Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8edd40a2-8657-3cb5-b979-bb7f857c9b0f.roa
File:                     8edd40a2-8657-3cb5-b979-bb7f857c9b0f.roa (raw, json)
Hash identifier:          bJ7LTeOA5m0qPe5EBsDTYxL1Ao9dig8xgkMi7DQ4KkY=
Subject key identifier:   6B:C5:B8:87:B7:55:20:36:8A:24:8A:4C:F3:61:04:4D:15:DC:EB:A7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E55D71CB6802B586915C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8edd40a2-8657-3cb5-b979-bb7f857c9b0f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        75.143.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:55:d7:1c:b6:80:2b:58:69:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=8317c6f3-6938-4c62-bc4e-1b9bbc5bc735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:22:b8:75:23:53:64:94:56:b5:4d:ab:e6:
                    bf:36:64:fe:92:e4:0b:13:53:1f:0e:80:e9:e9:95:
                    4f:c7:37:70:9f:34:fb:8a:55:44:a8:59:a3:49:49:
                    e4:8f:eb:54:22:59:1b:7f:e5:38:ea:34:50:bf:e4:
                    ab:ca:bf:5c:ef:5a:2f:d4:87:4b:42:59:70:cb:42:
                    e5:f1:12:cd:08:4a:db:ef:47:9f:62:78:7a:d3:9d:
                    02:8e:73:3a:43:98:07:d8:66:6a:99:a0:42:b9:9d:
                    50:c2:04:57:eb:4c:17:01:ee:a9:8a:2a:76:2a:3d:
                    f5:17:35:84:c9:51:a2:6c:bb:db:c5:68:7f:24:09:
                    e5:8c:14:ff:eb:54:6e:7e:c0:41:82:2d:d0:35:b9:
                    fa:b7:42:f4:03:e4:69:53:00:0f:b8:ad:09:a7:33:
                    4a:a1:cd:bf:54:93:a0:c5:a3:92:8d:b6:01:7c:54:
                    54:2c:fe:ea:c0:11:7b:68:84:ea:80:27:56:d5:0e:
                    83:86:58:ae:c3:4f:43:b5:d8:b8:14:6b:e7:27:e3:
                    c1:4b:aa:85:be:af:68:d5:d9:27:0e:5d:e2:93:66:
                    be:42:32:f0:31:f8:97:57:a3:1a:64:9e:17:65:9b:
                    0f:8d:84:37:31:1a:26:5b:84:fd:a6:68:2d:c2:87:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:B8:87:B7:55:20:36:8A:24:8A:4C:F3:61:04:4D:15:DC:EB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8edd40a2-8657-3cb5-b979-bb7f857c9b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.143.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:40:97:6a:a8:b7:7d:bc:fd:48:76:42:cf:43:6f:c8:eb:90:
         be:e1:ee:4f:a7:ee:60:36:6f:a8:9b:2a:48:cd:ff:28:09:5d:
         9d:0c:c9:0e:84:b8:39:f6:c4:f7:f5:6c:33:c9:76:d3:31:1a:
         e3:75:19:9b:94:55:20:e4:8e:66:91:00:cf:75:f6:4a:70:8c:
         a6:42:b9:1d:8e:9f:fc:de:f8:94:96:f5:f3:20:07:44:19:a2:
         da:f2:23:8b:be:f7:92:cb:a0:43:7b:f8:20:10:1a:56:81:3d:
         8c:a4:84:cd:5e:a4:0e:fc:ff:8b:2d:6d:64:f4:fe:5c:54:ca:
         b7:92:aa:c3:e4:74:e9:73:3f:19:3f:58:58:56:1b:96:f9:da:
         0c:38:d8:ee:b0:53:5e:10:93:08:4e:01:a1:39:0a:95:a5:2f:
         99:a5:d8:7d:ff:8e:bf:69:ab:a6:5f:ee:4c:b9:34:2c:11:72:
         4a:93:e7:e7:2f:e6:1e:5b:33:36:ec:c3:3e:0c:57:04:7b:7e:
         e5:d9:bc:45:df:cc:22:30:c8:3c:a2:53:93:b7:73:ce:71:db:
         3a:b6:77:a9:47:8c:6b:61:c4:b0:73:f7:7a:1d:2d:c5:5a:fe:
         91:3d:cb:81:0a:99:ef:3d:23:7b:5c:74:9a:ec:1e:d7:30:30:
         69:cb:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:35 2026 by rpki-client