Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa
File:                     4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa (raw, json)
Hash identifier:          Ns0vL0EVtxX05mm4O6VC3nCXrHWXpnl6FWgepcjYivA=
Subject key identifier:   18:5C:C1:D2:8F:C4:6C:20:31:11:3C:D8:4A:90:6B:2D:71:63:47:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB75E800E4613B102C1900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.11.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:75:e8:00:e4:61:3b:10:2c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=fe74d7c6-649a-4bc8-adce-038eefc9711d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:48:72:0e:dd:d5:60:61:e2:11:22:0d:d5:
                    8e:62:fc:9b:aa:78:16:1f:49:e0:c9:4e:a4:75:b8:
                    7a:7f:e3:f7:76:d4:9f:c1:4c:d8:a1:17:f2:8e:67:
                    65:ba:a8:1f:a8:f1:d1:bf:f2:4f:97:4f:4f:4e:a1:
                    56:b4:df:c1:e8:f7:0b:09:5c:20:d5:03:33:1b:6b:
                    dc:ef:98:db:0e:34:88:86:dc:ec:b1:fb:7c:07:8b:
                    4e:a4:22:e7:f9:ec:dc:47:28:82:5c:29:9a:ac:2b:
                    57:cb:db:d8:52:d1:4f:91:37:ed:90:d7:16:e8:96:
                    60:9c:7f:1f:a9:9b:67:eb:d5:66:85:19:a7:35:54:
                    43:da:84:c9:b7:13:52:c1:39:81:b3:28:dc:27:cb:
                    a6:dd:2b:c7:ad:13:2c:ee:90:e8:1b:67:bb:fd:92:
                    b1:5f:61:0b:0c:ee:4e:2a:ea:a3:33:41:e4:87:fa:
                    13:b5:b9:98:21:64:32:23:18:24:57:a1:5d:d9:c6:
                    b1:90:c1:ac:aa:83:f5:12:46:14:36:34:61:c4:15:
                    f4:c0:4c:88:01:ce:50:c3:7b:25:de:60:59:3c:62:
                    e8:dc:1d:33:33:62:bc:34:67:2e:15:76:b1:4c:f9:
                    a2:e9:3b:49:42:c4:b3:77:2e:e9:4a:2f:1e:97:5f:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5C:C1:D2:8F:C4:6C:20:31:11:3C:D8:4A:90:6B:2D:71:63:47:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de3ab85-fed0-3c20-a50f-aaf8cec26bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.11.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:2e:3f:a4:67:9f:69:5f:99:99:fe:ec:c4:14:f3:8c:16:
         32:b9:ec:cf:d3:13:bd:cb:71:95:79:2d:dc:6d:8d:93:a6:5b:
         9d:8e:29:fd:e6:40:73:7e:d9:52:11:66:b9:38:f3:17:1b:9c:
         98:85:31:74:2e:8e:05:c5:2c:fd:01:c5:1e:8c:92:59:66:20:
         41:ff:8a:64:a3:27:85:e4:94:ab:9f:ad:37:19:a2:6d:4d:d1:
         ab:2e:56:41:db:db:27:6a:59:2b:58:10:9b:ac:03:ce:1b:ac:
         e6:dc:b4:4e:c5:18:ef:70:0a:f8:b1:93:88:06:ab:c2:77:2a:
         39:52:db:3b:97:a1:ef:0b:60:70:54:d4:dd:fb:3f:0c:6e:bf:
         7f:f6:8c:dc:8a:25:1c:35:a5:f7:0a:a6:67:4d:a4:1b:14:0e:
         d7:b1:f3:fd:94:bb:55:c3:0f:58:48:fe:aa:05:af:bf:e5:81:
         53:cf:c6:bc:c8:b7:e1:73:c3:7e:2d:f3:9d:68:95:b0:c8:91:
         f6:38:35:a2:c8:3c:d2:f0:35:bb:e2:25:67:02:23:f5:44:b7:
         bb:b5:d5:fd:43:4f:7c:32:6c:e8:33:1b:18:ab:3b:85:96:dd:
         d1:27:c0:3e:72:9a:db:fb:f4:cb:e2:8a:0e:73:34:04:ff:0b:
         7e:35:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:58 2026 by rpki-client