Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e9ea7da9-55cf-336c-abc3-6047c520b262.roa
File:                     e9ea7da9-55cf-336c-abc3-6047c520b262.roa (raw, json)
Hash identifier:          7gO9UkFRMium87JiZ9rbS1N5xJ9VRKY2tzVp0Bqir04=
Subject key identifier:   F4:51:C3:6B:81:7F:31:A2:67:FB:A3:F6:89:8A:29:9D:6C:D9:27:7E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D1707EF9F191BCEAFBF246180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e9ea7da9-55cf-336c-abc3-6047c520b262.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     33588
IP address blocks:        71.85.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ef:9f:19:1b:ce:af:bf:24:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=977d3393-c944-417e-97b2-babad7b10ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:56:b2:d4:8b:b8:ca:59:d2:0d:b6:a8:79:
                    c3:81:2d:75:bc:4b:79:ef:a5:79:5a:76:27:d9:88:
                    a4:db:1f:1d:49:e5:48:60:e2:be:b4:81:b3:fa:50:
                    bb:59:fd:ea:21:5f:66:d3:8b:1f:59:eb:42:81:fd:
                    fe:c1:84:f2:9a:d0:a6:82:ca:2b:e9:4d:c9:3f:c6:
                    8e:66:3f:5c:ed:05:e0:b6:a5:b4:36:a2:53:48:51:
                    80:c7:52:18:48:90:7b:5c:c3:f1:69:c7:00:ee:f6:
                    bf:47:e4:b8:db:4b:27:ba:c7:c7:18:fa:e8:a0:a1:
                    9d:31:83:3e:03:1e:3e:89:d2:0d:6f:08:ff:2e:8b:
                    dc:87:c1:fe:c3:74:ba:d4:76:c1:92:63:b0:2a:d6:
                    b2:a7:a4:72:41:ba:3e:60:37:b2:ea:00:7c:de:bd:
                    13:2d:07:d8:ee:ca:fc:82:7b:d2:01:95:31:5d:ea:
                    72:9c:af:48:3a:3f:79:7a:f7:f3:a1:26:32:48:73:
                    6f:85:9d:24:b5:91:75:f0:fb:ac:c0:2e:20:73:fc:
                    c0:96:fd:f2:0f:e6:71:d2:78:76:f2:76:04:95:54:
                    31:62:e8:a8:b7:23:b8:fa:9c:c5:c7:ad:46:da:04:
                    ac:f1:70:76:2c:c2:be:28:03:a1:18:80:6d:18:69:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:51:C3:6B:81:7F:31:A2:67:FB:A3:F6:89:8A:29:9D:6C:D9:27:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e9ea7da9-55cf-336c-abc3-6047c520b262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.85.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:95:e6:ab:c5:98:e5:2c:d2:df:30:61:b8:28:ae:8e:8c:91:
         79:94:7c:27:29:60:55:12:97:95:1c:be:00:dd:2d:41:7e:18:
         d1:33:47:ed:b6:aa:5e:55:ee:c7:56:90:0f:32:6d:2a:36:bf:
         6c:35:f4:9f:8c:c4:b1:74:98:9f:9a:25:05:36:1a:0f:cb:17:
         ab:bf:83:0d:ea:49:d9:ac:80:e0:76:94:45:0c:45:c7:ec:fd:
         19:32:21:f9:ba:fa:82:f2:73:41:fa:d4:4a:34:59:b0:7f:41:
         f4:c6:47:69:ac:09:29:71:87:df:09:46:d5:42:db:f2:c4:5f:
         1c:23:8f:57:7f:1d:d5:df:8e:f2:99:17:b1:ec:4f:2d:1b:1b:
         f1:41:a7:3e:03:6d:71:eb:3d:82:f5:11:35:70:69:57:cf:e0:
         56:75:7d:b8:44:a8:75:c0:a5:03:98:68:59:ea:90:90:bc:9e:
         68:87:40:0c:de:4b:76:0e:ca:b9:63:1b:f1:fe:05:23:74:f0:
         5e:06:21:0e:a6:84:9f:da:e7:75:22:0f:dc:d3:ac:f0:50:66:
         43:b9:29:3e:65:7b:23:32:00:4c:85:73:4b:89:06:8d:36:4a:
         26:bb:2d:1c:37:20:ff:f8:52:56:e0:49:a2:f0:83:d9:1a:09:
         65:4f:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 22:44:49 2026 by rpki-client