Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/81534e8f-e68a-31a5-b952-470a6422172a.roa
File:                     81534e8f-e68a-31a5-b952-470a6422172a.roa (raw, json)
Hash identifier:          1wy9jWFxkkqgUAcKxcQg/gVlsS34Sdy59U7KoND48Y8=
Subject key identifier:   09:65:F4:BD:D2:35:7B:0F:AE:52:61:81:5B:08:FB:F4:C7:B9:BA:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDD0D1B264124390DDA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/81534e8f-e68a-31a5-b952-470a6422172a.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.13.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:dd:0d:1b:26:41:24:39:0d:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=1b052c8f-5ccc-4878-8573-e66702123786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:39:22:f4:60:b0:42:f1:89:cc:cb:a6:a6:
                    bf:c1:0f:07:47:2f:73:f4:9f:06:71:b2:7b:fe:32:
                    39:ac:3e:ac:84:3e:ca:fe:7a:d2:75:f4:a0:d8:37:
                    72:9b:0d:63:30:e0:56:1b:dd:78:74:26:c9:26:15:
                    af:11:f7:02:b4:f2:b9:d8:2a:93:39:72:da:f5:90:
                    1c:de:c5:c0:84:82:c8:50:37:da:d9:fe:d6:91:83:
                    f4:04:9b:6b:6c:c4:2a:c2:30:cb:d3:57:60:8e:5d:
                    84:05:d5:aa:7f:0f:52:76:ab:ed:4a:ad:5a:d8:f3:
                    c9:6e:26:de:8a:c6:10:82:f9:74:c2:c9:90:8c:b0:
                    9b:6e:18:46:d3:ee:6f:dc:b6:33:1d:d7:fe:25:c4:
                    70:10:ad:4c:7d:3f:8d:85:30:06:00:ba:39:8e:49:
                    09:c8:40:9f:ff:77:91:9c:17:e8:81:cd:59:ac:98:
                    44:a4:b0:9c:b0:6e:ab:49:3b:1b:3b:a0:cd:e1:28:
                    d7:21:86:a6:54:5b:91:54:17:4f:5a:9d:3b:19:e4:
                    2e:0d:2f:83:fc:cf:3e:b7:20:79:4f:4f:23:28:11:
                    85:bb:85:d3:88:06:4c:19:37:cb:95:c2:0b:07:7e:
                    c0:32:7d:1e:c8:57:13:3d:0f:2e:7b:41:f1:1d:21:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:65:F4:BD:D2:35:7B:0F:AE:52:61:81:5B:08:FB:F4:C7:B9:BA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/81534e8f-e68a-31a5-b952-470a6422172a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:42:88:1a:99:e5:c2:19:6c:35:60:82:7a:a9:ea:79:c5:
         bd:1a:36:31:28:e3:15:19:bc:4f:c4:46:a1:9c:d8:4e:35:44:
         6d:ab:a2:d6:8d:9d:c0:3f:a6:52:6e:c5:6d:ca:e5:0f:bd:c0:
         a5:b5:9a:c3:e7:fd:12:7b:28:15:31:be:48:8c:dc:96:d6:57:
         d5:17:68:b5:fc:03:5e:fa:34:a4:2f:4d:14:12:42:5c:00:d9:
         cb:0d:e9:14:f3:a4:aa:06:5b:21:94:3a:e5:55:43:7b:5f:e6:
         7f:3c:67:86:1d:bf:02:da:e1:6a:fe:58:b5:25:fd:b2:df:2c:
         35:13:b5:42:c8:3e:55:31:2c:8c:3a:62:04:06:7f:7e:28:9b:
         ee:67:14:b0:f0:40:40:8d:36:db:9c:78:54:ad:82:29:2f:4b:
         83:e0:78:b5:67:f4:bd:e2:09:7b:cb:e0:11:47:48:97:cc:8c:
         a7:73:03:5f:e5:26:43:40:88:d0:9f:b4:18:3f:41:db:87:43:
         1e:84:87:75:5f:be:39:50:21:2a:12:f0:77:bb:a4:42:bd:42:
         2f:0c:c7:30:c4:6c:60:cf:39:b5:69:d2:c4:67:90:03:2c:7c:
         ab:a0:00:4e:c1:15:e0:c3:8e:12:f9:d2:77:68:fb:6d:3b:24:
         8e:57:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 03:16:43 2026 by rpki-client