Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ed2f17e1-29f6-34f3-b7d0-d4114b8b7651.roa
File:                     ed2f17e1-29f6-34f3-b7d0-d4114b8b7651.roa (raw, json)
Hash identifier:          UD4gN8Pcq7c67G7mIQWP8ix9l5qpfkWnApws0MLMMRM=
Subject key identifier:   11:CC:23:84:3E:65:45:4C:A9:5A:84:69:B1:9E:5A:F5:B6:D8:32:65
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EABB6EE6E152ED6B24170DA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ed2f17e1-29f6-34f3-b7d0-d4114b8b7651.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     22677
IP address blocks:        71.86.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ee:6e:15:2e:d6:b2:41:70:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=3bc48210-ee16-4593-b328-da7728cb18ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:ee:94:c5:86:5c:89:3d:c1:61:b5:6b:39:
                    ee:58:24:66:a7:5b:c7:9a:40:c3:01:19:b3:b5:7c:
                    18:1f:61:a8:fa:33:5b:a3:ab:56:9c:e2:46:fe:d5:
                    db:75:d9:5b:c1:f3:2e:44:a8:ad:a4:48:63:3a:23:
                    13:df:ff:e3:c2:86:db:32:a6:94:55:36:f8:32:94:
                    f5:3e:5f:f3:7b:6c:9b:6a:42:5a:04:10:7d:73:b3:
                    84:d3:41:a4:2e:4a:5c:01:33:05:f8:58:16:a3:e4:
                    ef:86:73:12:3f:45:29:9c:4b:72:10:91:58:f9:68:
                    9b:22:12:2f:6e:2d:e9:f0:f8:0f:0a:d5:3d:82:f6:
                    2c:9b:80:dc:58:88:04:08:a5:6a:01:a7:04:2f:4d:
                    ca:e1:58:75:df:20:5a:5e:4a:1b:b5:97:ef:e4:f3:
                    70:f8:17:5d:4d:41:c8:36:70:61:e8:39:b5:be:4d:
                    0f:c6:b3:b3:1e:55:0d:46:2a:16:6f:35:ba:58:c1:
                    b3:c7:07:2b:e6:76:d3:9c:0e:57:1a:a5:35:a1:cb:
                    b9:ec:0a:fa:df:85:ee:c6:a8:13:f8:a5:21:5e:4f:
                    11:fc:10:1e:8e:f1:22:82:a8:16:db:3d:01:12:67:
                    61:8a:36:1d:92:2b:a1:aa:2d:98:e0:23:70:37:dc:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:23:84:3E:65:45:4C:A9:5A:84:69:B1:9E:5A:F5:B6:D8:32:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ed2f17e1-29f6-34f3-b7d0-d4114b8b7651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:b6:3d:c9:47:1f:0b:86:be:50:fd:c9:55:cc:01:10:88:
         67:23:36:0a:5e:ec:12:90:54:87:00:cd:24:07:fc:b8:21:b5:
         3b:f1:7c:c4:27:92:9c:fb:8b:a8:31:2a:5b:be:b3:db:40:0f:
         5a:6e:d0:e4:38:4b:9e:59:87:06:7c:d9:7b:4b:31:05:b9:21:
         30:ee:6a:ee:8f:d5:1a:f7:5d:42:00:b4:e8:8d:df:31:5d:4e:
         c1:25:4b:55:83:f4:59:49:9b:fa:43:1b:c7:75:43:89:f7:c4:
         64:39:4b:36:b2:8f:f2:8a:0b:8d:76:d6:71:5f:78:14:0e:e1:
         ae:8e:13:fa:4a:a3:5f:00:53:58:c9:84:2c:47:48:20:72:9c:
         73:46:63:08:0b:9f:c6:80:99:cb:6d:72:e8:30:47:45:8a:2f:
         e0:25:39:14:9c:d6:3f:d5:5b:93:79:bd:1f:21:2f:5b:aa:e0:
         65:2c:ea:46:bb:2c:13:20:d2:6a:2b:04:9a:b1:55:b6:f9:96:
         66:56:6e:0f:b9:6f:19:d9:1e:6e:76:ac:40:60:19:c7:f5:ba:
         66:ec:6b:98:13:d9:99:ef:8f:ca:1d:8d:98:17:7f:f6:b0:48:
         71:46:0a:87:47:25:73:a1:c3:fb:41:60:da:2f:78:cf:57:12:
         1c:b8:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:26:18 2026 by rpki-client