Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6c1e5951-0918-32b4-acde-341448b671c5.roa
File:                     6c1e5951-0918-32b4-acde-341448b671c5.roa (raw, json)
Hash identifier:          guySjd5ecVIifdCfIrizHVaAip5BoNcoBPqxSQPn5aQ=
Subject key identifier:   B9:15:0D:2F:F4:C0:5F:A3:81:22:6B:D8:42:19:47:89:83:4A:9C:53
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB9A1541E5443EA33DDBE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6c1e5951-0918-32b4-acde-341448b671c5.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     40294
IP address blocks:        47.43.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:9a:15:41:e5:44:3e:a3:3d:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=66655f95-27be-4278-9c0d-6b28a96a1fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:9c:00:47:be:b7:b4:d0:82:f1:d8:7a:e2:
                    98:78:ec:d8:f8:3c:f5:71:fa:b6:cf:bb:a3:58:2f:
                    59:5e:cb:56:17:ba:80:fe:56:8b:91:ac:d7:d7:d5:
                    08:84:e5:1e:8c:de:e1:90:10:9f:3d:1c:a4:5a:44:
                    2a:da:be:23:ac:8e:bc:d1:29:a2:6e:5c:16:12:3a:
                    0c:35:b0:2c:00:e0:41:7b:49:79:31:f3:7a:09:0a:
                    64:f2:a4:96:26:48:e7:c3:e1:4e:55:d2:21:8b:7b:
                    f2:a8:d7:13:ef:9f:93:a5:69:0b:a6:51:59:12:44:
                    9e:db:ab:df:38:0a:9a:95:b5:69:c2:f8:53:ff:f1:
                    b0:fb:81:7b:91:9e:6b:ed:52:a1:24:9b:65:a0:b1:
                    76:c4:0c:83:9f:07:71:f7:ec:af:f5:39:0b:2f:c5:
                    cb:8c:b5:4f:0f:5b:3d:0f:99:de:64:b0:ba:3a:f4:
                    31:3a:c3:ff:bb:c7:76:84:05:90:0a:8c:ae:51:e2:
                    76:ca:c1:09:5c:21:00:42:50:7b:3a:5b:03:8b:d8:
                    0e:6d:b3:8c:84:1b:d1:98:33:ab:dd:24:e1:8f:d6:
                    84:b1:9d:3d:23:46:01:10:f0:92:c5:b5:9d:c3:23:
                    b4:fb:4c:70:da:b2:17:b8:9d:52:da:bb:f1:52:23:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:0D:2F:F4:C0:5F:A3:81:22:6B:D8:42:19:47:89:83:4A:9C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6c1e5951-0918-32b4-acde-341448b671c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:37:59:80:36:38:05:33:7e:72:c5:21:3f:32:a0:b0:3e:ce:
         51:0e:ae:fe:dd:48:41:3b:d8:2e:60:16:be:9d:1a:76:fb:23:
         e9:de:c2:90:a4:8f:d4:2e:1a:a3:75:55:a6:d0:61:61:ec:a1:
         cc:db:0b:36:4e:2a:62:fb:48:8b:12:ab:70:77:f0:26:71:b4:
         0f:f3:f1:7e:8e:03:53:a1:18:55:00:80:5e:b7:77:53:89:56:
         ac:fc:a0:1c:08:95:98:1a:55:cb:ff:5c:8e:30:e3:d4:3f:09:
         48:45:93:ba:8d:f0:ca:93:bf:0c:58:91:1f:cc:d3:02:00:c9:
         31:83:76:02:9e:22:61:fa:28:7c:0d:1a:b3:f2:b0:95:b1:46:
         12:95:da:b2:84:a4:99:54:03:0d:0b:0f:78:32:e2:89:b8:36:
         29:17:ce:a3:77:29:1f:0b:11:55:22:48:a2:27:e6:84:bc:d4:
         1e:93:e7:c4:25:60:63:fe:f7:6c:97:73:33:67:2a:1c:69:01:
         c1:0b:0c:8f:4e:c3:f9:a7:b2:7b:b6:d4:1b:13:d8:8f:11:0d:
         9f:e4:8d:aa:41:2f:f0:5c:40:96:5c:d4:9c:91:6e:76:bc:3a:
         2a:c0:c5:1d:72:aa:8d:ed:20:2a:4c:49:e9:e3:32:60:00:0b:
         83:f9:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:19 2026 by rpki-client