Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4429ec2e-5a6a-35e5-b9db-e2f79c4ddf26.roa
File:                     4429ec2e-5a6a-35e5-b9db-e2f79c4ddf26.roa (raw, json)
Hash identifier:          QcgkKImJ4jaTLj567bc0hId01e94jgJ1I8Wd81+uLks=
Subject key identifier:   6B:3D:D9:A5:21:F7:A1:56:CB:86:EC:7C:A7:3E:BF:F8:05:DB:2B:DE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3722027791C2329E814D180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4429ec2e-5a6a-35e5-b9db-e2f79c4ddf26.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.15.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:20:27:79:1c:23:29:e8:14:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=0abcb132-198b-4730-b52e-a6e7f680fd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:65:0d:e2:f6:58:7d:85:ab:e5:40:09:99:
                    0a:b3:62:61:29:68:ba:71:c5:0f:2e:42:1c:e0:04:
                    65:52:6a:57:59:c1:d1:dc:b1:5b:40:95:d5:bc:e8:
                    66:91:ee:2d:b7:a4:f8:3f:d0:4f:69:cb:b1:2c:1a:
                    a8:dc:a3:bf:9a:cc:47:a7:28:07:dd:ce:c7:77:96:
                    69:c2:48:25:9b:e7:21:cf:df:9f:44:49:36:e9:c0:
                    be:89:02:80:aa:a7:68:2c:e8:52:d6:7a:5a:13:5c:
                    d1:e4:54:e5:4b:2d:50:34:09:58:11:d6:a6:70:ac:
                    b1:ff:97:2c:62:c1:50:66:94:89:e6:0d:c5:99:5a:
                    d1:97:f1:08:de:f5:06:82:2c:c8:ed:61:85:63:92:
                    9d:80:71:1e:a7:62:c5:05:20:40:f9:30:37:3f:ec:
                    4d:9a:cc:df:08:1d:09:ea:c2:a3:9a:15:dc:03:ef:
                    ed:d0:e6:92:b9:83:06:56:ab:81:59:db:ab:8a:de:
                    e7:03:66:1e:83:2f:76:80:49:fb:43:df:61:6b:a3:
                    2b:dd:3a:c2:a2:01:d3:aa:f6:1d:3d:d9:84:99:8e:
                    87:cd:3e:69:3a:0f:0a:97:e1:27:22:7f:bc:81:fe:
                    57:86:ad:ae:32:d7:f7:55:33:8c:0a:a6:11:97:ce:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3D:D9:A5:21:F7:A1:56:CB:86:EC:7C:A7:3E:BF:F8:05:DB:2B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4429ec2e-5a6a-35e5-b9db-e2f79c4ddf26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:1e:37:34:cb:6d:ef:a8:96:84:f1:36:09:a3:25:b8:f8:
         af:b5:28:d6:51:99:18:bf:4f:df:0d:61:0e:8d:88:64:10:5c:
         86:84:4a:a1:18:f5:f8:1b:78:f5:aa:37:5b:71:35:0f:df:ca:
         17:af:13:fc:7f:10:ee:e3:01:35:29:ec:6c:23:ed:ab:db:f6:
         bd:c8:1d:da:e9:ee:aa:35:6a:d1:90:74:34:60:42:a4:fd:a7:
         54:28:8f:f4:53:d8:ab:6c:21:7a:5a:15:46:f5:89:f5:24:fe:
         cc:ab:b8:91:29:57:91:f3:a3:da:3d:ab:20:a4:03:f9:fe:b8:
         e4:d7:ca:fa:dd:d8:0a:46:64:28:48:e1:fc:5e:c5:d4:84:67:
         f4:ed:34:62:81:e3:d6:8e:ab:c4:97:51:08:a5:77:ca:22:2e:
         9c:be:a8:9d:4f:b8:70:f3:66:e6:d1:86:7c:75:07:89:68:92:
         f4:79:0c:6b:db:61:9b:e4:f4:bd:3b:f8:b0:a2:8d:3b:3a:f7:
         f4:36:3d:90:63:50:3a:c5:dd:bc:fa:1f:d3:b9:71:91:db:4f:
         93:86:8e:cf:a2:e4:de:89:60:8b:2b:64:38:df:6e:5c:2b:3c:
         e9:0a:95:87:83:5c:42:af:cc:e6:fe:0e:9b:f2:7a:d3:5f:60:
         0e:5a:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 20:19:51 2026 by rpki-client