Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a25e9244-b350-300c-abbf-11d18deb9cce.roa
File:                     a25e9244-b350-300c-abbf-11d18deb9cce.roa (raw, json)
Hash identifier:          k1K34vNoFxFty3TEoMbK3R6X3vVxymXJaDxOiPYwy1E=
Subject key identifier:   88:0A:55:DE:9A:95:5D:55:87:66:4B:CC:BB:6C:65:A0:57:09:AE:E1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDD71EF4AC715311776C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a25e9244-b350-300c-abbf-11d18deb9cce.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.15.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:dd:71:ef:4a:c7:15:31:17:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e71c0a35-8008-4a2e-a223-080ddf100858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:cd:b8:24:18:57:b5:1b:18:47:99:27:43:
                    9a:14:06:f9:69:56:89:3d:a4:15:30:ac:3e:0b:c5:
                    35:c2:97:b7:8b:ed:a7:0e:2e:0d:62:3b:ae:a1:4a:
                    d3:2b:9e:60:72:21:61:7a:c1:89:47:e4:fc:a5:8c:
                    8b:50:57:f9:67:65:d4:af:5e:03:9f:43:c2:02:e1:
                    88:42:d1:c9:f0:c0:76:71:4c:a7:08:e4:8c:f8:6b:
                    0b:c9:86:f3:2b:b5:64:2f:45:c7:14:8b:b7:d5:43:
                    54:e4:98:53:85:15:2a:12:97:fc:fd:13:e1:69:53:
                    6e:af:98:a4:e5:75:61:51:bb:fd:ef:1d:df:6a:4e:
                    76:55:4a:3b:ae:78:0b:cf:16:70:e5:88:4b:76:80:
                    c4:08:25:50:a0:10:76:4c:0c:83:ba:cc:df:92:1c:
                    37:f8:8a:72:14:6d:44:5b:5c:e9:85:e5:72:8a:bd:
                    46:fa:10:b1:5c:12:78:71:34:ac:0a:40:bc:14:b4:
                    7d:5b:28:45:24:7d:c3:49:69:81:2d:32:33:13:d0:
                    c0:05:96:9c:f2:04:04:f9:b8:31:c7:7e:8d:84:6b:
                    f6:0f:c0:b9:02:83:34:a3:42:03:eb:14:b7:c6:0f:
                    20:e4:50:e9:b7:aa:fe:f7:b5:ef:13:2d:ed:f3:47:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:55:DE:9A:95:5D:55:87:66:4B:CC:BB:6C:65:A0:57:09:AE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a25e9244-b350-300c-abbf-11d18deb9cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:f3:24:3a:42:31:d1:51:d6:2a:7e:c8:7b:c0:de:5a:c1:35:
         d6:56:d9:81:47:d8:d8:88:13:2e:58:be:cf:87:f7:aa:bb:37:
         46:fa:b5:84:26:f1:43:9f:51:04:1b:fa:d0:c7:70:5d:04:1a:
         a1:d4:b5:2c:f1:c1:fd:2b:c1:0d:62:9e:46:6a:39:af:bc:2c:
         de:6d:04:d4:69:47:da:00:51:a4:0a:fa:74:e9:95:79:87:49:
         37:77:6d:fd:11:01:02:3d:14:cb:17:0e:c2:6f:7c:28:b9:35:
         c5:ca:e5:bc:d7:03:99:ae:2b:85:ab:df:40:26:3d:1b:40:bc:
         40:cb:31:b6:db:5b:fe:f1:05:02:eb:3e:40:6f:2b:aa:5d:b8:
         34:40:bb:78:91:89:df:66:c4:a8:0f:cd:f1:f9:a2:aa:80:20:
         fa:c8:6b:6a:31:7f:ab:59:0c:79:81:9a:47:c8:dd:e4:d2:78:
         d0:58:60:3d:f7:7b:8b:88:d6:0c:40:47:61:3b:4d:78:c2:55:
         2b:62:95:e4:fd:78:08:3f:31:d1:4f:3f:01:23:d7:c7:3d:85:
         e1:c2:8a:62:8e:89:4d:96:16:0b:4e:1f:d2:1d:61:dd:7c:cc:
         a7:0f:b6:0a:e8:e0:e4:89:9b:a7:e6:a0:c5:ce:33:ee:23:cf:
         88:55:ed:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXd1x70rHFTEXdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
ZTcxYzBhMzUtODAwOC00YTJlLWEyMjMtMDgwZGRmMTAwODU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7rNuCQYV7UbGEeZJ0OaFAb5aVaJPaQVMKw+
C8U1wpe3i+2nDi4NYjuuoUrTK55gciFhesGJR+T8pYyLUFf5Z2XUr14Dn0PCAuGI
QtHJ8MB2cUynCOSM+GsLyYbzK7VkL0XHFIu31UNU5JhThRUqEpf8/RPhaVNur5ik
5XVhUbv97x3fak52VUo7rngLzxZw5YhLdoDECCVQoBB2TAyDuszfkhw3+IpyFG1E
W1zpheVyir1G+hCxXBJ4cTSsCkC8FLR9WyhFJH3DSWmBLTIzE9DABZac8gQE+bgx
x36NhGv2D8C5AoM0o0ID6xS3xg8g5FDpt6r+97XvEy3t80f6qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgKVd6alV1Vh2ZLzLtsZaBXCa7hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTI1ZTkyNDQtYjM1MC0z
MDBjLWFiYmYtMTFkMThkZWI5Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERw9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMjzJDpCMdFR1ip+yHvA3lrBNdZW2YFH2NiIEy5Yvs+H96q7N0b6tYQm
8UOfUQQb+tDHcF0EGqHUtSzxwf0rwQ1inkZqOa+8LN5tBNRpR9oAUaQK+nTplXmH
STd3bf0RAQI9FMsXDsJvfCi5NcXK5bzXA5muK4Wr30AmPRtAvEDLMbbbW/7xBQLr
PkBvK6pduDRAu3iRid9mxKgPzfH5oqqAIPrIa2oxf6tZDHmBmkfI3eTSeNBYYD33
e4uI1gxAR2E7TXjCVStileT9eAg/MdFPPwEj18c9heHCimKOiU2WFgtOH9IdYd18
zKcPtgro4OSJm6fmoMXOM+4jz4hV7XA=
-----END CERTIFICATE-----
Generated at Mon Oct 19 11:19:00 2026 by rpki-client