Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/43c057bb-75b3-349e-a802-2639770d97c7.roa
File:                     43c057bb-75b3-349e-a802-2639770d97c7.roa (raw, json)
Hash identifier:          +IcifOdE1e3U91qzcyF7CLlr7QUm6hhdpXO5JMEn9GI=
Subject key identifier:   4E:F2:BB:1B:D7:55:87:F7:5E:D9:74:04:D2:DA:61:9B:2C:5F:26:41
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB573A9C83458B15F1B600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/43c057bb-75b3-349e-a802-2639770d97c7.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.81.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:57:3a:9c:83:45:8b:15:f1:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=25ac2fbb-5146-430a-bbcc-6ded1cbfe3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:0a:ee:c3:82:d4:9c:47:7d:cc:cd:60:0a:
                    0d:59:16:c2:2b:78:39:ad:0a:0c:98:2e:30:52:0d:
                    8a:b4:3c:f1:55:35:d8:cd:e9:ae:2f:f9:08:67:29:
                    77:01:99:ac:52:8b:ae:68:2a:d9:58:ba:5a:c9:31:
                    66:53:18:0e:49:9b:20:8e:dc:57:aa:8f:e3:39:61:
                    77:e9:1d:07:bc:7a:80:bc:94:76:54:dd:5b:21:1f:
                    b3:93:1c:33:ea:48:c9:86:3f:5e:0c:cf:25:50:b6:
                    bc:f0:ca:f0:f0:fb:ca:c5:20:7c:c0:61:91:7b:54:
                    fc:6d:80:c1:2b:bb:ba:e9:fc:ae:4e:ee:65:e0:41:
                    0c:04:ff:27:c5:85:fe:cf:36:33:a4:0f:2b:9c:09:
                    ed:8e:e5:f5:2f:5a:17:9e:d2:1a:31:92:5e:43:5c:
                    2f:85:03:9d:3b:50:0d:43:dd:b6:cf:5f:31:4e:f1:
                    14:bf:9d:60:31:ba:1f:68:5d:7b:22:aa:f4:5b:89:
                    a1:5f:41:1e:0c:5a:ea:0b:be:f5:8b:49:2d:28:6e:
                    20:e9:a9:dd:0b:20:33:27:f0:b7:fb:d3:42:2a:b1:
                    d2:19:d7:ad:e6:c7:9e:1a:09:41:f8:ca:9c:c7:2c:
                    0b:3e:34:7a:6b:e3:e4:1a:de:72:ef:42:a1:22:9a:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F2:BB:1B:D7:55:87:F7:5E:D9:74:04:D2:DA:61:9B:2C:5F:26:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/43c057bb-75b3-349e-a802-2639770d97c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:95:51:2e:51:88:3b:97:2c:b8:04:94:3a:a6:51:98:26:f1:
         9f:bb:3f:91:75:3c:9a:c5:55:cd:2e:5c:e3:2a:4a:41:95:99:
         fb:a4:15:33:70:8e:2d:1c:f3:b5:c5:64:5d:18:1c:a5:73:be:
         b6:f9:9a:80:63:64:af:64:6f:0e:0d:0d:c4:71:e8:5f:55:32:
         8a:a6:cf:1d:6e:ab:05:7d:6c:df:cd:03:9f:62:92:f6:61:4e:
         e2:17:ae:00:cb:7a:01:fb:a1:8b:d8:bb:55:5e:b0:42:ed:eb:
         28:e2:91:6b:e4:4d:f5:08:39:23:0e:e4:43:74:52:5b:c7:63:
         40:db:0e:d7:11:54:5f:06:3d:01:1a:75:54:d5:3c:90:0f:71:
         de:ca:80:a9:99:78:d1:69:69:a2:d5:a9:62:6c:e8:d1:c4:3b:
         23:71:ad:8d:2a:31:8b:74:b5:fc:dc:99:99:ec:35:6c:34:bf:
         49:15:bb:91:1f:c4:86:30:98:29:c4:36:6b:34:0f:18:ee:23:
         c1:4a:de:b0:74:5c:82:06:5b:1b:ee:ed:f3:c5:77:a4:90:b2:
         c2:7e:cb:e4:d7:d8:c6:97:66:94:02:dc:97:07:2d:16:42:ce:
         ac:c2:71:5d:99:af:42:7b:e9:61:16:fc:79:a4:47:0b:3a:84:
         ba:91:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:41 2026 by rpki-client