Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c732f32a-d984-39b0-9936-34eec95e0be0.roa
File:                     c732f32a-d984-39b0-9936-34eec95e0be0.roa (raw, json)
Hash identifier:          hWSmaZdzi7HgpxfpDdCWZ6Bkro2idCYEbx2uVy8exHE=
Subject key identifier:   9A:CE:C6:EF:18:9D:00:0C:56:A8:A1:58:93:F0:58:AE:4A:BB:D6:95
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37271700BF7D7C654E6CD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c732f32a-d984-39b0-9936-34eec95e0be0.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20001
IP address blocks:        66.53.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:71:70:0b:f7:d7:c6:54:e6:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=cd0426cb-0146-4447-b2e9-d7b6132d9041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:77:2f:27:8f:88:78:89:40:9b:e1:b2:4d:
                    49:95:92:f9:33:f5:2d:f7:67:a9:34:67:94:0d:be:
                    25:ca:ed:bd:24:27:17:5f:d0:00:aa:66:c0:a5:b8:
                    9d:23:95:c3:ba:c3:db:5c:f1:ed:d1:8d:ba:21:07:
                    60:a6:1a:6d:c3:03:2f:bc:c9:05:7f:64:fd:41:e7:
                    10:2d:e0:b2:69:55:4d:64:36:9b:ac:a1:73:58:9f:
                    40:0c:e2:65:0a:29:d4:44:b1:9d:7a:28:61:99:83:
                    13:ae:4d:2b:1f:5e:51:8f:b7:ae:ac:3a:51:af:83:
                    d6:a8:51:19:e6:ec:8d:66:85:37:5d:35:81:88:de:
                    8d:40:8c:16:fd:2a:d0:0d:98:ad:5e:f4:5f:09:c3:
                    90:3b:2e:7b:44:9e:69:63:f2:f6:de:88:1a:3d:c8:
                    59:cf:33:af:a8:9f:fb:f4:79:a7:cf:2e:6a:93:3a:
                    53:99:59:10:a6:01:85:85:06:c8:08:ff:6e:94:c4:
                    b6:80:25:4c:56:f9:60:0c:8a:54:71:76:4c:68:c1:
                    e9:b6:2f:b7:5c:f6:60:2b:a4:af:98:74:17:d1:c3:
                    1f:ea:67:98:16:b9:0d:47:92:cc:01:4a:8b:72:bc:
                    62:5d:b2:89:23:f1:70:e8:1b:3f:19:45:19:ed:b0:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CE:C6:EF:18:9D:00:0C:56:A8:A1:58:93:F0:58:AE:4A:BB:D6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c732f32a-d984-39b0-9936-34eec95e0be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.53.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:86:a9:72:4d:6b:0b:05:9f:c7:da:fb:1e:fe:e8:d2:4c:17:
         7f:2b:22:18:c2:f8:a0:5f:ff:58:a0:2a:fc:02:62:87:93:24:
         49:1b:0e:45:9d:88:1e:34:e5:5f:10:21:6e:6d:55:d9:eb:e1:
         e9:d7:b6:37:79:bb:d6:8d:24:5c:6f:4b:c6:2b:32:fd:21:fa:
         e6:e0:99:a0:5b:4a:ec:26:5d:bd:a6:d3:c3:80:c2:f2:83:31:
         1c:98:30:1e:d8:28:f0:f5:6a:c8:53:db:66:b5:11:46:0e:65:
         ce:e3:5f:27:f9:17:4e:d3:2b:cd:54:e9:bb:26:84:49:4c:7d:
         48:f2:4c:0c:73:0f:94:f9:c6:8d:e4:71:1d:83:e8:38:51:23:
         df:85:41:62:3b:c5:83:6b:44:e2:3d:a3:5f:21:34:7a:b1:05:
         64:fd:f8:c1:7f:f6:65:71:e1:75:de:cd:cd:97:70:45:22:0d:
         e9:a8:f1:49:a1:96:b0:b6:24:56:b6:3f:f0:cd:45:3a:76:e5:
         6e:e2:2f:69:bb:fe:2d:57:57:b3:eb:0e:18:df:38:86:cb:a0:
         e8:b4:78:0e:73:d3:00:2b:86:78:4c:91:a7:6f:10:06:9c:3b:
         2d:5c:6d:29:99:b7:d4:b1:16:27:ca:0d:1c:38:d3:e1:aa:f1:
         33:dc:4d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:43:47 2026 by rpki-client