Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
File:                     a1cd671a-8ea1-3951-bf6e-9116a025de17.roa (raw, json)
Hash identifier:          SB2wUMebgxm3trkE+VQI+idkOPhrjTKaEMAIoG6ls+I=
Subject key identifier:   C7:49:95:03:DE:05:D0:6F:C5:00:2A:58:80:73:D3:79:5A:31:C9:26
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37217FE3143C1A380DF9FE8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        66.190.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:17:fe:31:43:c1:a3:80:df:9f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=675410dd-86d7-468d-89c3-62bd566e57bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:a3:d5:4e:5c:a9:3c:0f:29:d6:9b:45:e2:
                    9a:ef:40:ac:aa:0d:f6:6b:31:7c:6f:1c:ad:79:a4:
                    2b:3a:42:fb:7f:13:ae:07:85:7a:30:df:5e:55:d1:
                    a3:b4:b1:33:86:81:a6:b0:7a:dc:cd:5b:1e:f6:23:
                    59:b5:9a:a7:2a:d9:14:b5:ee:2b:9e:1a:09:a2:74:
                    7c:71:81:63:a5:3f:95:27:86:ba:02:58:f6:7f:d3:
                    a9:33:a6:f0:22:f8:5b:11:c4:08:03:ab:03:d1:0f:
                    e1:db:34:46:41:d0:f2:45:7f:1f:e0:a4:b4:ca:6f:
                    98:ba:80:9f:d3:aa:b8:0b:32:f5:39:02:2e:09:54:
                    ec:2c:dc:89:25:75:19:dd:00:18:3f:bb:f8:4e:0b:
                    00:82:5a:77:3f:8f:41:21:d4:27:02:3a:ef:3c:2d:
                    ef:dc:47:c8:27:3b:25:ee:46:f6:89:60:68:f8:27:
                    f3:f6:b4:32:8c:63:91:61:8a:a1:14:6a:a3:49:91:
                    0d:36:fc:cd:6d:f5:f7:2d:5e:3c:bf:8f:1e:4f:35:
                    a4:d3:12:41:bb:ed:fc:9d:27:78:a3:55:f0:a7:a4:
                    1f:5e:43:dc:fa:13:4b:1a:2e:24:bf:01:3b:f1:70:
                    ae:a6:3a:23:d2:72:5a:07:b6:0e:34:14:e9:86:20:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:49:95:03:DE:05:D0:6F:C5:00:2A:58:80:73:D3:79:5A:31:C9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:7c:d7:53:87:d4:41:4a:86:27:cd:9e:15:18:15:34:aa:
         49:67:fb:1a:0e:fd:8b:93:58:54:c0:f2:d7:c3:2d:bc:d3:da:
         6d:3b:8d:eb:ae:a7:96:b8:e3:4f:39:56:2a:c0:e8:cc:5c:53:
         57:a8:b6:29:0a:a4:5d:4a:56:f4:b8:4a:95:9a:8c:e6:3e:7d:
         94:f2:bc:db:9f:55:7b:7d:c7:b7:44:42:0a:72:40:32:9e:c5:
         61:e2:d0:e9:d5:b9:a5:15:f6:09:00:fd:bf:a3:39:1f:59:d6:
         59:f6:d5:04:85:9b:3f:63:56:5c:9a:3e:28:15:85:00:c3:22:
         17:de:69:57:83:2a:2f:31:42:95:15:72:d4:77:fb:63:31:f6:
         3b:09:b5:b0:83:41:0a:55:b3:46:f9:73:54:74:5e:e3:66:38:
         46:7c:3b:00:a6:07:a6:61:62:46:91:ab:03:5f:1d:1d:52:87:
         8a:dc:33:a9:75:08:5a:68:38:16:6e:86:4d:80:4f:ef:78:cd:
         97:5e:64:df:de:ee:9d:cd:9f:45:94:ee:78:e5:ec:a0:5f:b1:
         0a:9d:fa:63:f7:4f:ba:a0:11:d8:37:b6:48:0a:05:f7:8d:7a:
         fd:96:54:a7:0b:ec:a8:0c:33:6e:9d:96:92:80:1c:aa:d1:57:
         40:0c:f5:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dchf+MUPBo4Dfn+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
Njc1NDEwZGQtODZkNy00NjhkLTg5YzMtNjJiZDU2NmU1N2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAWj1U5cqTwPKdabReKa70Csqg32azF8bxyt
eaQrOkL7fxOuB4V6MN9eVdGjtLEzhoGmsHrczVse9iNZtZqnKtkUte4rnhoJonR8
cYFjpT+VJ4a6Alj2f9OpM6bwIvhbEcQIA6sD0Q/h2zRGQdDyRX8f4KS0ym+YuoCf
06q4CzL1OQIuCVTsLNyJJXUZ3QAYP7v4TgsAglp3P49BIdQnAjrvPC3v3EfIJzsl
7kb2iWBo+Cfz9rQyjGORYYqhFGqjSZENNvzNbfX3LV48v48eTzWk0xJBu+38nSd4
o1Xwp6QfXkPc+hNLGi4kvwE78XCupjoj0nJaB7YONBTphiAzjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdJlQPeBdBvxQAqWIBz03laMckmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTFjZDY3MWEtOGVhMS0z
OTUxLWJmNmUtOTExNmEwMjVkZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr4QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHUfNdTh9RBSoYnzZ4VGBU0qkln+xoO/YuTWFTA8tfDLbzT2m07jeuu
p5a44085VirA6MxcU1eotikKpF1KVvS4SpWajOY+fZTyvNufVXt9x7dEQgpyQDKe
xWHi0OnVuaUV9gkA/b+jOR9Z1ln21QSFmz9jVlyaPigVhQDDIhfeaVeDKi8xQpUV
ctR3+2Mx9jsJtbCDQQpVs0b5c1R0XuNmOEZ8OwCmB6ZhYkaRqwNfHR1Sh4rcM6l1
CFpoOBZuhk2AT+94zZdeZN/e7p3Nn0WU7njl7KBfsQqd+mP3T7qgEdg3tkgKBfeN
ev2WVKcL7KgMM26dlpKAHKrRV0AM9Yw=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:07 2026 by rpki-client