Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d37e98d4-07f6-3420-9c3b-facbb9858ccf.roa
File:                     d37e98d4-07f6-3420-9c3b-facbb9858ccf.roa (raw, json)
Hash identifier:          QRcZ9Ru1CPd8Ucebhj5ZqSeIdvsm7dIh3AmldR15R4g=
Subject key identifier:   2E:F3:AB:81:24:C6:90:20:16:78:B0:68:C7:25:5E:D9:14:7C:BE:3F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37273FC27FFB62F404EE9E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d37e98d4-07f6-3420-9c3b-facbb9858ccf.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        47.28.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:73:fc:27:ff:b6:2f:40:4e:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=81c778bf-efa3-40a0-96fe-002a11d4d42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:00:23:98:c5:1c:b0:11:b4:d0:71:69:33:
                    41:64:ef:6e:71:d3:c6:a1:be:a4:29:2c:24:9b:93:
                    f4:a3:3a:5e:39:5f:31:aa:49:6a:d0:19:5e:50:1f:
                    1b:e4:2c:6c:63:5a:87:f1:61:74:64:bf:83:f4:27:
                    ae:55:70:a0:bd:e7:ea:82:19:f2:3a:d8:af:47:46:
                    92:e4:66:a7:51:6f:0d:91:b9:85:35:7e:58:60:1a:
                    8e:78:c7:94:c1:35:97:66:07:3f:54:ac:b9:73:97:
                    fc:eb:bc:4a:6e:90:e2:95:0f:5e:20:9e:0c:4c:d7:
                    dd:1c:05:db:8d:90:72:5c:97:23:76:28:83:19:b5:
                    e5:d8:f4:c4:be:1a:71:f9:3b:57:7a:63:ce:f5:e2:
                    75:90:22:f1:a1:96:ac:88:73:87:6e:c5:05:bd:00:
                    30:37:23:d8:39:ad:76:c4:f1:8e:66:0f:a3:81:2f:
                    46:05:6f:da:92:10:b1:e9:a3:3f:71:2f:09:52:7d:
                    98:d8:fe:c1:c5:26:52:30:e3:6e:67:14:9b:40:81:
                    ab:3f:ee:1a:90:0b:58:41:80:29:28:39:d8:a0:4a:
                    24:30:41:3c:f8:ff:fa:a6:a5:e6:81:ce:fa:4b:d7:
                    fe:73:e8:d9:9b:96:4e:63:9a:d9:45:f0:2a:1f:f5:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F3:AB:81:24:C6:90:20:16:78:B0:68:C7:25:5E:D9:14:7C:BE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d37e98d4-07f6-3420-9c3b-facbb9858ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.28.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:60:f1:4b:dc:47:ce:a0:20:0e:08:8f:93:40:52:4c:09:cb:
         67:d8:71:3a:03:4f:cb:50:21:9b:40:5a:60:70:39:f6:ee:04:
         72:ea:4b:b5:d2:b0:2d:7d:38:27:ab:4e:d9:a6:1c:67:12:92:
         6e:2c:4d:eb:0d:91:d5:b8:34:28:97:57:37:f9:f2:13:a5:2d:
         c8:e2:c3:c9:c6:ac:bb:05:42:c5:16:d0:c4:9d:c0:34:ce:be:
         f2:84:b3:74:aa:e6:e7:42:4b:89:0d:00:e5:9a:fc:a7:44:1b:
         3d:26:88:d3:16:be:57:99:84:aa:7f:f5:cc:d5:f8:9d:cd:50:
         f0:e1:f9:36:c9:f6:42:b9:fb:dd:2c:6a:d0:e3:78:ef:f9:53:
         f3:5a:70:18:ce:15:f4:39:9f:ef:67:ec:67:60:ba:5f:cc:4a:
         da:c0:18:8d:c6:e2:7e:69:0c:b6:ec:67:fa:5b:96:3c:9c:04:
         e4:ab:28:72:c9:db:83:82:fb:73:de:53:69:6f:35:74:69:46:
         84:9c:ef:ae:45:86:30:fc:c6:2e:8c:eb:2b:dd:1c:8f:50:8f:
         23:19:c9:b9:80:81:5c:54:c0:c8:82:e5:f3:6b:24:62:3c:5f:
         34:36:bb:19:20:29:92:9f:a1:11:9d:ff:35:c3:cf:22:a9:69:
         50:c8:08:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcnP8J/+2L0BO6eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ODFjNzc4YmYtZWZhMy00MGEwLTk2ZmUtMDAyYTExZDRkNDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqIAI5jFHLARtNBxaTNBZO9ucdPGob6kKSwk
m5P0ozpeOV8xqklq0BleUB8b5CxsY1qH8WF0ZL+D9CeuVXCgvefqghnyOtivR0aS
5GanUW8NkbmFNX5YYBqOeMeUwTWXZgc/VKy5c5f867xKbpDilQ9eIJ4MTNfdHAXb
jZByXJcjdiiDGbXl2PTEvhpx+TtXemPO9eJ1kCLxoZasiHOHbsUFvQAwNyPYOa12
xPGOZg+jgS9GBW/akhCx6aM/cS8JUn2Y2P7BxSZSMONuZxSbQIGrP+4akAtYQYAp
KDnYoEokMEE8+P/6pqXmgc76S9f+c+jZm5ZOY5rZRfAqH/XfiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7zq4EkxpAgFniwaMclXtkUfL4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDM3ZTk4ZDQtMDdmNi0z
NDIwLTljM2ItZmFjYmI5ODU4Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLxyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRg8UvcR86gIA4Ij5NAUkwJy2fYcToDT8tQIZtAWmBwOfbuBHLqS7XS
sC19OCerTtmmHGcSkm4sTesNkdW4NCiXVzf58hOlLcjiw8nGrLsFQsUW0MSdwDTO
vvKEs3Sq5udCS4kNAOWa/KdEGz0miNMWvleZhKp/9czV+J3NUPDh+TbJ9kK5+90s
atDjeO/5U/NacBjOFfQ5n+9n7Gdgul/MStrAGI3G4n5pDLbsZ/pbljycBOSrKHLJ
24OC+3PeU2lvNXRpRoSc765FhjD8xi6M6yvdHI9QjyMZybmAgVxUwMiC5fNrJGI8
XzQ2uxkgKZKfoRGd/zXDzyKpaVDICAk=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:03 2026 by rpki-client