Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72120653-b7ef-33b9-961a-816b3970400e.roa
File:                     72120653-b7ef-33b9-961a-816b3970400e.roa (raw, json)
Hash identifier:          YaJP7rFZVMJGVhyg2xPXQMMvYlupwD4JHg7Y7IMXwyo=
Subject key identifier:   1D:2F:A6:45:73:0A:85:90:BC:FB:FB:11:9F:2E:66:7C:DF:75:88:BA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3727F16F4454A6872385C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72120653-b7ef-33b9-961a-816b3970400e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.87.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:7f:16:f4:45:4a:68:72:38:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=f5703b02-4341-4960-bd57-7b062f04d5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:34:a8:6f:a6:f9:8d:4c:1b:72:aa:f1:28:
                    4d:e1:60:6f:e4:45:22:83:7a:5f:9a:d4:2e:fc:ce:
                    93:46:1d:69:73:b2:bb:9c:37:67:ea:65:71:f2:04:
                    1c:9a:36:c5:bf:4e:48:d5:4f:90:2e:23:30:38:03:
                    99:e7:15:c6:d4:89:dc:37:f9:16:5e:22:9a:48:38:
                    59:2c:eb:ed:b2:2b:a6:12:80:2d:b5:fa:9a:d7:0a:
                    89:b1:45:a6:9e:10:17:e1:e8:b7:bc:95:5f:77:fe:
                    12:74:27:95:b6:3e:29:ea:a0:c2:1a:53:44:61:d4:
                    39:46:26:23:d4:97:9e:a1:6c:d0:63:d8:ec:2d:cd:
                    63:51:48:ca:cc:0a:37:01:9e:cc:0a:d0:01:53:29:
                    c2:78:3b:a1:03:dc:35:6a:74:6b:97:f1:d4:1f:ad:
                    35:97:1a:be:d7:59:78:13:7d:ac:ef:89:9e:f5:06:
                    f6:db:68:58:83:bd:5a:b4:35:ee:7c:d7:f7:95:f2:
                    d9:98:07:08:42:6e:0d:24:9f:03:cc:a8:99:a7:a3:
                    c6:ea:46:0e:57:a0:f0:ed:ff:e2:a7:33:49:3b:b9:
                    f5:e7:77:aa:05:1e:90:54:71:c5:e6:c6:69:9b:01:
                    d4:df:a2:25:3b:1e:03:fc:5d:7f:49:bd:f9:39:b1:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:A6:45:73:0A:85:90:BC:FB:FB:11:9F:2E:66:7C:DF:75:88:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72120653-b7ef-33b9-961a-816b3970400e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:da:1d:51:84:35:23:58:88:4d:10:8e:36:d8:c7:2e:e8:
         ec:16:c7:05:9c:bb:2a:9a:ec:43:93:24:b9:8a:48:04:3e:58:
         86:5f:72:0e:0a:84:11:bd:f5:56:a9:6c:80:36:e2:93:b9:53:
         36:6d:3d:8a:f6:a4:d1:fd:2c:87:43:35:92:c6:12:c0:42:e9:
         e3:58:c6:4f:cc:f6:f8:d8:8b:b0:b9:aa:24:42:5c:fa:dc:3e:
         f8:94:40:1d:8f:c3:e6:7e:06:a7:a5:61:b8:d9:fc:5d:b6:64:
         e4:c2:17:6b:99:97:7e:69:03:52:b8:82:65:79:89:29:d5:22:
         d3:d7:1d:e5:ab:87:8d:a8:01:96:12:c6:9c:4a:36:ae:40:6b:
         ba:03:8d:67:3a:ab:be:dd:bb:b7:04:6f:38:10:05:09:33:4e:
         ea:77:22:fc:d7:63:a3:e3:01:6d:a4:52:67:3a:02:e2:a8:86:
         fd:4e:7e:44:20:8c:3f:a6:b6:6d:0d:0a:7d:42:c7:34:7d:dd:
         74:a0:f1:c0:cd:f4:4e:ae:86:93:92:13:0b:90:fe:5d:16:7b:
         12:ce:86:c3:fd:2d:6c:fa:ea:80:44:95:c9:f7:9d:39:2e:e1:
         31:87:c5:45:b3:48:9d:da:70:c5:56:34:ff:f4:bd:79:be:d3:
         9c:7e:da:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:06 2026 by rpki-client