Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa
File:                     b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa (raw, json)
Hash identifier:          SDcuUSjXisWKK/QJqyhNQb3jQB4KkDuc0tVHctWa+/M=
Subject key identifier:   50:C6:29:05:7C:D6:5D:AC:2D:CD:0D:6A:88:AD:AB:14:91:2A:38:26
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372717AE248373BC10DF680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20001
IP address blocks:        170.151.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:71:7a:e2:48:37:3b:c1:0d:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=c767ed9d-c204-4f69-a37a-064c2494f56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:4c:34:84:41:e5:36:5a:e6:8f:9f:60:ca:
                    fb:1d:76:d8:90:6c:28:8e:6b:c4:8d:be:e3:48:60:
                    5d:e9:ba:71:2d:9e:64:9c:d2:4b:0f:75:92:b2:37:
                    b3:c1:8f:28:7f:20:2f:5b:bc:bb:c9:48:4d:af:65:
                    53:95:b6:8c:a2:0b:fb:62:fa:7d:0f:cc:f3:5c:7b:
                    4c:e7:3c:a5:46:fb:30:6a:a5:62:a7:88:3f:9a:57:
                    b4:cf:a8:99:6b:de:f5:23:46:db:d1:7f:5f:2a:a8:
                    ee:9a:15:e1:d3:36:0f:a3:96:5f:c7:1f:20:8f:dc:
                    95:81:17:00:44:32:49:5f:44:65:05:76:0b:ac:27:
                    0c:df:04:77:a1:b5:fd:22:e3:bc:7c:a1:a3:71:bb:
                    d1:1d:3a:2e:a7:8f:30:06:c7:34:dc:8e:a7:21:27:
                    6d:b5:42:c9:bd:59:61:39:53:7c:cb:9e:52:cb:99:
                    51:fa:64:ee:48:bd:b5:0a:b2:75:bc:83:72:cf:9e:
                    dd:15:1d:de:c7:14:d3:9c:0d:e0:07:44:4b:f7:e3:
                    bb:96:d5:87:b1:67:7b:65:61:0a:16:ef:d4:30:0d:
                    c3:3a:43:b1:e7:9a:87:42:1b:e8:2b:cc:c9:9c:b7:
                    c4:3f:e5:1c:8a:a3:7d:53:99:d7:c6:fd:06:21:66:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C6:29:05:7C:D6:5D:AC:2D:CD:0D:6A:88:AD:AB:14:91:2A:38:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b25feacb-c6d1-3f49-a001-45b463b7c6a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.151.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:01:41:c2:5a:af:7a:aa:ef:cc:07:37:92:d3:47:62:6a:ec:
         ba:40:c8:7d:86:3f:db:46:fc:49:82:d3:7f:12:ca:78:6a:8e:
         54:b0:cd:ce:4f:15:64:a5:ac:0a:03:02:82:15:60:32:4a:4a:
         bb:1a:d0:8a:c4:95:12:8c:38:3a:68:34:26:9b:11:f5:fd:ca:
         62:61:80:25:68:3e:40:e6:d0:10:dc:56:d6:7d:d9:38:02:e0:
         04:00:8c:e6:42:99:45:8c:09:b6:6c:bc:de:4c:c6:63:f8:68:
         03:cf:f2:36:d0:fe:a1:86:9d:4c:71:14:b6:3c:4d:ea:c9:5d:
         2c:51:25:79:ee:7b:08:af:ee:fa:57:ba:7e:e9:b3:08:25:02:
         25:c3:51:96:08:2e:31:14:c1:f7:37:5e:c3:53:76:02:e5:a7:
         3e:ed:be:13:09:af:40:d5:fb:9e:fc:8e:5d:a1:46:6e:29:39:
         60:cd:fd:32:f0:04:c8:26:e7:ff:93:52:c1:79:57:16:2c:bd:
         83:3d:13:4f:ee:88:04:4a:29:5e:1d:09:92:cc:cb:e3:14:60:
         a3:5b:af:45:c8:fa:2c:26:49:e5:aa:c2:07:a4:4a:c1:49:11:
         d1:8b:60:55:1f:06:0e:7b:3a:13:7c:82:80:31:43:46:1d:fb:
         ac:28:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:18:53 2026 by rpki-client