Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa
File:                     af075a20-4673-3bd1-bb12-ab58c38e8135.roa (raw, json)
Hash identifier:          XX4ATA03PklAWgXd+gNuQnnZxRFI/sxMNbnpYydxzjg=
Subject key identifier:   91:DE:07:84:06:0D:2E:B5:01:0C:04:C5:58:66:04:02:6A:CD:33:11
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3720A28227365AE63423480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.87.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:0a:28:22:73:65:ae:63:42:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=9ccffbbb-0e5c-4623-ac6c-7a4fde29ddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:59:3b:cc:73:5f:6e:54:c1:57:65:3e:67:
                    c0:e7:d8:47:14:7c:c1:4b:6d:4b:7e:db:fa:0a:bf:
                    ba:81:fa:fc:80:6a:f2:7b:02:45:74:1f:b5:2d:41:
                    be:bd:30:b3:83:c4:c1:3e:df:3f:20:bf:e4:61:05:
                    49:33:28:5b:83:6d:8b:c4:2a:3e:9c:44:22:7a:71:
                    a1:cc:b0:7d:3b:64:d0:fd:bb:75:78:68:49:a7:07:
                    d6:9b:ac:32:50:63:d4:bc:5c:60:6c:0f:85:17:d9:
                    e3:1f:98:4c:32:d1:9a:60:4e:cf:d1:5f:ed:a1:6a:
                    7b:90:2c:8b:c4:35:94:20:6f:48:7d:a2:16:f8:56:
                    20:73:08:7c:4d:fc:cb:7f:ca:ab:9e:4a:dc:fc:7a:
                    8d:26:c9:0f:6e:84:d4:76:da:bf:04:36:eb:85:76:
                    c0:08:b2:ca:4b:7b:f0:6d:e9:46:c8:b9:3f:92:44:
                    dc:b9:77:1a:5d:ce:c8:2f:33:7f:33:47:0c:eb:10:
                    71:df:f5:88:4c:76:e1:13:62:6d:7a:6e:78:e9:d5:
                    a3:23:1b:dd:81:02:b0:f9:d7:eb:e1:80:27:d4:1e:
                    fe:ff:77:79:1c:21:a1:d3:2c:34:49:0a:39:cd:5d:
                    92:84:4f:6b:34:f2:cf:cc:55:37:c3:3b:7d:a6:73:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:07:84:06:0D:2E:B5:01:0C:04:C5:58:66:04:02:6A:CD:33:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:e7:bb:9c:79:c4:2f:ac:d6:3a:5a:44:b7:9d:31:30:40:69:
         fe:9b:63:d3:c9:27:fe:19:0c:e9:71:a7:cb:bc:c1:73:7e:44:
         51:21:e9:ce:7e:5c:b6:34:c7:42:24:34:1b:ac:18:3c:d2:2c:
         cf:a7:7a:83:94:3b:20:12:fe:ed:0d:d1:16:14:3b:63:89:5d:
         9d:b1:5e:4b:61:31:86:cd:7c:d1:b4:f0:9e:06:92:2b:a1:e3:
         c9:7b:a8:8f:5f:da:5f:97:d7:31:a0:14:7b:49:36:09:d0:b9:
         e0:d9:db:fb:7b:2c:ed:20:75:26:e6:d5:3c:07:8e:d3:fd:a4:
         27:80:c1:97:cf:22:cb:78:71:8f:20:1d:b2:55:03:00:78:bb:
         66:2d:94:e9:6b:92:f9:60:b9:3a:5d:eb:6f:6c:d1:85:9c:03:
         33:07:e0:ef:72:bf:83:f0:89:cd:4c:c3:09:67:81:97:87:be:
         67:6a:cc:6e:3b:cc:1f:9c:7c:2a:6d:b6:6a:37:01:cf:b3:46:
         36:7a:54:33:e1:eb:57:85:dd:e5:0f:80:ae:9f:fe:f3:3e:a9:
         5c:9c:5f:08:85:79:c7:08:6e:74:16:b0:42:b5:be:ee:95:2d:
         e4:c3:48:bc:73:71:58:2a:9d:fa:4c:6b:23:9c:18:ca:3a:92:
         0b:05:29:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcgooInNlrmNCNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
OWNjZmZiYmItMGU1Yy00NjIzLWFjNmMtN2E0ZmRlMjlkZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyThZO8xzX25UwVdlPmfA59hHFHzBS21Lftv6
Cr+6gfr8gGryewJFdB+1LUG+vTCzg8TBPt8/IL/kYQVJMyhbg22LxCo+nEQienGh
zLB9O2TQ/bt1eGhJpwfWm6wyUGPUvFxgbA+FF9njH5hMMtGaYE7P0V/toWp7kCyL
xDWUIG9IfaIW+FYgcwh8TfzLf8qrnkrc/HqNJskPboTUdtq/BDbrhXbACLLKS3vw
belGyLk/kkTcuXcaXc7ILzN/M0cM6xBx3/WITHbhE2Jtem546dWjIxvdgQKw+dfr
4YAn1B7+/3d5HCGh0yw0SQo5zV2ShE9rNPLPzFU3wzt9pnOqRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHeB4QGDS61AQwExVhmBAJqzTMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWYwNzVhMjAtNDY3My0z
YmQxLWJiMTItYWI1OGMzOGU4MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR1foMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMnnu5x5xC+s1jpaRLedMTBAaf6bY9PJJ/4ZDOlxp8u8wXN+RFEh6c5+
XLY0x0IkNBusGDzSLM+neoOUOyAS/u0N0RYUO2OJXZ2xXkthMYbNfNG08J4Gkiuh
48l7qI9f2l+X1zGgFHtJNgnQueDZ2/t7LO0gdSbm1TwHjtP9pCeAwZfPIst4cY8g
HbJVAwB4u2YtlOlrkvlguTpd629s0YWcAzMH4O9yv4Pwic1MwwlngZeHvmdqzG47
zB+cfCpttmo3Ac+zRjZ6VDPh61eF3eUPgK6f/vM+qVycXwiFeccIbnQWsEK1vu6V
LeTDSLxzcVgqnfpMayOcGMo6kgsFKeE=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:18:32 2026 by rpki-client