Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/270317a4-64ad-3595-86df-538000f968e2.roa
File:                     270317a4-64ad-3595-86df-538000f968e2.roa (raw, json)
Hash identifier:          +mD+X+CPKvsR2H3vj6kcuKoHjOebvi+oiuUXr12Dh14=
Subject key identifier:   5C:47:49:4D:CD:CA:B4:84:74:08:07:37:88:22:C2:17:0F:29:3E:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB08C1F567DB04D437BA00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/270317a4-64ad-3595-86df-538000f968e2.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     7843
IP address blocks:        71.74.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:08:c1:f5:67:db:04:d4:37:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=51a76f8a-2627-45e4-8339-6bea4f0422d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:16:62:ab:4e:98:6f:71:1f:53:55:eb:d6:
                    4b:61:30:ad:50:de:4b:a4:c0:41:61:68:a8:f1:7e:
                    89:da:ce:d2:ea:ae:dc:7b:21:ab:75:b7:86:77:27:
                    77:2d:06:a1:63:89:06:7c:54:1c:41:fe:03:e3:eb:
                    1f:31:27:23:fe:ce:93:a8:a3:02:3c:3c:a0:a8:d3:
                    fd:5a:2c:fc:a1:55:51:7b:15:0b:bb:1e:83:d3:9a:
                    7c:27:8c:d4:27:06:64:0d:27:08:34:aa:99:15:c9:
                    4a:e8:f2:8d:cd:aa:cc:0c:1b:4e:11:06:55:98:9b:
                    0f:f2:7e:32:3b:13:89:1e:76:f6:8b:1c:13:f6:39:
                    64:a7:0c:9d:78:16:95:b0:82:7f:10:02:66:3f:72:
                    8e:ba:ed:d3:b5:80:0b:df:14:b6:27:72:4b:13:96:
                    12:68:2b:1c:f4:c4:dc:49:b3:41:45:09:7a:a1:c6:
                    39:af:3a:3f:27:47:d4:57:36:26:93:4c:3e:63:e3:
                    f1:87:4b:83:d8:77:83:8f:f9:39:21:16:a9:d1:05:
                    72:11:76:fd:4a:d6:ae:7d:1a:d2:0c:d7:59:90:1a:
                    a7:f8:a5:54:7e:30:c6:0e:05:a0:ea:1d:b2:95:cc:
                    a6:fa:96:0c:0f:3c:17:e2:b5:14:49:11:fb:26:db:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:47:49:4D:CD:CA:B4:84:74:08:07:37:88:22:C2:17:0F:29:3E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/270317a4-64ad-3595-86df-538000f968e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.74.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:0c:2b:9c:d5:50:38:54:c7:fa:1a:d3:a9:31:06:db:67:
         64:16:0e:83:d7:f4:38:80:96:ac:fd:ac:31:3f:65:c1:04:85:
         78:c9:72:79:3b:23:20:b2:b8:88:b5:61:1e:72:51:60:6b:68:
         f2:82:d4:ee:f3:8a:a3:bf:ef:af:fe:50:4f:ad:8c:ae:fe:c1:
         f6:e4:4d:f9:7d:16:99:17:42:0c:20:e4:dc:d3:a4:e8:f8:36:
         8a:df:ac:04:63:a6:37:ec:6b:bd:6d:75:99:72:f3:af:27:19:
         3a:63:78:42:3c:64:82:a4:5f:b3:df:57:ac:f6:63:ad:5a:ea:
         70:d1:be:90:70:43:9a:04:04:6e:65:80:5b:76:0a:fd:06:37:
         85:cf:ae:64:35:54:64:6b:95:32:d5:31:fe:28:e1:99:3a:bd:
         f7:74:a2:44:39:80:10:ed:48:24:39:51:49:10:44:2c:9b:cb:
         16:fd:56:e5:1d:4f:53:f2:a4:be:c8:da:bb:41:93:03:e2:f5:
         82:9c:e6:f4:24:46:c5:69:0d:5d:e4:d6:f0:7d:9e:df:17:fa:
         1b:69:9f:42:89:20:bb:bf:33:90:6b:66:86:03:48:d2:74:30:
         ca:22:fc:ed:21:48:8e:cd:c6:bb:c4:bd:d7:9c:32:b2:df:81:
         6b:24:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:06:25 2026 by rpki-client