Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9df0c85e-227c-306e-97fd-f099d2f3da60.roa
File:                     9df0c85e-227c-306e-97fd-f099d2f3da60.roa (raw, json)
Hash identifier:          S7TzQzyPZsbMhVQQESV2jYKmhtIto4W1S86ttRzmBm4=
Subject key identifier:   89:F7:80:7B:72:09:C1:50:86:C9:E2:54:DF:59:BF:99:09:0D:3E:E4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372A2A5E4DFB45A27F48260
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9df0c85e-227c-306e-97fd-f099d2f3da60.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        96.33.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:a2:a5:e4:df:b4:5a:27:f4:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=8f889790-a52d-4d2a-b365-c54b83a113cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:3a:c9:ac:7d:11:1e:62:29:79:8d:c4:2d:
                    0a:99:34:60:1f:73:ee:27:e9:ae:d1:62:8e:25:99:
                    d7:45:4b:18:64:26:25:94:6d:e4:51:1f:2b:b3:00:
                    dd:06:1a:46:20:22:40:c9:a4:6b:8a:13:5a:46:8c:
                    7e:ea:a8:3e:e7:e3:9f:aa:66:fd:0e:07:c2:1d:5c:
                    1d:86:92:4b:36:bf:0b:da:43:52:76:81:2e:e6:50:
                    21:e0:04:7a:03:65:95:84:b4:1a:af:44:4f:e8:98:
                    df:7c:c4:b6:fb:0e:35:82:10:af:a3:de:10:d6:ec:
                    ce:67:82:f5:47:c4:8c:57:c0:ca:bc:6c:fc:9c:57:
                    69:1f:ea:27:f5:0e:e4:e2:79:15:50:9c:9b:e1:49:
                    2d:0e:40:c9:b6:1e:c2:9d:4d:20:62:3b:71:33:57:
                    bc:e0:16:4d:c6:5c:99:e6:7a:88:63:ad:b1:97:53:
                    93:ce:cb:65:c0:67:9e:93:32:fd:3d:7b:c0:a6:93:
                    7a:89:57:e8:ae:b0:0f:31:e6:f5:13:b8:fb:32:1c:
                    5e:b2:29:0a:d4:5f:b3:87:59:ed:ec:47:26:e8:2c:
                    ee:06:7d:e6:0d:a5:98:0f:b4:39:9d:ba:21:dd:e1:
                    f7:7a:07:50:fa:01:18:a6:e2:15:c0:5f:96:43:ba:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:80:7B:72:09:C1:50:86:C9:E2:54:DF:59:BF:99:09:0D:3E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9df0c85e-227c-306e-97fd-f099d2f3da60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.33.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:21:a1:8c:d0:fd:54:79:14:9f:ac:b4:3f:4a:6c:f9:f6:
         0c:5e:b9:67:8d:93:a0:b9:3c:27:10:dd:91:1a:38:c5:94:51:
         c5:ce:cc:fc:00:4a:18:53:35:23:f8:c6:ad:a7:92:0b:3c:43:
         d7:8c:1f:67:9b:e8:76:14:62:f1:6c:13:e9:10:ba:36:72:2a:
         33:0f:61:6a:5a:b1:3d:20:1c:ff:d9:47:45:74:c0:28:a2:65:
         97:30:43:7c:51:5c:b4:22:2c:ef:81:3f:bb:38:d2:a6:23:e3:
         57:98:87:66:96:af:fa:fd:30:37:68:1f:8d:67:ee:02:14:7d:
         3b:c6:35:41:9d:8b:54:0f:7c:9c:77:c8:9f:05:5b:6b:d7:54:
         8e:7c:4e:93:87:d1:f1:08:2c:6f:dd:54:5d:98:fa:18:93:90:
         17:e1:9f:b6:b3:87:c7:c5:9a:9d:53:6a:23:60:2f:cf:16:98:
         f6:d9:8c:22:70:10:69:46:1f:b0:bf:06:54:17:0b:eb:03:0a:
         24:a6:6f:c5:e0:ad:9b:07:bd:18:6d:ce:e8:fe:a2:72:5e:65:
         c0:f6:8f:d6:f9:ee:07:9c:c4:28:e7:79:8a:16:2e:f7:63:18:
         20:4e:0d:88:14:e1:a5:4a:29:20:56:8f:ba:8c:54:da:49:22:
         a6:57:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:17:16 2026 by rpki-client