Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9af9e34b-bed0-36e9-958f-aa4d3a2652fc.roa
File:                     9af9e34b-bed0-36e9-958f-aa4d3a2652fc.roa (raw, json)
Hash identifier:          jau3uMOy3uOIQGoDg/kJXh6YHem3oiQcQPBeU0ZqjQc=
Subject key identifier:   D6:5D:15:3E:D9:DB:6D:C6:20:6D:20:9F:83:C5:A7:95:0C:FB:1A:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3727F0B077F5BF5AC888A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9af9e34b-bed0-36e9-958f-aa4d3a2652fc.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.87.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:7f:0b:07:7f:5b:f5:ac:88:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=598d9fd6-1d34-4c6a-85de-7392e889a764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:cd:21:e2:eb:00:97:1e:3e:d0:1c:6b:1e:
                    ca:c8:20:d8:e0:c7:87:a2:df:1a:27:ff:85:31:3d:
                    14:9f:11:de:cf:75:11:29:47:7b:57:68:49:0b:b9:
                    1a:65:40:53:09:78:cd:22:05:c6:b7:0a:20:2f:09:
                    2a:0b:92:8f:c2:22:5f:d4:b2:75:13:8e:ee:63:05:
                    ff:4e:56:0d:6d:70:a5:39:86:b2:8c:cd:9b:82:50:
                    47:3e:1b:44:39:0f:f2:1f:5b:9e:6a:c3:18:f3:66:
                    f4:ae:1f:07:3d:9c:90:d9:12:a9:94:08:80:43:ec:
                    69:2c:bc:e8:f5:74:2c:a3:af:9b:2d:78:61:8a:26:
                    16:a2:96:51:3b:1f:79:c6:cd:84:d8:7d:63:bc:ab:
                    d9:8b:ff:30:4b:07:0b:35:b9:cd:11:95:1a:63:99:
                    46:16:a9:bc:b1:b6:79:91:27:77:a1:95:6b:21:34:
                    15:d9:64:70:06:00:37:fb:3f:00:2f:f4:97:62:bd:
                    34:18:34:09:63:3b:06:6c:99:0c:ba:22:2c:ec:7b:
                    69:f8:1d:67:d7:c6:6e:dc:eb:2f:b7:64:38:2b:24:
                    09:2e:f1:d7:18:6c:6c:a9:6e:8c:e5:ac:5e:d9:ba:
                    81:f9:3f:78:b0:b0:d9:e5:2d:fc:b8:d2:cc:66:8d:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5D:15:3E:D9:DB:6D:C6:20:6D:20:9F:83:C5:A7:95:0C:FB:1A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9af9e34b-bed0-36e9-958f-aa4d3a2652fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:25:6a:04:b0:89:f6:c6:3a:18:32:09:82:e5:4b:77:a0:
         25:49:92:c4:52:dd:ba:33:cb:25:4e:34:08:92:de:24:cc:6c:
         94:fe:aa:0c:a1:fa:f3:c8:ce:0f:68:91:e2:a8:6d:7e:fa:75:
         e4:f7:3d:ee:5c:b3:21:8f:5f:fe:43:28:02:45:d7:8d:da:96:
         60:30:7f:e2:ec:4c:aa:55:8a:bb:cd:1f:0c:49:40:f8:d9:5f:
         79:8d:84:94:93:d7:bc:6a:09:0b:b4:aa:3e:52:57:09:d8:e1:
         76:cc:71:14:db:9b:ab:f9:9c:20:36:2b:53:f2:ac:6a:b0:24:
         75:12:a6:19:bb:80:b0:ab:d6:53:ff:10:6f:5b:e8:05:de:d6:
         e5:15:de:f9:cf:4d:a1:66:1d:1e:94:63:be:25:31:b6:d8:83:
         d1:59:3e:a5:63:57:df:53:6f:f3:0d:b2:d7:98:28:f8:a7:79:
         d8:7c:cd:40:e8:76:3f:2f:0e:bd:5d:8d:a8:a9:4b:91:59:85:
         20:d3:c4:50:35:36:62:87:0f:27:f6:0a:d9:ae:e1:1a:d8:b7:
         df:81:97:18:5a:a0:9d:c4:1c:69:08:b5:e2:89:6c:68:18:97:
         b7:bf:a9:62:fd:4e:62:7b:d8:f0:4b:8a:0c:b3:3b:1c:5c:b4:
         dc:46:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:39 2026 by rpki-client