Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec626b46-ab5a-3fbb-8d92-8110fa3d09f9.roa
File:                     ec626b46-ab5a-3fbb-8d92-8110fa3d09f9.roa (raw, json)
Hash identifier:          frnFhfDS2bFSLcwqlFMoNnXWs7zWLsCQHnnRDs4TLC0=
Subject key identifier:   68:DA:E6:DB:84:82:08:75:68:45:47:98:37:47:A2:9D:9B:3A:22:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3726F21246365B61F0ACC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec626b46-ab5a-3fbb-8d92-8110fa3d09f9.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     13343
IP address blocks:        159.111.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:6f:21:24:63:65:b6:1f:0a:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=f4bf5e94-0167-498b-a9e6-cd37f0c4fd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:28:cd:d4:86:60:e6:2d:76:46:31:a2:cb:
                    1c:c2:68:26:1b:5d:f4:a7:8f:3f:67:05:33:7b:b0:
                    e1:30:f0:5f:7f:48:02:0f:bc:e3:3d:5b:e8:67:78:
                    ef:24:2d:eb:1e:93:91:b1:09:37:fb:68:53:d9:a9:
                    0f:42:bc:72:94:b4:0c:58:15:04:a6:75:ec:41:94:
                    82:51:5e:b4:bf:80:98:c7:2a:02:80:58:3e:86:ba:
                    5d:f6:4e:28:c9:11:24:10:e8:7b:d5:d6:6b:37:c3:
                    2a:6d:8c:30:6f:d2:73:9f:c2:0d:3b:28:37:ba:25:
                    24:21:a5:f6:36:4f:3a:d9:31:5c:70:74:4f:23:4a:
                    bc:28:d8:d6:e1:ce:52:94:b4:34:b4:c3:bd:81:f1:
                    e2:0d:77:53:8e:5e:86:ee:1f:a5:9a:c8:f9:59:c0:
                    ec:23:2b:52:2a:08:46:8d:98:b4:2f:3d:cd:f9:31:
                    70:2a:69:66:34:40:97:d6:60:d1:e4:58:28:5f:d3:
                    f0:7a:9f:1d:59:c1:89:d1:e9:43:d3:62:26:a0:a9:
                    0b:a6:ae:65:bb:d1:86:ad:e5:51:08:ae:0c:de:ff:
                    d1:34:4c:27:0d:7f:c1:f4:3e:f2:cd:99:b1:69:3f:
                    68:7e:79:81:76:89:dd:27:05:2f:53:8e:7a:ea:5a:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:E6:DB:84:82:08:75:68:45:47:98:37:47:A2:9D:9B:3A:22:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec626b46-ab5a-3fbb-8d92-8110fa3d09f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:bc:47:81:a0:ec:bc:21:15:fd:c5:e1:cf:c4:86:08:c0:
         c9:22:2d:56:36:50:6e:06:9e:a4:c5:0f:82:83:98:5b:e0:60:
         13:99:63:73:b5:94:83:55:53:47:8d:81:43:53:d5:7e:a3:2c:
         79:2c:4b:b8:1f:1b:ff:77:b3:98:aa:63:ce:b9:b5:0d:89:37:
         e9:01:8c:12:48:cb:77:2b:88:70:85:b5:38:2e:f3:10:e2:56:
         5c:f3:a7:29:f8:f5:cd:56:e8:c9:25:5f:7f:08:b0:2f:fa:21:
         bc:38:93:3f:75:c1:31:c6:70:de:5d:d4:ba:cb:0c:56:04:44:
         c8:0d:bf:eb:8f:14:67:20:89:a9:5c:fd:dd:ed:8b:12:29:ee:
         e5:d8:e3:da:e3:71:fb:d9:6f:43:3f:d1:d4:25:43:32:df:b7:
         11:8e:8b:80:30:b9:e5:a6:b1:2c:3a:b0:da:e6:25:86:55:80:
         9e:d6:33:87:8e:96:1d:87:9f:b9:a8:22:f3:f7:cd:15:86:43:
         72:e0:10:42:ac:2a:42:90:ef:62:46:13:59:f4:bf:40:46:7f:
         d0:ad:89:86:0f:8d:21:a7:4a:5c:5a:82:e4:f5:ba:db:61:61:
         fb:24:a2:e4:97:a8:db:e3:4a:66:e2:7f:73:ba:29:9f:39:86:
         a7:74:29:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcm8hJGNlth8KzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ZjRiZjVlOTQtMDE2Ny00OThiLWE5ZTYtY2QzN2YwYzRmZDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL0ozdSGYOYtdkYxosscwmgmG130p48/ZwUz
e7DhMPBff0gCD7zjPVvoZ3jvJC3rHpORsQk3+2hT2akPQrxylLQMWBUEpnXsQZSC
UV60v4CYxyoCgFg+hrpd9k4oyREkEOh71dZrN8MqbYwwb9Jzn8INOyg3uiUkIaX2
Nk862TFccHRPI0q8KNjW4c5SlLQ0tMO9gfHiDXdTjl6G7h+lmsj5WcDsIytSKghG
jZi0Lz3N+TFwKmlmNECX1mDR5FgoX9Pwep8dWcGJ0elD02ImoKkLpq5lu9GGreVR
CK4M3v/RNEwnDX/B9D7yzZmxaT9ofnmBdondJwUvU4566lrBlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGja5tuEggh1aEVHmDdHop2bOiKYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWM2MjZiNDYtYWI1YS0z
ZmJiLThkOTItODExMGZhM2QwOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn28gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3FvEeBoOy8IRX9xeHPxIYIwMkiLVY2UG4GnqTFD4KDmFvgYBOZY3O1
lINVU0eNgUNT1X6jLHksS7gfG/93s5iqY865tQ2JN+kBjBJIy3criHCFtTgu8xDi
Vlzzpyn49c1W6MklX38IsC/6Ibw4kz91wTHGcN5d1LrLDFYERMgNv+uPFGcgialc
/d3tixIp7uXY49rjcfvZb0M/0dQlQzLftxGOi4AwueWmsSw6sNrmJYZVgJ7WM4eO
lh2Hn7moIvP3zRWGQ3LgEEKsKkKQ72JGE1n0v0BGf9CtiYYPjSGnSlxaguT1utth
YfskouSXqNvjSmbif3O6KZ85hqd0KSQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:55:25 2026 by rpki-client