Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa
File:                     11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa (raw, json)
Hash identifier:          R68kllT1Csj1vglwED0ir/AX9CtsJkEekgzBWT8WLQ4=
Subject key identifier:   FD:20:29:31:47:37:91:5A:95:5A:96:94:AA:1B:CD:D7:CC:8E:07:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB4FA104F04387AE434680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.8.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:4f:a1:04:f0:43:87:ae:43:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=51a01a40-0bad-43e8-b0c4-ca7bc4d4b13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:f3:c3:29:98:58:52:71:a8:4e:9e:4b:c6:
                    63:07:48:2e:0f:c0:53:7f:fc:cf:17:92:74:43:67:
                    2b:37:7c:7d:99:5c:33:b2:da:2e:f7:71:1d:c0:75:
                    ae:5c:ac:a3:2b:79:9f:9e:a4:a4:55:1d:99:0b:ce:
                    ef:e8:26:f3:24:83:21:c4:0e:21:57:98:11:01:6c:
                    bd:a0:42:b0:fe:89:41:06:ee:4f:83:87:4d:5f:62:
                    6d:c3:99:85:82:3a:5f:e4:99:b2:d9:da:87:4c:f8:
                    71:e3:0f:d6:a9:a3:dc:2e:ec:7c:37:19:93:14:0a:
                    ec:12:d5:99:da:bb:14:8b:3d:ae:32:ee:70:e8:eb:
                    99:db:23:f7:88:61:c0:3b:a8:7d:f6:eb:5c:4d:2e:
                    6b:35:11:a5:2b:7d:21:02:cd:5b:47:6b:44:da:eb:
                    59:e9:43:23:0b:a6:ef:6b:bb:eb:20:cb:52:98:d7:
                    98:04:10:03:cf:19:79:6a:f0:99:d0:6d:95:d9:9a:
                    6a:27:75:ba:f8:4f:cd:0d:cd:59:2e:c9:29:3c:b6:
                    dd:1e:e5:53:f2:5d:f1:8b:e1:83:65:76:04:78:20:
                    5b:82:97:b4:34:81:f8:d8:f0:f7:56:6d:7d:8b:ba:
                    09:c9:a6:ba:c4:f7:ed:98:50:a7:01:0b:94:44:70:
                    68:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:20:29:31:47:37:91:5A:95:5A:96:94:AA:1B:CD:D7:CC:8E:07:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/11729fca-8fe7-346f-86fc-0cb8e5c2e3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:a0:9e:a8:ad:cd:46:0c:06:62:52:41:e2:61:d7:34:0a:
         13:76:bd:e5:66:b9:d3:59:f8:2d:81:bb:87:3c:3a:1e:2a:d0:
         eb:a7:f3:3b:b8:9f:3a:66:df:f5:1f:f4:61:ed:08:97:3a:42:
         2d:73:bf:76:fa:a6:43:66:0d:66:d6:1d:00:8e:1d:e7:8a:c5:
         ae:ff:95:8a:b3:cc:83:86:83:2b:76:b4:ed:db:a4:98:43:cb:
         65:ac:9e:a2:db:a4:71:8e:33:7f:c5:ff:b8:0b:00:2c:f3:d9:
         a0:1c:9b:54:cd:d9:f4:b1:55:3f:ed:84:93:67:2e:7c:3e:d3:
         7c:f0:06:3c:dc:0c:42:e9:fc:f8:50:82:78:d5:a6:3d:66:b0:
         69:5d:4e:ba:72:e9:23:47:db:4b:99:c0:51:cd:d8:12:16:3c:
         28:69:b5:09:3e:57:04:74:24:2c:e0:5f:fa:8c:88:0c:96:64:
         47:0a:69:0c:8f:f4:9b:ee:df:01:42:cd:94:8c:04:b3:93:b6:
         4c:84:a9:b4:4c:87:10:b7:4a:48:47:45:5e:0e:a1:4b:31:4a:
         4a:9b:28:72:75:21:7a:58:3c:4f:05:fd:bc:31:66:dc:9c:23:
         5f:43:78:e5:7c:05:c7:44:07:96:8f:61:25:e5:fa:a9:ad:12:
         ff:7b:4b:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay0+hBPBDh65DRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
NTFhMDFhNDAtMGJhZC00M2U4LWIwYzQtY2E3YmM0ZDRiMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLLzwymYWFJxqE6eS8ZjB0guD8BTf/zPF5J0
Q2crN3x9mVwzstou93EdwHWuXKyjK3mfnqSkVR2ZC87v6CbzJIMhxA4hV5gRAWy9
oEKw/olBBu5Pg4dNX2Jtw5mFgjpf5Jmy2dqHTPhx4w/WqaPcLux8NxmTFArsEtWZ
2rsUiz2uMu5w6OuZ2yP3iGHAO6h99utcTS5rNRGlK30hAs1bR2tE2utZ6UMjC6bv
a7vrIMtSmNeYBBADzxl5avCZ0G2V2ZpqJ3W6+E/NDc1ZLskpPLbdHuVT8l3xi+GD
ZXYEeCBbgpe0NIH42PD3Vm19i7oJyaa6xPftmFCnAQuURHBo/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0gKTFHN5FalVqWlKobzdfMjgdwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTE3MjlmY2EtOGZlNy0z
NDZmLTg2ZmMtMGNiOGU1YzJlM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwgQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsAoJ6orc1GDAZiUkHiYdc0ChN2veVmudNZ+C2Bu4c8Oh4q0Oun8zu4
nzpm3/Uf9GHtCJc6Qi1zv3b6pkNmDWbWHQCOHeeKxa7/lYqzzIOGgyt2tO3bpJhD
y2WsnqLbpHGOM3/F/7gLACzz2aAcm1TN2fSxVT/thJNnLnw+03zwBjzcDELp/PhQ
gnjVpj1msGldTrpy6SNH20uZwFHN2BIWPChptQk+VwR0JCzgX/qMiAyWZEcKaQyP
9Jvu3wFCzZSMBLOTtkyEqbRMhxC3SkhHRV4OoUsxSkqbKHJ1IXpYPE8F/bwxZtyc
I19DeOV8BcdEB5aPYSXl+qmtEv97S7A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:46 2026 by rpki-client