Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/169e0605-e20f-3d76-a43c-f8d8e3fb68ba.roa
File:                     169e0605-e20f-3d76-a43c-f8d8e3fb68ba.roa (raw, json)
Hash identifier:          SDZoL2znI8p4zXT9EJkNU1Iw54844kNP8Lv3+sxy8WY=
Subject key identifier:   08:F2:2B:63:EA:2E:38:97:DF:FD:C2:E4:8A:26:AB:63:70:81:A6:FA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F556383BA3C31A5AC5E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/169e0605-e20f-3d76-a43c-f8d8e3fb68ba.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     22677
IP address blocks:        75.133.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:55:63:83:ba:3c:31:a5:ac:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=a65bdbf4-8e07-4735-896d-92c209420443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:e5:a7:26:85:f9:c1:dc:e3:1d:11:e1:25:
                    62:19:2b:77:df:86:79:b9:49:7d:75:8e:89:5a:29:
                    c7:0c:eb:05:72:f9:57:16:ec:01:08:b5:8b:eb:80:
                    a2:f2:1e:bb:74:51:df:e9:c3:07:ff:79:1c:2c:cc:
                    72:52:8a:9c:57:ce:ea:42:7b:17:1d:1e:4b:5f:0a:
                    e4:0d:a1:f1:be:df:e6:60:01:55:9a:8e:70:2f:c0:
                    46:2e:91:af:6a:54:a0:fa:7f:22:b5:a8:e2:e4:94:
                    f3:b0:1e:76:53:67:87:70:cc:ff:b7:76:35:e5:81:
                    b3:fa:d7:d6:c7:56:d3:ec:38:f6:58:c9:89:03:c7:
                    69:30:c2:67:55:d7:60:4b:ab:79:1f:d9:9c:53:a4:
                    94:80:2c:9a:db:1d:07:07:eb:dc:44:ce:34:7e:4f:
                    21:c5:d1:06:a0:5e:02:a3:49:ed:63:77:be:37:e4:
                    b8:4b:9f:c0:e3:88:59:a4:75:15:c4:bf:95:eb:84:
                    1a:30:11:38:3d:08:0e:ca:87:21:a6:04:6b:b6:14:
                    0c:25:46:e0:56:e3:a2:ab:ad:72:42:db:80:a2:ef:
                    c5:ba:de:c1:c3:4f:8c:48:29:53:d6:8f:1a:0d:26:
                    c1:7a:f5:c5:b5:01:33:66:1c:45:65:d6:9b:e9:2c:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:2B:63:EA:2E:38:97:DF:FD:C2:E4:8A:26:AB:63:70:81:A6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/169e0605-e20f-3d76-a43c-f8d8e3fb68ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.133.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:52:08:9a:0b:2f:a9:29:ba:f2:f8:e1:bc:70:a9:94:4b:
         30:3f:ca:41:1b:74:29:d2:8a:f1:b7:1b:27:38:64:ae:0a:6b:
         fe:8e:de:59:84:30:30:ed:8c:6e:65:e4:c4:41:c1:72:65:01:
         d7:a5:bd:e2:1a:f6:da:3d:ce:5c:af:92:2e:fb:cc:10:1b:3b:
         2a:52:a8:84:40:c8:e1:a5:d8:9a:27:f5:5b:21:9b:6a:87:8e:
         42:a5:50:91:c3:4b:e9:48:00:f1:9f:fa:97:98:cd:c8:35:dc:
         ca:de:95:ec:00:2f:05:3f:49:df:f4:c7:2f:d7:fc:7d:ed:03:
         e7:e1:c6:4d:84:fc:8c:07:2b:f0:03:71:6f:7e:37:8b:36:f8:
         09:91:9c:52:55:98:64:99:77:d2:c4:58:bf:4e:97:35:20:d3:
         77:3c:20:47:a4:29:35:01:32:52:f0:c2:0c:e8:b8:76:24:ec:
         6c:d1:34:f5:32:c3:ab:4c:49:43:a8:36:db:4c:6a:82:93:fd:
         25:4b:c2:66:35:d1:89:1e:a5:46:d7:4f:d9:34:55:d3:46:d9:
         7b:c4:b8:0b:50:08:20:c0:37:d1:fa:30:5a:f6:ba:4c:de:25:
         9f:f7:00:6c:e7:6b:ea:d2:6e:e4:f7:b1:3e:0d:66:27:6c:1c:
         bf:62:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:52 2026 by rpki-client