Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4975f829-ba43-34b0-82fc-d09c50b65f3e.roa
File:                     4975f829-ba43-34b0-82fc-d09c50b65f3e.roa (raw, json)
Hash identifier:          LaDecrQZvpL9qAn/CMP2ukWP7Apjh9sXNM+CQfhHxd4=
Subject key identifier:   EF:EA:7D:9A:0E:1C:9D:11:09:00:6F:FB:D3:99:13:B4:F1:F0:19:D6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584DBA3AF79E325F7EA1819FA300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4975f829-ba43-34b0-82fc-d09c50b65f3e.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        138.229.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f7:9e:32:5f:7e:a1:81:9f:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=2266dc40-752b-425f-b8b4-8029029b2943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:74:c5:c3:5b:dc:91:e6:48:31:3c:57:fb:
                    7d:bc:42:b7:e1:c9:34:b4:3c:27:4a:66:6e:8e:51:
                    e4:6f:9b:7f:84:af:51:22:f9:91:70:62:21:fd:ab:
                    fe:9f:9d:42:32:bd:bf:47:94:04:e4:77:8a:6a:db:
                    6b:97:21:a8:1a:48:a0:ed:02:51:9f:2d:4c:80:1c:
                    91:c7:8a:c0:da:b5:3a:c5:87:a8:7d:73:12:a2:c4:
                    60:c4:14:11:54:d8:ae:f8:0c:8a:8a:99:48:5f:4b:
                    bc:55:fa:18:a3:c4:57:69:2b:bf:81:20:de:f1:20:
                    c8:11:e2:1d:1d:a5:32:b7:97:6d:48:78:a0:96:ff:
                    74:1a:a9:2d:33:1a:2e:92:74:f6:71:9f:86:ea:f0:
                    e5:3b:81:e1:0e:3e:1f:dd:02:d0:88:0f:f6:cd:fe:
                    80:26:80:03:5c:63:bb:69:e1:b4:37:6e:a1:ab:19:
                    a2:63:19:c2:32:fe:d3:44:db:8d:8d:84:47:d3:c5:
                    c8:55:6f:f6:e8:28:a4:0a:06:c4:09:9d:41:f2:df:
                    3a:2c:ea:28:22:ea:8d:f9:10:13:8e:7d:4a:07:ed:
                    21:3b:3e:39:d3:16:63:b2:c3:03:2f:63:f0:8f:a2:
                    08:2f:79:b0:59:4c:83:46:cc:cc:7f:eb:e5:95:78:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:7D:9A:0E:1C:9D:11:09:00:6F:FB:D3:99:13:B4:F1:F0:19:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4975f829-ba43-34b0-82fc-d09c50b65f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3c:6f:27:0a:4d:00:34:62:26:ad:c5:0c:62:3b:2a:03:6b:
         1f:ca:05:a3:fd:80:ec:46:64:94:53:23:bb:a0:9e:a0:08:f4:
         ad:23:e7:e3:05:11:01:0a:0d:d2:b2:30:96:32:ed:70:9d:f6:
         80:e8:4a:c0:8f:47:78:79:19:78:eb:31:ed:89:c6:5a:56:77:
         18:0d:e8:2c:ad:4b:5b:47:b6:7c:04:7e:88:16:bd:b8:6a:7c:
         ff:19:93:e9:42:39:35:ec:c8:b7:b2:0b:a2:0b:b1:9e:fd:b6:
         a4:d0:a2:06:20:12:11:a9:a7:8b:53:63:6c:6f:d5:b0:8b:ee:
         8e:54:9b:18:8e:3c:48:be:60:ef:2b:33:74:82:0e:6b:86:ea:
         54:ce:4f:9e:62:e1:96:53:79:02:b6:96:85:ba:35:29:ad:62:
         99:d1:19:6d:cf:54:81:96:ce:e1:af:bf:b0:a8:3f:22:b8:a3:
         f8:be:33:71:96:3b:fe:6d:5d:41:fe:af:0a:91:92:d8:70:a5:
         1c:6f:12:3b:b4:ba:42:14:c8:c6:ef:93:ee:ca:20:22:4a:47:
         1b:71:b6:9f:98:4f:b8:04:f0:aa:ad:20:f0:ea:8f:b6:1d:9b:
         97:30:5c:cb:0e:7a:77:d0:35:04:9b:7b:1b:ec:48:11:d9:8b:
         3c:f6:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:18 2026 by rpki-client