Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf26421c-3be1-3653-829d-70d37ab3bc4f.roa
File:                     cf26421c-3be1-3653-829d-70d37ab3bc4f.roa (raw, json)
Hash identifier:          LgLwhcQnJ9jjBbzt2a8w0QvgVStZFSj8hOymLMjoAYw=
Subject key identifier:   CB:7A:67:3E:9A:84:09:0D:AF:D5:A0:B8:D7:AD:54:B3:A2:B1:7C:5C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E507B9B9EBEAC25D9AD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf26421c-3be1-3653-829d-70d37ab3bc4f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.12.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:50:7b:9b:9e:be:ac:25:d9:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5c93ee7e-777f-4355-9cdf-60af9adb97f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:06:00:45:a2:4e:a7:b6:c6:76:1a:be:ce:
                    06:0c:44:b0:4a:0b:2f:c0:47:8d:42:1f:2f:45:e8:
                    82:6e:34:45:00:04:07:2e:ae:48:85:d9:9a:5f:0f:
                    e1:0c:e9:1d:7e:0c:b6:d3:73:4d:f1:44:74:8e:2d:
                    bb:25:a5:9c:62:d2:d1:6a:dc:2a:69:2c:20:22:1b:
                    28:e4:28:6b:4e:b3:3b:a4:cc:59:b7:b4:c4:26:e8:
                    8b:82:b0:0d:e7:60:44:37:6e:33:9a:08:20:b2:0d:
                    88:48:ce:23:82:33:41:44:18:8a:97:01:10:69:ea:
                    6a:b9:d6:06:5e:08:d8:ce:a0:52:a5:f1:dd:a4:8a:
                    6b:be:f4:8a:1b:e7:69:d9:ff:4d:35:03:c6:1d:ff:
                    cb:6f:30:c8:a0:0f:03:d3:35:8d:cc:a8:31:5c:da:
                    f0:80:26:9c:ca:23:a4:da:b8:b3:ce:12:29:ce:dc:
                    9c:13:48:32:c9:2e:ca:1b:1d:f1:74:00:70:42:e9:
                    de:34:4d:98:7a:aa:d2:3d:57:20:c1:6e:40:2c:1b:
                    47:c0:4e:74:62:20:f3:65:18:2e:63:ef:db:a6:a6:
                    b4:96:41:22:92:46:74:bb:f0:6e:0e:ef:ae:48:fc:
                    9f:cf:c3:91:5d:8f:bb:0a:a4:fe:b1:e6:a7:f0:23:
                    5f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7A:67:3E:9A:84:09:0D:AF:D5:A0:B8:D7:AD:54:B3:A2:B1:7C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf26421c-3be1-3653-829d-70d37ab3bc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.12.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:a0:82:44:4c:38:9f:4b:88:60:83:4c:03:f6:a9:75:b2:
         5c:9b:98:31:c2:4f:d7:20:16:be:f7:a9:04:45:18:7a:7c:37:
         44:d2:f9:d1:d1:a6:e0:97:19:c6:52:f1:3b:e9:09:5f:36:31:
         d2:25:70:ba:0b:fc:e7:73:67:2b:c8:eb:84:77:ab:cf:24:d9:
         66:38:50:55:58:d3:b0:d2:e1:86:99:e8:60:95:49:12:29:7d:
         32:9f:e5:00:88:fe:43:53:c6:fc:2e:2f:e2:2f:c5:19:e9:4e:
         8b:72:82:42:50:dd:9f:59:1b:c1:f4:fe:53:37:a5:54:ef:df:
         4d:31:f4:38:a1:52:ee:1e:1f:49:20:20:60:d0:06:46:3e:c1:
         76:f6:0c:f3:62:14:e9:90:b2:c1:e7:e6:42:62:37:ba:76:dc:
         2c:f3:be:21:a9:c4:8e:68:aa:30:ac:36:a0:c6:06:43:3c:00:
         b1:a2:78:52:6c:ca:6b:7d:1d:16:68:c5:ef:25:24:fb:97:25:
         80:ce:54:91:8c:0c:b2:76:62:4b:29:f2:cd:99:da:9c:1e:1d:
         1e:ed:b7:6c:ce:3f:72:a1:dc:b9:32:bf:2c:e7:e7:df:ef:0d:
         0f:99:80:4e:3f:ac:c0:d5:73:2f:52:81:85:8a:93:1a:dd:f5:
         95:57:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:22:38 2026 by rpki-client