Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb31b4b2-2ea1-35d0-af83-393dc9a51878.roa
File:                     eb31b4b2-2ea1-35d0-af83-393dc9a51878.roa (raw, json)
Hash identifier:          hpImXapkvh+hmBFyN5Nk1l2bwiDqKxUYsfFATspGEMM=
Subject key identifier:   20:F7:C9:ED:17:0E:2A:C4:2A:15:32:9B:E8:07:9B:94:0B:8F:FE:D2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F59089B3B204944B636140440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb31b4b2-2ea1-35d0-af83-393dc9a51878.roa
Signing time:             Wed 30 Sep 2026 14:59:44 +0000
ROA not before:           Wed 30 Sep 2026 14:59:44 +0000
ROA not after:            Tue 29 Dec 2026 15:59:44 +0000
asID:                     11427
IP address blocks:        71.82.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:08:9b:3b:20:49:44:b6:36:14:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 30 14:59:44 2026 GMT
            Not After : Dec 29 15:59:44 2026 GMT
        Subject: CN=69767516-20ff-4041-adb4-3e44b2cbbc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:77:0c:93:a7:3d:34:ed:14:f8:b3:22:f1:
                    69:ac:0c:8a:2e:0c:05:e2:3d:6e:89:62:70:86:59:
                    b5:bd:9d:5c:6e:43:b5:af:56:c2:7c:cb:e7:8f:29:
                    79:b8:a5:47:ed:9a:2a:67:8a:54:5d:dd:66:90:17:
                    c1:12:65:8f:4d:dd:eb:ce:bd:1e:bd:3b:00:a2:37:
                    b2:d7:5e:8d:fe:36:55:9c:83:04:f1:a0:a4:a0:e8:
                    6b:ef:e3:d2:a4:c2:46:f9:b2:50:ce:5d:27:dd:4a:
                    0f:8f:e8:c8:49:9a:4d:02:cc:ac:7e:c9:56:6f:84:
                    48:41:90:10:88:72:c4:41:17:6f:50:f7:7a:e0:d8:
                    95:a0:17:2f:e0:9a:a3:43:d2:57:30:6f:6c:16:69:
                    b4:82:24:27:87:42:5b:e5:88:9b:4f:28:40:54:84:
                    16:67:6e:0a:44:05:75:df:5d:57:18:5e:27:58:41:
                    ae:a5:af:ef:76:23:34:c7:ca:68:d4:d5:bd:0d:a4:
                    b5:67:c8:f3:fa:20:6e:28:37:22:79:e5:ef:e2:a4:
                    c7:28:95:69:28:e1:16:83:8d:49:2d:94:6f:b2:c7:
                    b2:5f:37:2d:ac:5b:22:f6:77:3a:04:94:66:8e:5d:
                    a8:9b:35:f1:7c:d8:34:01:31:59:ae:c2:a3:57:7f:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F7:C9:ED:17:0E:2A:C4:2A:15:32:9B:E8:07:9B:94:0B:8F:FE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb31b4b2-2ea1-35d0-af83-393dc9a51878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.82.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:69:fb:8f:61:11:5c:1d:f5:ee:4f:4e:28:e6:f3:d8:87:
         b7:27:3e:0a:25:f3:2f:75:2e:8f:c2:1f:81:f6:83:d1:f8:93:
         cd:4b:a2:90:a5:3b:f8:4a:84:c7:b6:a1:bd:f8:b9:65:e3:e6:
         99:ec:75:d5:93:7f:76:92:f1:d5:c0:37:6d:af:ae:e3:11:75:
         4f:02:62:55:3f:80:76:cb:23:22:c7:0d:ed:b5:a9:fa:58:29:
         c9:8d:2a:36:3c:52:9e:42:0b:b0:74:e1:6d:d8:87:c2:82:6c:
         4b:26:ab:c8:c5:e3:ba:ae:1b:69:0b:95:d1:cf:c5:fb:76:44:
         c9:20:14:30:79:b2:3f:e8:ce:89:ac:66:ce:eb:3d:5d:56:cc:
         93:5a:48:bd:20:28:50:09:67:c0:23:0e:65:6d:c4:11:53:65:
         12:05:75:1a:3f:85:73:c6:9b:18:3d:e4:62:b4:7d:01:28:6e:
         27:6b:ee:b5:72:2c:d4:9a:39:8b:43:a9:a6:9d:ef:77:57:e7:
         58:25:39:d0:d4:6b:7d:96:26:2a:19:a5:bc:e8:0e:ac:fd:fa:
         7f:82:4e:99:10:ac:5f:ff:cc:38:c8:49:f2:5a:b8:2b:1a:f7:
         b8:ad:2d:2d:a1:34:95:3a:52:d1:d3:8b:13:5d:13:a9:bf:b1:
         d1:51:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:30:34 2026 by rpki-client