Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3eb3d4e0-2a9d-3b9f-b87f-19c884c2e320.roa
File:                     3eb3d4e0-2a9d-3b9f-b87f-19c884c2e320.roa (raw, json)
Hash identifier:          1LHnKXfMz+Ni6FCtP3Jz1mMjKZkfh8yUeCHSiACX7tQ=
Subject key identifier:   5D:83:0F:1E:02:C5:5F:F4:E9:FD:31:D6:7E:64:66:F5:78:DF:B9:AD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DC0A67C29ABD5221EA100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3eb3d4e0-2a9d-3b9f-b87f-19c884c2e320.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.81.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:c0:a6:7c:29:ab:d5:22:1e:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=37ecd6fa-9be5-493d-bde6-ec16bf01a057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:bd:cd:6b:a0:cd:ab:82:3e:9b:f0:93:6c:
                    1b:e9:26:85:0f:4e:38:2a:10:64:93:4e:95:1c:63:
                    a9:50:6d:52:f3:c7:4b:95:d5:00:be:5a:7b:0d:08:
                    27:22:88:f5:a0:d6:2a:24:aa:42:32:d0:c1:3b:a3:
                    d3:04:23:27:64:60:57:e9:1c:81:fd:6c:a6:4e:34:
                    5f:63:d5:e0:e5:2a:cf:49:dc:69:a5:b8:11:2c:a7:
                    ad:d1:4b:ec:18:dc:11:b1:3b:e0:57:cd:ca:74:47:
                    94:e2:76:7a:cf:5f:46:a7:8f:4c:ac:69:cb:da:cf:
                    9b:f3:25:68:0c:ba:5e:c7:e7:c6:53:96:41:a1:70:
                    5f:80:b5:ce:f8:27:74:55:1e:b7:21:22:f6:f8:49:
                    ad:e1:2f:4e:e2:65:64:dc:38:4e:96:ad:5a:43:0a:
                    b3:c6:ce:3e:df:92:45:e0:fc:37:1c:8a:d3:b6:5c:
                    bf:7b:b7:99:e4:a6:90:38:b3:c5:1d:b3:6d:4a:58:
                    26:63:d0:47:38:1e:e5:bc:cc:b5:d4:b4:f7:88:b3:
                    d8:fc:80:06:37:0e:48:8b:65:d9:7a:72:5d:9f:26:
                    ef:0e:89:97:41:47:28:c2:27:28:e1:30:f6:ce:c6:
                    fe:6d:43:3c:11:41:bd:f8:2c:55:fe:1b:56:62:54:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:0F:1E:02:C5:5F:F4:E9:FD:31:D6:7E:64:66:F5:78:DF:B9:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3eb3d4e0-2a9d-3b9f-b87f-19c884c2e320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:cc:96:a4:dd:68:ee:0d:eb:a7:41:9d:03:87:38:eb:0a:d4:
         63:df:be:c1:4d:aa:37:32:91:84:28:ae:32:e4:e2:75:52:1e:
         63:12:09:8d:6d:be:ea:8c:03:53:32:7b:ef:4e:35:29:63:9f:
         b1:e7:aa:bb:6e:9f:c0:14:71:d1:7c:e0:29:ac:38:66:cb:c9:
         77:83:0e:02:0a:b5:79:28:4a:d0:8f:bc:7f:12:4a:14:c3:a2:
         e0:29:da:d5:c0:23:e6:73:72:d3:53:47:2f:84:8d:fe:c5:eb:
         1c:2e:14:95:f4:8a:96:9a:0d:97:47:48:21:4d:8a:ed:6d:20:
         ae:a1:98:cd:12:82:a4:e8:44:bb:b7:51:5e:7e:20:54:41:a7:
         11:9e:bc:5f:db:b7:26:1a:95:0c:ad:dc:ac:0e:06:4d:6b:e5:
         b6:7b:b4:da:9f:47:c5:4c:28:6e:8c:46:dc:d7:a2:64:e1:ea:
         51:92:0f:40:42:78:4c:f4:82:7f:48:be:e7:84:fc:2a:e5:2d:
         e9:91:f7:ce:f5:32:f1:2f:10:51:b8:55:b2:e4:c1:64:82:5d:
         fd:16:bf:ac:03:49:4a:4b:88:f0:f8:ab:08:35:38:ca:4e:45:
         23:34:4e:5a:d2:15:65:2f:bf:25:eb:e0:bc:58:24:da:f0:bb:
         39:f3:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:31 2026 by rpki-client