Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58595c75-75a5-3fef-9870-9a367c7a98aa.roa
File:                     58595c75-75a5-3fef-9870-9a367c7a98aa.roa (raw, json)
Hash identifier:          qXyIJqBUlfFoJcdxxpkPbDLFbnELHLSjBeCM5nqkOtY=
Subject key identifier:   EB:AA:13:5C:C9:C4:22:D1:E2:3E:2D:6B:BD:5D:02:EA:97:E1:71:E1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB5D6D535178A953104EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58595c75-75a5-3fef-9870-9a367c7a98aa.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.94.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:5d:6d:53:51:78:a9:53:10:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4463c41d-0f93-4697-9c24-ce8f2a226f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:a8:96:e6:de:ce:15:04:ff:03:92:fb:af:
                    ee:1d:ea:a5:da:34:a8:64:4d:3c:33:00:ff:3a:cb:
                    26:94:85:4f:89:38:e6:ac:ee:70:8d:f1:3d:0d:17:
                    25:9e:34:a3:39:b7:67:3c:cf:d6:94:fd:49:21:30:
                    39:d2:42:b8:05:f4:9d:d7:9f:ed:ca:dd:84:7f:91:
                    02:84:42:b6:a8:96:3f:54:76:7e:1d:4c:a3:0a:2a:
                    19:75:b3:89:a9:77:a8:40:89:fd:71:6c:92:f8:dc:
                    41:5d:38:eb:be:24:c8:b6:6a:a2:5d:a7:de:8e:98:
                    e7:a6:52:47:60:43:d6:c3:4d:93:09:88:68:42:95:
                    6f:fc:a8:f4:7c:9f:d4:b9:cb:39:a8:0e:24:22:5c:
                    7b:39:fb:db:07:ad:6b:8a:af:d8:34:d6:a6:9b:68:
                    33:9b:8e:ea:17:07:3a:37:d3:d4:ba:be:7e:03:df:
                    28:44:fa:d9:c5:3a:c9:ed:15:01:55:d0:e8:9c:a6:
                    4c:95:54:f0:6e:b4:54:8b:71:02:db:fc:48:9a:0b:
                    fa:8b:e7:58:e3:35:3a:a0:43:c5:30:6b:1f:c6:6b:
                    0e:08:76:8c:41:cb:f0:43:37:80:9c:5d:c1:cd:1e:
                    03:99:51:9f:1f:bf:e5:f3:7d:ce:b6:60:61:36:68:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AA:13:5C:C9:C4:22:D1:E2:3E:2D:6B:BD:5D:02:EA:97:E1:71:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58595c75-75a5-3fef-9870-9a367c7a98aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.94.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:ee:c6:97:06:e9:94:36:40:6a:4b:43:67:e7:e8:d1:83:
         28:03:46:f4:c0:ab:b4:a1:84:2b:8c:3c:14:1c:fc:fd:9c:5f:
         33:39:49:6d:61:bb:34:4a:00:d1:11:d2:c3:5a:3f:7d:57:ae:
         9e:ed:1b:ec:39:af:2d:8c:3e:5b:ca:24:de:6b:a1:f4:9d:89:
         0e:4f:a0:24:03:e0:77:05:a2:df:18:e0:af:4a:a0:4b:83:43:
         2c:50:f3:fa:36:d1:78:c0:de:d1:81:a9:c5:05:b3:97:b3:47:
         ae:11:32:6f:a8:8f:ec:9f:09:1a:68:59:60:82:d0:82:02:db:
         1c:80:23:a8:67:d5:0e:12:ef:55:92:04:74:57:55:69:69:5d:
         4a:89:bf:cb:7b:a4:d7:7d:9e:44:73:79:dc:ca:8e:50:47:6a:
         c5:65:1f:49:e6:36:2b:1d:de:fc:e5:ee:c3:6d:9d:9b:23:b1:
         bc:7e:c3:28:f2:ef:9c:a5:c7:46:d8:71:25:4d:44:9a:b4:89:
         0a:0f:32:98:79:1a:9a:06:57:fc:8d:9a:b7:93:a1:8e:0d:db:
         ac:13:c2:73:fc:c4:d9:a9:ff:9e:1a:ab:3c:10:7d:c6:51:be:
         08:e3:95:6d:97:90:a1:46:c6:dd:0d:c6:bb:da:02:e9:ad:3f:
         6e:d9:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:44 2026 by rpki-client