Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa
File:                     d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa (raw, json)
Hash identifier:          5ZdRN3v8E+rmn1ahVwVn08HShI87kPO34NmDnUnkJns=
Subject key identifier:   9D:3F:A4:10:58:E1:1D:57:FE:9C:F2:8B:CC:80:B4:B6:A6:41:1B:48
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37296891AD0DC12AA86FF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        71.12.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:96:89:1a:d0:dc:12:aa:86:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=50e48ff0-0c9c-425d-86ff-a3b2222f14eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:6b:54:1c:0c:24:2e:23:28:8b:3e:29:0b:
                    aa:66:eb:94:06:90:1e:3b:f4:a2:87:54:a0:89:36:
                    16:b8:b1:31:2b:00:d8:e8:be:8c:d2:5c:bc:6d:18:
                    52:46:38:bc:ea:21:ce:58:dd:7e:16:a1:44:3f:fc:
                    60:fb:a7:75:01:69:41:37:84:57:e7:ef:b0:87:aa:
                    79:53:ef:09:e3:c0:e8:23:c4:01:6c:f0:03:95:1f:
                    ff:1d:bf:32:f3:d6:cf:3d:cc:67:fa:a4:8f:46:31:
                    ca:03:f6:d4:a7:31:15:f7:4f:2e:83:42:f2:8d:13:
                    49:3d:53:92:bd:88:35:d0:cb:93:97:b4:40:77:80:
                    25:05:28:f0:4c:ae:47:fb:71:d8:bf:d7:45:78:60:
                    13:74:77:08:de:61:df:94:6d:32:ac:40:52:26:bb:
                    0d:41:1c:df:8f:47:72:c1:f4:9e:10:c4:32:1c:c9:
                    df:90:7a:ba:06:d3:c5:f5:7e:7e:4a:d2:ec:e2:d9:
                    90:e4:64:40:52:71:a4:41:32:40:2d:d2:f5:03:8a:
                    77:e1:fb:26:91:5a:95:a0:32:a3:a2:77:79:93:98:
                    83:06:4e:22:3e:8a:c1:f8:9f:8d:4a:01:da:8a:ca:
                    dd:59:f3:75:76:ae:ac:67:e6:e6:0b:48:7f:11:e3:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:A4:10:58:E1:1D:57:FE:9C:F2:8B:CC:80:B4:B6:A6:41:1B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.12.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:53:9c:f0:be:93:21:34:21:71:dc:60:83:f6:01:8f:35:
         6c:f3:36:08:24:71:70:f0:e3:d4:67:de:e4:f4:04:d5:cc:36:
         96:b8:22:ac:b2:70:a0:72:3f:0e:e4:b5:fb:9e:f8:d3:43:a2:
         9c:1a:86:ee:05:0d:5f:7c:e0:f5:ff:d6:ae:b0:73:80:96:5f:
         8f:77:bc:d0:86:b1:cf:f9:69:7e:33:7b:07:4f:88:a5:3b:ed:
         32:0b:d2:90:6c:af:17:1c:23:62:34:53:36:cc:db:3b:0b:f4:
         ba:d1:8f:1f:2f:5a:95:43:b5:b6:3e:ef:a9:41:eb:6c:f3:fc:
         3a:56:da:19:45:9f:5e:bd:44:dd:4a:27:e5:bc:44:06:77:63:
         ab:ba:35:9b:8a:40:52:a8:27:15:fa:5e:ce:92:fb:35:5d:c3:
         cb:2f:c5:f0:01:7b:0f:ec:cc:78:11:fd:4d:b7:cc:a1:2d:c0:
         cb:97:6f:54:2f:74:06:57:4c:d6:3b:d8:2c:9a:d8:7a:38:94:
         e5:11:b5:3e:13:e5:58:29:bb:e8:97:3e:06:e0:15:f2:fd:78:
         2f:f6:22:94:0e:b4:59:c3:9c:02:c7:33:1d:e5:df:3e:eb:07:
         1f:c5:8f:fd:fc:03:83:05:01:4d:8f:85:df:42:81:e9:2d:a1:
         e0:c3:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:16:51 2026 by rpki-client