Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a6b0262-854e-30f7-a7d8-48f939fcafb3.roa
File:                     3a6b0262-854e-30f7-a7d8-48f939fcafb3.roa (raw, json)
Hash identifier:          vgDNiwx5ujO6bIgsekRQdEmQZRfTz0b4zA7XqESxBTE=
Subject key identifier:   FD:A3:DA:2E:62:CC:73:5D:90:49:E3:D4:E5:94:C0:A4:CF:EE:18:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E4EDF0D06A81032E8DDC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a6b0262-854e-30f7-a7d8-48f939fcafb3.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.13.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:4e:df:0d:06:a8:10:32:e8:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=380c5c79-e64a-4ca3-bb34-b98935eda7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:d0:21:1a:6c:05:6f:e9:8f:f4:70:d3:a7:
                    02:a5:29:93:f7:82:37:b0:bb:e9:8a:9a:bc:41:96:
                    7c:d1:d4:20:66:01:3e:ff:11:04:45:29:29:a2:d2:
                    cd:26:a1:30:fa:6a:8b:00:0f:e5:25:cc:f5:c3:8a:
                    85:8b:76:aa:00:c3:0a:b2:5e:77:d8:81:5d:19:5b:
                    d4:40:70:d0:18:5a:49:75:6b:56:5f:5a:a0:bd:df:
                    36:c4:2e:66:84:fd:c5:b5:d8:2c:4e:1e:04:c4:09:
                    63:20:ee:6e:d1:09:3b:60:73:b1:c2:cf:d2:73:ec:
                    05:8a:da:bf:57:c5:00:c0:98:31:62:ea:aa:3c:9d:
                    38:40:36:24:ee:d6:d1:7b:93:83:2c:29:24:bd:99:
                    85:6b:59:6d:b1:ce:fd:29:5c:57:22:af:b0:0e:15:
                    97:7d:40:87:69:9b:2b:07:8a:bd:eb:57:20:fc:e8:
                    3e:bc:1c:b4:33:f6:33:98:43:45:d1:bc:9f:52:95:
                    b7:0e:50:ba:4e:74:67:15:da:bb:9a:65:c4:38:b5:
                    48:a7:e3:b5:64:09:37:45:5b:3a:34:2a:8b:eb:1c:
                    d9:d0:17:39:1f:9d:6e:b8:e8:e4:a7:ab:46:e0:07:
                    56:da:bd:bb:b0:11:24:63:7e:ac:99:67:50:2f:29:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A3:DA:2E:62:CC:73:5D:90:49:E3:D4:E5:94:C0:A4:CF:EE:18:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a6b0262-854e-30f7-a7d8-48f939fcafb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:db:4b:bb:4b:22:f8:93:9b:cb:63:cf:6a:27:c1:48:db:f8:
         65:20:9e:fd:42:10:d3:2c:07:2f:9e:81:d6:3d:d1:90:e4:8e:
         ff:cb:ba:54:a0:da:2b:8e:ed:b6:f9:f0:9f:71:42:99:38:97:
         3b:a0:97:c1:89:c8:48:68:d7:98:db:28:5d:d8:a5:98:54:e7:
         36:58:69:68:7c:bb:0a:e1:f0:c0:c0:92:13:98:e8:5d:e7:b8:
         b6:84:67:32:49:28:d6:82:b6:65:9f:c9:29:88:78:ef:7c:8d:
         0c:6a:5f:b6:68:99:8e:c8:99:d2:8d:d3:42:4c:83:5f:64:19:
         fd:09:bc:3f:36:34:cd:56:91:57:5d:40:18:d0:d3:3f:14:11:
         16:82:75:90:ef:59:44:67:a8:64:ee:e2:db:f3:ca:41:50:a0:
         a2:9b:db:cc:ae:12:8e:7a:cb:12:13:52:41:99:7d:36:0f:fb:
         13:1a:ff:21:f1:8e:d3:fb:e5:de:38:d6:0e:3e:b4:90:b8:8a:
         e9:1a:83:43:26:f7:53:d4:78:8f:ac:b8:63:00:65:92:67:50:
         38:91:cd:bf:22:33:b7:02:03:8f:a6:81:df:d9:65:91:0f:2a:
         c6:ed:ad:04:83:69:d4:12:9b:96:74:d8:8c:98:01:09:07:53:
         79:55:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:32:54 2026 by rpki-client