Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d490a5d4-8cbb-3e24-90e5-4154c591f4ac.roa
File:                     d490a5d4-8cbb-3e24-90e5-4154c591f4ac.roa (raw, json)
Hash identifier:          ZR51sCa1c285RqMHJIqLAHmDWXOJVyNv9aehLzeSDK8=
Subject key identifier:   9D:C1:CF:A6:F9:05:F1:84:15:3C:D9:77:E2:D0:C5:12:22:2E:31:83
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E3AE44ED71129B642E1D8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d490a5d4-8cbb-3e24-90e5-4154c591f4ac.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        96.42.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:3a:e4:4e:d7:11:29:b6:42:e1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=c5cae093-097f-4a2b-989c-f93dc37a5bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:82:74:a7:7e:bf:7d:f5:06:91:60:49:9c:
                    a9:7a:24:dc:ee:1b:85:f4:6f:3a:85:c8:a0:82:ac:
                    68:34:17:98:f0:fd:e3:13:cb:4e:58:93:38:0e:ea:
                    c1:14:eb:01:ef:d3:ab:44:19:56:9a:02:15:ea:22:
                    f1:5c:72:8e:3e:c9:8b:56:cc:3b:18:a2:17:28:b4:
                    53:05:ef:49:3d:71:f9:ce:de:19:35:e2:3b:54:86:
                    55:5a:28:af:a7:60:c4:3d:59:58:12:60:80:78:a6:
                    d5:56:60:31:1a:04:d5:b7:89:6d:cd:b9:32:c4:de:
                    29:26:8c:04:ff:a5:8d:13:76:ba:a6:df:df:0f:7a:
                    2b:f6:78:79:90:92:ee:14:6e:22:da:0e:1b:a2:83:
                    8a:e2:8d:35:ff:c8:3e:5e:8e:2e:1a:d0:7c:a8:17:
                    6a:ae:1a:49:af:1d:f3:a6:e3:f5:ac:89:39:6f:62:
                    92:11:c7:cd:70:5b:0a:69:df:3c:45:1d:73:e2:37:
                    97:cc:15:b0:22:89:26:97:29:ee:66:d8:13:3f:6a:
                    77:e0:00:df:5b:b1:a6:52:79:8a:53:6e:13:7a:65:
                    3c:fa:cf:24:ce:a9:fb:f8:e4:28:22:a0:e2:fe:bc:
                    9a:88:2f:ea:00:ce:68:70:d7:3a:98:ca:77:f0:86:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:CF:A6:F9:05:F1:84:15:3C:D9:77:E2:D0:C5:12:22:2E:31:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d490a5d4-8cbb-3e24-90e5-4154c591f4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.42.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:43:fb:89:c0:c5:7a:e6:ce:e4:06:2c:4d:2f:4e:f2:da:5a:
         0f:ae:38:d4:24:15:7d:49:55:42:3f:5e:99:ae:c6:72:50:b1:
         9e:49:23:a3:1c:85:c9:40:2f:9c:23:0f:64:44:a0:84:54:53:
         10:7c:be:9e:92:3e:ce:7f:87:82:d4:26:98:41:27:1b:27:77:
         e6:04:fe:9b:e6:1c:4f:ad:f6:68:5f:25:54:a5:79:25:45:80:
         05:15:e7:00:01:ba:fd:42:a8:13:19:0f:2b:d6:bd:1f:0c:7a:
         61:6b:e6:4a:4e:0d:23:f1:0a:0d:eb:68:b3:34:e4:76:95:20:
         18:27:78:7a:b5:37:f4:03:f5:3d:10:65:b4:7d:8e:97:4c:01:
         65:07:48:7b:f2:46:2b:6d:fd:90:1c:95:1d:b2:69:9c:f9:44:
         45:db:24:0e:30:bb:01:f2:70:92:63:b2:a1:4d:0e:94:92:07:
         3e:d6:a0:1a:fb:08:88:27:62:fd:f5:35:1a:57:0d:91:f6:4d:
         bb:49:ad:1f:09:57:e6:10:14:72:1c:7a:25:b0:37:da:81:11:
         23:83:bc:ef:29:bb:28:9d:09:1f:5c:2d:45:75:95:79:6a:d0:
         87:15:62:39:62:9e:bf:96:89:f0:b0:60:2a:6a:e8:d3:32:33:
         f2:42:12:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXjrkTtcRKbZC4dgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
YzVjYWUwOTMtMDk3Zi00YTJiLTk4OWMtZjkzZGMzN2E1YmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinCCdKd+v331BpFgSZypeiTc7huF9G86hcig
gqxoNBeY8P3jE8tOWJM4DurBFOsB79OrRBlWmgIV6iLxXHKOPsmLVsw7GKIXKLRT
Be9JPXH5zt4ZNeI7VIZVWiivp2DEPVlYEmCAeKbVVmAxGgTVt4ltzbkyxN4pJowE
/6WNE3a6pt/fD3or9nh5kJLuFG4i2g4booOK4o01/8g+Xo4uGtB8qBdqrhpJrx3z
puP1rIk5b2KSEcfNcFsKad88RR1z4jeXzBWwIokmlynuZtgTP2p34ADfW7GmUnmK
U24TemU8+s8kzqn7+OQoIqDi/ryaiC/qAM5ocNc6mMp38IY1SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3Bz6b5BfGEFTzZd+LQxRIiLjGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDQ5MGE1ZDQtOGNiYi0z
ZTI0LTkwZTUtNDE1NGM1OTFmNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCrQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANBD+4nAxXrmzuQGLE0vTvLaWg+uONQkFX1JVUI/XpmuxnJQsZ5JI6Mc
hclAL5wjD2REoIRUUxB8vp6SPs5/h4LUJphBJxsnd+YE/pvmHE+t9mhfJVSleSVF
gAUV5wABuv1CqBMZDyvWvR8MemFr5kpODSPxCg3raLM05HaVIBgneHq1N/QD9T0Q
ZbR9jpdMAWUHSHvyRitt/ZAclR2yaZz5REXbJA4wuwHycJJjsqFNDpSSBz7WoBr7
CIgnYv31NRpXDZH2TbtJrR8JV+YQFHIceiWwN9qBESODvO8puyidCR9cLUV1lXlq
0IcVYjlinr+WifCwYCpq6NMyM/JCEiY=
-----END CERTIFICATE-----
Generated at Mon Oct 26 15:07:42 2026 by rpki-client