Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5adc8246-fefc-32c2-b0d9-05066c66ea74.roa
File:                     5adc8246-fefc-32c2-b0d9-05066c66ea74.roa (raw, json)
Hash identifier:          gV/18Wn5dI6QUI7rf4GK425RLvSAsR4MB1fseiBL+f0=
Subject key identifier:   56:1C:1E:90:75:14:D2:42:9D:97:6F:F9:91:FA:57:FE:91:9E:35:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37280138ECE3B69A9466800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5adc8246-fefc-32c2-b0d9-05066c66ea74.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.95.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:80:13:8e:ce:3b:69:a9:46:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=beb1cd4e-9e70-4549-9463-75ac68fdfb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:e1:bb:c1:63:9c:1a:91:d6:55:27:af:d8:
                    47:8c:25:29:1a:ed:95:9f:70:85:35:16:f2:e1:53:
                    2a:31:40:0c:25:25:7a:06:5c:6b:43:07:56:25:b8:
                    a4:2b:89:66:a9:83:4e:33:c7:ce:18:94:a5:d3:e8:
                    c6:2e:57:70:0d:31:94:4d:8b:1e:5c:f6:86:5f:f7:
                    26:4a:16:5d:91:fd:ec:84:7c:b3:1d:84:6b:47:a8:
                    49:5b:6a:9a:5e:bf:e5:fe:fe:10:6b:56:6d:5b:08:
                    d6:91:9b:df:c5:7a:7d:18:49:76:46:ce:df:10:ae:
                    88:71:ec:90:fe:a0:3d:8f:50:73:dd:01:25:2e:fa:
                    fe:ef:a3:e2:56:03:7a:9d:a1:7d:29:ea:a1:de:47:
                    d8:1f:f0:e7:71:58:cc:0c:be:cc:a4:17:82:a8:b2:
                    ac:79:9a:c9:d3:54:6b:97:39:7d:74:f1:c1:97:6f:
                    d5:40:68:67:15:5e:0e:94:7c:ad:fc:8c:6d:f7:99:
                    af:90:52:75:91:fc:7b:56:2b:d0:4a:51:27:93:ab:
                    7a:ea:61:f9:1e:07:4e:98:fb:0c:de:7c:36:65:af:
                    fe:f9:06:77:f9:8a:22:ad:c6:0e:69:94:65:44:6c:
                    a8:98:d6:2b:ff:b9:3a:78:bb:ba:d5:06:5e:97:75:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1C:1E:90:75:14:D2:42:9D:97:6F:F9:91:FA:57:FE:91:9E:35:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5adc8246-fefc-32c2-b0d9-05066c66ea74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.95.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0c:52:78:d4:d6:6f:4a:1f:f7:ba:a0:f3:40:81:0f:be:91:
         a8:3c:96:94:13:3d:87:da:ca:2f:e2:2f:1e:38:43:e0:e7:ed:
         eb:37:c8:50:16:06:00:6c:f0:45:65:31:91:d4:2a:f5:84:a3:
         39:c0:fa:4f:62:8a:b0:47:54:d5:42:96:21:66:90:eb:79:2e:
         02:5d:ef:6f:48:7b:b1:59:36:bf:93:64:1d:ea:57:64:41:ad:
         a4:14:a4:de:67:69:86:88:de:f6:a6:c5:65:2a:fb:ec:76:cf:
         cb:29:8f:61:29:29:e3:17:81:dc:3f:80:a3:10:b4:5b:6d:24:
         df:7d:01:63:89:12:be:ef:35:5b:e2:ce:48:f5:27:91:2d:10:
         ca:f2:46:c9:8c:68:93:ba:a0:12:fe:7d:6e:84:c2:5d:5e:f3:
         b6:20:80:d0:9a:e2:49:f4:7e:ae:83:94:98:cd:e5:03:19:ca:
         16:81:eb:a7:a1:fe:dd:23:e6:55:95:3d:74:0e:72:d0:be:da:
         79:b7:aa:37:ee:76:c0:9c:bf:5d:e7:3e:78:61:a2:e1:7c:32:
         0e:12:cc:95:eb:d9:b8:e0:f3:01:9a:c7:23:56:ea:a2:86:e7:
         59:47:93:b6:6b:c7:55:e6:1f:4e:c8:d1:a3:d3:bd:7c:e0:b8:
         b0:b0:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:16:52 2026 by rpki-client