Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa
File:                     959c9920-c69e-389b-8a68-5c4dc7a13333.roa (raw, json)
Hash identifier:          B1YMAfSeUC6dWgmoOqLYFplJJ6QiYMvhqVN5Ecz+oWA=
Subject key identifier:   BA:82:A0:79:39:05:3C:E8:B2:FF:2E:77:1C:89:4E:BD:B8:B0:8D:C9
Certificate issuer:       /CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
Certificate serial:       010D0C9F4328584D343A1D15AD61D5D3A4DF5540
Authority key identifier: F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     12155
IP address blocks:        65.75.240.0/20 maxlen: 24
                          199.36.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1d:15:ad:61:d5:d3:a4:df:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=08737d2f-fc62-4765-b3cd-ced5164581bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:58:ef:b6:02:b0:c1:e4:2b:c4:72:a8:6a:
                    9e:51:52:c0:bb:c9:5e:65:8c:05:3e:d4:e6:09:39:
                    bd:6a:c1:7d:50:c4:1f:77:81:d7:8b:68:62:c0:c2:
                    9b:f8:b0:3a:78:51:bb:53:23:a2:05:7f:e5:31:87:
                    9a:6c:b5:59:27:ec:c2:3a:86:3f:20:f0:bf:f8:d7:
                    e3:ec:dd:04:74:21:2d:b2:5e:9c:c3:67:dc:0a:52:
                    22:8f:dd:80:96:ba:ef:98:6c:8a:19:c3:7a:a8:1f:
                    13:b4:04:08:2a:f4:f9:ec:54:44:32:59:b0:0f:81:
                    f3:91:8f:d7:47:fc:f9:2a:01:4e:f0:43:26:87:99:
                    bd:bc:07:60:a1:aa:c9:f1:08:e3:3b:54:b7:cd:1b:
                    1d:6c:e0:80:43:ca:b4:3a:9a:f6:f8:29:a9:b1:f4:
                    f8:f1:ea:f5:35:42:fb:98:57:4b:47:a7:f3:e0:6d:
                    5e:30:80:9a:26:5b:3d:a8:33:ce:ad:75:95:33:df:
                    5b:34:d2:9b:e3:08:07:54:d3:2d:ae:f3:a8:5a:4c:
                    d2:6c:43:fc:34:83:1b:5b:c2:06:b0:34:56:70:94:
                    9e:96:6d:98:5b:fe:96:ed:4f:4f:82:7c:53:f4:fc:
                    85:56:58:51:94:17:44:5e:5a:4b:dd:36:63:4f:e9:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:82:A0:79:39:05:3C:E8:B2:FF:2E:77:1C:89:4E:BD:B8:B0:8D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl

            X509v3 Authority Key Identifier:
                keyid:F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.240.0/20
                  199.36.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:be:ae:e0:d5:47:05:70:97:e6:18:b8:74:9a:f8:0e:fb:bc:
         9e:be:3b:77:1f:2c:4a:30:e7:a8:c0:f8:e1:a5:47:a4:91:68:
         5b:ac:57:38:39:8e:f1:33:c7:37:ad:4d:f7:18:b9:ab:1e:2f:
         3f:bb:84:bb:38:6f:f3:4b:3f:4f:f4:b2:e1:d9:78:2b:56:a8:
         cb:e9:68:1f:99:2a:b0:7a:81:ea:b2:72:cc:36:4e:96:3a:8d:
         73:61:08:86:7a:70:a9:f3:9e:03:cb:6e:13:7e:78:e4:22:c4:
         fa:6d:e1:0b:d3:ce:75:0c:8b:bc:70:05:86:f8:b2:9f:56:04:
         36:9a:24:36:99:bd:66:4f:99:47:bb:5b:b6:90:26:da:05:3d:
         ab:3e:62:f5:cd:00:8f:8d:3e:7f:b4:b0:91:8d:9c:a1:ad:79:
         c8:ce:14:18:e6:3a:1b:96:4b:4a:40:bd:58:ac:df:36:ad:94:
         d6:31:85:ad:7f:26:47:d8:d0:7a:74:61:15:3a:c6:a0:71:aa:
         d2:34:43:04:63:4d:e5:c4:f4:7a:6c:c1:3d:cb:c2:c2:d9:ce:
         72:d9:1e:e5:f0:0a:76:65:60:d6:8d:7b:73:d5:93:8a:c3:fa:
         db:45:8d:8b:2c:69:1f:43:15:04:11:b9:0f:36:77:ec:7e:91:
         0e:2f:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:14:00 2026 by rpki-client