Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb795370-a080-375b-840c-0a8a24a2bde5.roa
File:                     cb795370-a080-375b-840c-0a8a24a2bde5.roa (raw, json)
Hash identifier:          ch8C/nv7rBI2GcP3QogWHBOehQTddPt21r5YGmVwDgU=
Subject key identifier:   73:89:6F:45:54:1E:92:5B:4D:5D:D6:A0:C2:18:CF:DC:DA:18:C4:7F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDCF4B541DAEE78F92C40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb795370-a080-375b-840c-0a8a24a2bde5.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.13.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:dc:f4:b5:41:da:ee:78:f9:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5653ce69-edce-473e-9083-aacc71d5d87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:f4:5a:2c:31:1e:eb:21:7a:5f:6c:09:6a:
                    64:73:c6:b8:3f:92:02:d3:dd:51:8f:9f:47:27:fd:
                    15:5b:a7:8a:16:e6:1e:ad:22:dd:b7:ab:e3:ac:c7:
                    89:88:fb:ce:cc:59:59:63:cf:ac:e0:93:09:58:f4:
                    14:a1:f5:24:2f:8a:c9:2e:88:82:81:ec:7b:e7:69:
                    3e:be:51:86:84:bf:ba:da:2b:4a:44:ec:49:40:8a:
                    5c:86:ef:28:ee:59:82:5f:b8:48:a8:e2:e3:f2:19:
                    00:3d:a2:58:d7:45:99:44:dc:4e:3d:55:96:da:06:
                    2f:1c:2f:32:c2:85:2f:80:6e:e5:36:d5:2b:52:65:
                    84:3b:a6:af:89:16:75:42:73:12:a5:9e:44:1e:fd:
                    c2:d3:47:68:71:45:d2:4e:a6:50:90:30:b4:1d:27:
                    76:e9:dc:02:b2:c6:f2:b0:19:a5:76:0a:0a:43:68:
                    2b:0b:6b:ae:f7:ff:52:86:57:a2:58:cc:65:2c:a2:
                    bb:fb:41:de:16:c1:b1:21:09:ed:ae:87:0e:8f:9d:
                    32:67:55:1e:01:8b:1d:bd:55:d8:c6:a0:24:e1:a1:
                    06:ae:1c:e2:fa:78:db:ee:1c:38:9a:60:76:26:f2:
                    e4:66:6d:53:43:46:6a:1d:9a:64:94:21:d5:47:c5:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:89:6F:45:54:1E:92:5B:4D:5D:D6:A0:C2:18:CF:DC:DA:18:C4:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb795370-a080-375b-840c-0a8a24a2bde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:c1:32:e3:bc:66:5d:b9:75:26:b2:45:17:d0:94:88:a0:
         76:87:db:8b:62:8f:e4:f2:87:38:c4:8a:80:e6:18:ec:1a:8b:
         3f:db:c3:78:a3:9d:c4:cc:8a:c3:b2:96:f7:e7:f1:22:9c:cc:
         b8:be:06:b3:56:2a:63:cf:0f:a2:6e:00:30:ab:c9:8f:ed:04:
         a7:5b:73:e8:9c:6e:6c:26:04:a6:a8:b3:2d:3a:98:14:04:72:
         41:3d:e6:d9:27:09:a8:29:fa:d3:c9:fd:8a:91:c9:64:0f:69:
         d1:a6:59:f3:43:7b:49:9b:c3:14:67:e8:38:7c:e0:8e:2a:7f:
         85:74:f9:bc:5d:79:28:81:14:c3:ac:15:94:ca:b6:21:f0:e4:
         f4:97:1a:85:76:86:b9:46:1a:53:b1:ad:83:d6:6b:ff:94:3e:
         66:0f:32:d0:e2:42:3b:bc:50:77:14:d1:70:c9:69:31:db:a0:
         ee:35:ab:b7:10:f6:81:80:59:40:3c:0c:ef:5f:21:48:69:5d:
         0c:20:21:7f:b9:27:47:3d:ca:c4:3c:cc:00:ff:db:01:73:d1:
         b0:c6:13:2c:ab:2b:c7:23:c7:50:08:8f:38:30:a9:fd:4a:d8:
         f0:25:6d:de:ef:aa:3e:6b:81:13:c0:e0:f7:e9:b3:b4:b1:e3:
         a1:b2:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:34:31 2026 by rpki-client