Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4276890a-41ca-32c7-a0df-6d169d6f4194.roa
File:                     4276890a-41ca-32c7-a0df-6d169d6f4194.roa (raw, json)
Hash identifier:          bWmYSLyupanUrosIjLraCQ+6YQ/ptlHaFIz53HzQQ/U=
Subject key identifier:   FD:93:53:DF:2F:BD:FB:90:64:83:C1:6C:B9:C2:B2:0B:8F:4C:7B:20
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CADC8EB3819BB4BD100980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4276890a-41ca-32c7-a0df-6d169d6f4194.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.10.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:dc:8e:b3:81:9b:b4:bd:10:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=cf975e82-9b50-4fec-8e16-cb1c9fe2cf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0d:ce:e9:df:6e:10:79:58:be:20:75:3c:de:
                    07:4b:4b:da:88:29:b3:98:e5:52:50:4c:de:50:8a:
                    70:f8:44:a8:9c:f1:01:3e:cf:86:7d:7f:4a:2a:b6:
                    5c:e3:0b:45:91:8b:e2:ee:67:c9:6d:a3:a3:f9:78:
                    e3:9f:d3:61:d6:3e:77:04:74:b8:83:dd:d3:87:40:
                    03:c8:e7:f6:b2:a2:15:f1:aa:64:9f:bc:c7:e1:35:
                    89:00:e7:da:88:5c:f7:f9:fa:7b:2a:ce:69:84:52:
                    31:a2:bc:bf:70:f6:66:4e:99:be:27:3c:e2:0d:a9:
                    9a:82:5f:69:5e:8c:9c:cd:90:ef:fc:bf:63:bf:ea:
                    07:a8:fd:fd:56:30:e1:f6:fa:a5:c9:36:44:5c:c0:
                    ab:ea:b8:74:1c:ab:dc:dd:84:5d:15:63:20:25:93:
                    73:ca:b7:ae:30:cf:1a:e5:9d:26:07:e2:4c:7a:69:
                    a8:c1:69:2d:52:05:77:40:51:05:94:54:8b:bc:3e:
                    2f:39:2c:32:05:ba:64:a3:7d:8c:57:66:f5:cc:bf:
                    92:bd:6a:12:2b:a9:ba:8b:7b:5b:0d:e1:86:cd:d6:
                    51:ac:6b:e8:e7:46:4e:f8:e7:a3:02:90:c0:a9:17:
                    64:e2:64:f0:a8:04:67:92:9d:98:74:30:f3:51:b7:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:93:53:DF:2F:BD:FB:90:64:83:C1:6C:B9:C2:B2:0B:8F:4C:7B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4276890a-41ca-32c7-a0df-6d169d6f4194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.10.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:d8:b2:9a:7e:8e:ce:55:b2:63:94:4a:07:ed:41:42:8f:6e:
         25:4e:14:4e:f0:ab:b2:39:d1:92:bd:ca:51:78:da:f3:be:0b:
         b6:ab:03:ad:d5:20:cf:c3:a4:69:3c:b0:8e:b7:33:72:bd:a5:
         7b:ba:e9:8b:7d:c2:98:8b:a2:54:c2:60:8d:95:cd:11:b3:fb:
         df:64:1f:23:d7:87:bf:96:d1:3f:a5:55:bd:e9:22:79:f1:4c:
         de:24:71:0d:9d:94:a7:2f:13:87:c7:17:e8:ed:e8:29:6e:89:
         a6:56:81:78:09:a6:6d:3b:dd:d9:2b:49:5d:c4:b2:37:88:2c:
         be:9e:b5:12:8e:84:8c:5e:ec:eb:82:d9:83:a5:56:5c:19:f0:
         21:4d:8d:4a:52:42:45:a7:3a:4b:d4:13:ff:9b:ed:54:35:b2:
         2a:fe:16:f9:d4:5d:1f:fc:8b:4c:30:03:0b:d1:6e:9e:a3:73:
         27:ee:9b:35:bb:58:21:d5:ae:7f:42:95:3c:de:df:39:84:80:
         93:93:32:c6:31:d0:7d:33:36:62:7b:57:4b:89:ff:c1:96:a1:
         ce:4b:9e:87:f3:e7:7a:c5:bf:28:06:ea:a5:3a:65:d9:93:cf:
         bc:ac:3e:8e:2b:36:35:1e:48:a1:2d:06:39:ad:05:6c:b4:c6:
         aa:f1:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:00 2026 by rpki-client