Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a65e0ebd-0e5b-3d6b-91c6-3cff9335cf03.roa
File:                     a65e0ebd-0e5b-3d6b-91c6-3cff9335cf03.roa (raw, json)
Hash identifier:          sgZNFGXJf24ZTINpHkyJd5oBQAdOOvql6xi3uLzixss=
Subject key identifier:   DB:FA:95:6D:F2:F4:DF:D1:55:7A:38:C0:D6:50:C3:11:BC:21:4F:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB34CD7327802436C61E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a65e0ebd-0e5b-3d6b-91c6-3cff9335cf03.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     22677
IP address blocks:        71.15.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:34:cd:73:27:80:24:36:c6:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=b46797c8-6e29-4af1-aade-5171559b208d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:73:45:70:71:95:48:b5:3c:2d:ec:59:09:
                    07:8c:7b:42:5e:21:c7:05:4f:b1:c7:08:96:75:ce:
                    8b:d3:ce:7b:9d:3a:e7:67:8b:03:11:c2:78:65:70:
                    6f:d8:3e:04:ae:c3:5f:d2:e8:0c:dd:ed:ff:a3:9b:
                    46:82:87:62:94:f6:d3:c0:46:e4:e4:8c:04:ad:ed:
                    3e:c2:a1:cd:0c:b2:39:c3:80:e2:f4:b7:f3:d6:99:
                    9c:c1:2b:1f:e5:39:52:23:65:d3:fc:a0:8e:0e:f9:
                    d7:95:42:c2:cf:d3:1a:fc:64:cd:7d:35:ca:d9:00:
                    52:45:33:86:cf:7d:ff:db:2f:72:78:ea:18:9c:aa:
                    88:3f:a0:be:c6:9a:4a:f0:c3:38:b2:b6:de:8d:6a:
                    57:07:bd:48:44:13:0a:59:f1:9f:69:66:16:ca:40:
                    61:48:84:48:74:47:12:c4:27:56:c8:18:4a:e8:bd:
                    ce:90:96:41:f8:f3:53:14:9c:5e:b2:75:94:9d:6e:
                    4b:e6:c0:b6:4c:bf:08:b6:68:fe:3f:1d:14:27:07:
                    3b:98:2b:e2:71:6d:9d:dd:f2:39:77:07:61:ce:22:
                    3d:7d:18:bb:9b:04:7c:92:af:c6:d2:cb:e9:2a:54:
                    f4:3d:99:0e:2e:12:d8:87:32:73:d8:4c:6e:56:b4:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FA:95:6D:F2:F4:DF:D1:55:7A:38:C0:D6:50:C3:11:BC:21:4F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a65e0ebd-0e5b-3d6b-91c6-3cff9335cf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7d:5a:21:82:37:2a:52:b5:96:62:2a:cd:73:07:e6:1a:75:
         4f:e8:af:1f:54:25:75:d5:25:c2:1c:bb:00:25:9d:c0:7d:f2:
         41:b1:8f:06:c4:16:5a:a4:79:29:8a:80:03:bc:1a:7e:55:8f:
         43:18:20:1e:e9:ea:3d:f7:62:b1:ae:5c:f4:5d:31:7c:bc:41:
         92:b1:ab:49:5b:f4:1d:21:a0:75:62:a2:a9:49:ad:42:81:a9:
         f0:38:7c:ed:f3:8a:56:19:41:bc:1f:e7:ee:b3:26:82:00:b5:
         c6:9d:e5:38:c5:53:a8:1a:80:6c:e5:b7:80:30:e7:3e:ba:b5:
         3a:5d:83:10:e7:47:a7:84:fd:81:7f:56:df:9f:95:0d:4e:68:
         9e:ac:d4:f9:c4:38:70:6b:7e:d0:0a:14:d3:1b:e0:d2:13:33:
         f4:06:7f:b8:84:7d:0a:00:43:2f:5d:ac:7f:58:77:52:35:58:
         11:5a:59:39:f1:e9:c4:9c:f0:28:43:54:53:8e:92:4f:2e:75:
         76:cc:b9:2d:b6:43:8c:f5:5e:26:85:f2:03:e9:af:26:dc:75:
         cb:c7:e8:21:8a:b3:d5:ba:8c:36:e9:29:64:b0:da:fe:63:d7:
         29:5d:94:79:0a:d1:ea:fb:a8:58:db:61:1e:79:41:d1:2e:95:
         8b:9c:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:08:07 2026 by rpki-client