Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cfd520b0-fd7b-386a-8305-402ed0053964.roa
File:                     cfd520b0-fd7b-386a-8305-402ed0053964.roa (raw, json)
Hash identifier:          4SYZI3S7BqrPXcFkMkE5LD+AiBtvwiSDSYeTssDjHwI=
Subject key identifier:   56:25:0E:CE:97:A0:DF:D0:00:33:87:20:50:0B:23:78:FC:1C:9A:0B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3729C156843B75F215AFF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cfd520b0-fd7b-386a-8305-402ed0053964.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        75.140.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:9c:15:68:43:b7:5f:21:5a:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a0ef0e11-f8e1-4599-b80d-188e0d257d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:41:42:bb:18:89:10:d9:f3:de:2c:d0:07:
                    ea:b7:04:75:17:7d:00:9b:00:b2:1b:37:8d:2c:71:
                    73:b0:cc:39:c3:0a:59:8e:63:20:6b:b6:61:f9:fc:
                    ab:9f:61:ac:d4:4a:22:15:f1:99:67:85:a5:0e:4d:
                    95:59:36:76:b6:ce:17:79:5f:91:c9:f1:03:9f:5f:
                    77:ef:1f:83:d5:ea:c2:53:df:83:9b:05:26:33:fb:
                    08:2e:7a:4d:f6:97:56:2c:f3:ae:a2:ec:aa:31:a2:
                    21:fc:83:49:c7:20:7c:6b:ba:96:e3:59:b7:20:59:
                    50:b9:03:41:f2:5c:b8:b6:c8:e2:30:56:11:b8:d1:
                    bf:44:40:c6:e9:ac:f0:e6:22:c9:4d:ac:70:54:8b:
                    71:eb:f3:f2:56:63:66:25:f1:5a:ff:11:38:f8:b3:
                    22:8d:34:95:00:f4:f6:97:aa:b0:9b:ce:63:67:c4:
                    a0:d5:c5:67:e6:65:2e:8e:5a:43:bf:cc:61:e0:85:
                    8e:9b:b9:7f:e5:cf:39:23:92:4f:9d:44:e5:6f:40:
                    73:c2:e3:0d:c2:20:bd:ce:2b:22:7d:7f:9e:cf:8b:
                    62:5a:f7:a2:8e:e6:bd:4c:10:b2:85:27:4f:6a:3d:
                    96:6f:34:97:0d:25:20:91:d2:38:16:6f:ba:3c:b9:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:0E:CE:97:A0:DF:D0:00:33:87:20:50:0B:23:78:FC:1C:9A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cfd520b0-fd7b-386a-8305-402ed0053964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.140.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:b6:e1:be:5d:df:7b:36:fb:63:02:22:9f:89:e6:ac:30:77:
         93:bc:19:72:91:34:10:59:5f:67:fe:2a:ae:d5:b8:ff:75:aa:
         fc:ba:ba:25:2c:f8:98:aa:90:b5:31:ec:80:d4:f0:c4:32:bf:
         3a:fb:1d:5e:62:5d:34:98:39:e5:d2:dc:e9:fa:05:af:62:b4:
         c9:ce:d7:9a:70:0a:7c:fd:9d:5c:5a:54:f3:6c:57:e9:44:f4:
         47:5e:c1:53:10:8e:84:28:fa:1e:0c:25:68:9c:f4:a9:cd:ef:
         e3:d4:4a:5b:1c:63:32:af:8a:54:38:b1:26:f0:cf:2b:49:22:
         34:36:04:fc:3b:89:2e:b6:4c:dd:6c:50:a0:88:0e:55:af:5d:
         70:7a:64:a1:41:bb:12:aa:be:65:c9:e5:52:0f:2d:e7:9d:e0:
         41:11:41:37:1d:1e:c5:f7:54:03:46:c0:a3:56:4b:6e:31:67:
         0d:4a:4b:54:e2:5a:85:71:b3:d0:83:fe:77:cc:88:1a:10:16:
         b6:03:de:fb:f6:98:9e:0f:d1:62:69:1c:bc:f1:96:7e:1a:22:
         4d:7c:a7:fc:a1:a7:95:cc:36:79:50:79:28:a9:25:a9:58:e9:
         d2:42:92:f2:8d:32:a2:fa:7a:0c:42:46:12:5b:33:f9:33:d7:
         41:48:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:17:50 2026 by rpki-client