67:fe:2b:86:b6:a2:ce:5d:6d:c7:
                    84:d3:f5:96:d6:81:81:7c:a3:08:80:f9:a2:eb:cc:
                    de:da:19:46:e2:47:1b:ee:af:93:73:0e:1d:26:bc:
                    6d:db:e8:bf:41:cf:19:e4:a5:a8:7f:2f:1c:d8:1a:
                    1f:85:36:1a:e5:72:74:33:7d:b9:f2:e5:e0:c2:8b:
                    94:11:a7:72:d8:31:88:4e:bb:25:37:0c:2b:66:89:
                    24:47:8b:3e:2b:6b:6d:0b:88:a1:b8:30:44:37:69:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:57:A1:A3:AA:2A:5B:3B:2F:C9:90:88:74:06:42:B2:0E:5E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1bc17406-9a48-33ba-861b-d62c74785cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:56:2b:1e:60:7e:fc:31:68:b0:c9:9e:17:0d:4a:d1:c5:6a:
         5b:19:d3:20:c5:54:66:b8:a4:d1:d6:fd:58:bb:9c:b8:63:f9:
         98:cd:ad:d5:da:c4:a9:98:fa:5c:b0:e9:cc:81:27:2c:f7:d6:
         0a:be:c5:54:3c:c1:00:ff:2c:41:7f:98:ff:3b:2d:47:16:62:
         fa:b1:e1:ab:f6:91:d2:9a:54:fe:a3:c7:77:89:19:d5:f3:7e:
         54:eb:60:cb:ca:66:2d:4f:6b:22:5d:a6:be:71:13:56:3e:cb:
         9c:71:5d:f4:48:dd:a0:41:f0:86:4d:ad:2e:0b:f0:db:bf:68:
         16:8e:71:35:e4:e4:ec:3f:0d:fd:a0:49:42:0f:da:17:81:72:
         fa:c8:61:e3:c3:3e:46:49:2f:eb:fe:5d:e1:55:9c:c4:f9:36:
         e6:3e:ef:4d:bd:3c:ee:6d:63:d6:0d:1f:b8:ed:c9:27:1c:09:
         f1:99:07:b3:51:48:49:ba:14:87:ee:66:98:fe:d5:bf:b3:92:
         be:de:e3:94:65:72:d5:86:92:8a:a5:73:e5:26:e2:c7:23:02:
         d0:3b:1e:cd:fa:21:1a:bb:f0:54:1e:f8:17:f8:37:9a:65:15:
         92:0b:3b:cf:68:7b:26:7a:5e:a5:65:79:72:70:51:b6:a4:93:
         f6:38:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:50 2026 by rpki-client