Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4663688a-a663-3414-bc31-00621a1133d5.roa
File:                     4663688a-a663-3414-bc31-00621a1133d5.roa (raw, json)
Hash identifier:          NqHqa1uYc1M9wiQ5fikwaXCuUeeevTvrjJ6ugQLHQV4=
Subject key identifier:   DD:57:7A:EE:33:5C:A1:4B:C1:12:26:04:DC:CA:F6:EA:14:6D:47:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB81C2AFA9300681ACEF40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4663688a-a663-3414-bc31-00621a1133d5.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        75.128.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:81:c2:af:a9:30:06:81:ac:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=7f25e712-d916-4e38-bb70-633fd08c66c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:a9:c2:bf:7f:a3:30:33:ad:f6:e0:16:4e:
                    b6:90:57:a7:9d:43:3d:d5:80:0a:e2:74:00:46:5d:
                    ff:07:24:c8:68:62:34:52:45:af:59:1e:c9:a6:c2:
                    40:78:7f:bb:0b:15:7f:ae:a9:2a:fc:86:87:7b:8c:
                    13:88:bc:ff:91:1e:dc:f3:3d:de:fa:52:37:5e:b5:
                    c0:39:3e:6e:c4:c1:39:65:59:8e:61:83:e4:4a:f6:
                    94:b2:39:e9:82:ad:45:a3:98:cc:55:53:e5:99:38:
                    53:ea:d4:d2:db:dc:5d:0c:aa:fa:ab:58:7f:70:99:
                    2d:eb:d9:1f:68:37:a7:51:c8:d3:39:19:38:8a:c4:
                    e8:5d:40:fd:c5:37:5c:57:36:3e:54:49:33:05:b6:
                    3d:22:93:35:79:28:d1:f2:ec:e7:38:1c:91:60:4f:
                    14:1d:f2:c6:94:f8:32:97:c0:66:b0:15:94:b7:69:
                    ee:68:ed:d5:70:8f:bb:ba:4d:88:f5:c8:de:f3:cd:
                    84:35:ed:58:31:00:b3:e7:63:98:f4:a9:6d:c9:c5:
                    2a:b4:a9:99:9d:e9:98:2f:df:a0:98:67:ef:44:6b:
                    29:7d:3b:ad:c8:80:63:fb:5f:2d:e0:52:ec:65:a4:
                    b1:ac:b2:4e:c2:70:e1:3b:49:16:af:42:57:b7:c4:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:7A:EE:33:5C:A1:4B:C1:12:26:04:DC:CA:F6:EA:14:6D:47:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4663688a-a663-3414-bc31-00621a1133d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.128.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:bc:65:6c:ae:ec:24:4d:49:5c:f4:ac:dc:2a:34:0d:90:
         12:13:b6:e7:62:c7:8f:13:27:da:22:0b:df:8f:1b:b5:08:ad:
         54:d9:e3:a1:d6:39:63:7a:12:58:bf:aa:e2:c0:b3:09:86:29:
         28:93:0d:80:36:ce:3d:fd:87:76:c5:34:07:d6:af:3e:a5:46:
         fe:7b:08:08:54:7c:05:f3:06:5a:0e:b5:53:f4:e8:d4:e6:50:
         bf:55:14:0f:61:aa:e1:70:0f:0e:32:b0:f4:f8:68:2d:eb:92:
         df:3a:ef:bf:67:87:de:b3:f5:be:e5:51:38:b9:39:b5:77:0a:
         7a:ed:f3:8c:c4:c6:6a:a7:76:f3:ae:ab:71:ca:59:3e:40:e3:
         2a:41:5c:fe:49:72:6d:76:f6:8d:45:f3:91:36:b2:0d:75:8d:
         0a:6d:86:81:f6:af:a5:b3:1d:ce:57:c0:12:6a:72:e7:b1:d6:
         f4:46:05:12:3a:78:f7:d3:0e:09:9a:50:9c:c4:c4:4b:f4:8b:
         88:42:ef:a9:a8:39:42:10:05:d4:de:c8:c4:d5:33:a3:8d:51:
         78:c2:ec:c3:6a:2a:44:3c:ee:ca:71:d7:43:bf:21:22:65:5a:
         9b:51:a2:c1:85:15:49:31:f5:ba:98:7d:3f:9e:1e:82:2c:97:
         b5:7a:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:54 2026 by rpki-client