Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
File:                     7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa (raw, json)
Hash identifier:          vVr/dl6JMt4bEI1DsxGHc9lTQnbS8lXgsmNASfscvH0=
Subject key identifier:   D4:E8:9B:63:3E:0F:6A:8A:92:72:14:CE:1F:4C:DE:69:5C:C8:1A:71
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB9B3749452041B161B0C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     395227
IP address blocks:        71.86.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:9b:37:49:45:20:41:b1:61:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=cca5e564-e028-4c66-a739-af08fe8ca021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:66:21:d3:0c:cf:7c:c8:2f:86:94:20:0e:
                    e7:99:a9:03:b8:49:6d:ec:47:cc:51:f0:fc:58:ea:
                    4f:61:dd:a8:47:67:c9:af:98:52:3c:2f:52:3f:e5:
                    9b:4a:18:39:cd:43:3d:59:24:b8:87:d5:9e:65:33:
                    dc:7c:a9:08:b9:d8:27:16:34:33:c3:c7:a4:58:4b:
                    f7:e4:0c:f1:64:58:e9:83:12:5d:45:83:e9:6f:a9:
                    3e:e0:ef:dc:dd:e6:d8:cd:51:08:89:8b:a1:1f:43:
                    12:48:8b:e8:8b:e6:b2:3b:a3:f8:96:3a:47:d4:6a:
                    c6:c6:a2:34:34:f3:f5:46:10:17:03:f3:fd:37:5a:
                    51:3e:77:2f:e2:e2:d9:6c:8a:dc:61:dd:d1:54:3b:
                    d2:e8:5f:a4:3b:96:6e:8a:db:4b:25:69:42:90:1d:
                    e8:d7:7a:18:81:ee:28:2c:7c:8c:f0:81:5d:cc:b9:
                    44:9c:4d:84:3c:a1:1a:a1:bd:19:e6:36:43:5a:48:
                    62:90:39:b3:4a:5c:0c:08:54:1a:d3:e2:55:8a:39:
                    72:11:ea:15:21:b0:aa:bd:39:a3:ff:30:a7:8c:ef:
                    82:ad:24:df:4f:eb:9b:59:b7:9a:c3:0e:69:69:50:
                    44:78:db:ae:c8:3f:c5:1c:41:c5:e8:11:7d:8e:86:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E8:9B:63:3E:0F:6A:8A:92:72:14:CE:1F:4C:DE:69:5C:C8:1A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:06:22:6b:fa:d7:7c:63:c9:11:f4:ad:90:19:67:3a:b6:96:
         05:b7:1a:d0:3e:de:c6:b3:24:b1:e7:42:5f:9c:c8:b5:fa:3b:
         b4:d6:5d:81:79:39:a0:74:c1:76:3a:38:bc:c8:88:39:58:32:
         b9:a2:ac:a9:65:cd:54:72:a8:f1:3c:4e:f3:46:21:40:f1:b4:
         55:be:c5:eb:f8:68:40:d9:4e:f0:e5:b3:e5:bb:20:f1:f5:bd:
         ba:73:1b:ae:03:9b:79:8c:cd:7f:c8:62:0a:21:5a:a8:e6:dc:
         d4:f0:3f:ab:f7:c2:ac:2e:64:1e:f7:c3:19:13:dd:51:31:db:
         83:0f:8d:a9:b4:23:bb:38:9b:09:b2:5b:72:65:39:fc:35:32:
         64:fd:88:41:93:e2:3e:02:84:7e:5c:12:ab:81:3c:69:d6:97:
         b3:67:53:a5:1f:1e:00:fc:7e:1a:84:06:b3:36:e1:00:9e:a5:
         5f:cf:b0:ed:72:07:42:01:09:6c:7b:a3:42:8b:40:c5:00:15:
         42:35:48:80:dc:fc:2b:6b:c7:48:11:34:66:d3:85:f7:e9:11:
         56:90:f6:0f:60:2b:c4:66:c2:b1:dc:54:bd:5d:b8:47:11:a0:
         1f:39:ef:a1:01:74:90:e7:3e:4b:97:4f:d2:81:78:3c:c1:9a:
         ab:cc:04:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay5s3SUUgQbFhsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
Y2NhNWU1NjQtZTAyOC00YzY2LWE3MzktYWYwOGZlOGNhMDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiRmIdMMz3zIL4aUIA7nmakDuElt7EfMUfD8
WOpPYd2oR2fJr5hSPC9SP+WbShg5zUM9WSS4h9WeZTPcfKkIudgnFjQzw8ekWEv3
5AzxZFjpgxJdRYPpb6k+4O/c3ebYzVEIiYuhH0MSSIvoi+ayO6P4ljpH1GrGxqI0
NPP1RhAXA/P9N1pRPncv4uLZbIrcYd3RVDvS6F+kO5ZuittLJWlCkB3o13oYge4o
LHyM8IFdzLlEnE2EPKEaob0Z5jZDWkhikDmzSlwMCFQa0+JVijlyEeoVIbCqvTmj
/zCnjO+CrSTfT+ubWbeaww5paVBEeNuuyD/FHEHF6BF9joa4bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTom2M+D2qKknIUzh9M3mlcyBpxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2UzZmEzNmMtMjZhZC0z
MzE5LWE0YTgtODNlMDBhNmEyZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR1b8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL0GImv613xjyRH0rZAZZzq2lgW3GtA+3sazJLHnQl+cyLX6O7TWXYF5
OaB0wXY6OLzIiDlYMrmirKllzVRyqPE8TvNGIUDxtFW+xev4aEDZTvDls+W7IPH1
vbpzG64Dm3mMzX/IYgohWqjm3NTwP6v3wqwuZB73wxkT3VEx24MPjam0I7s4mwmy
W3JlOfw1MmT9iEGT4j4ChH5cEquBPGnWl7NnU6UfHgD8fhqEBrM24QCepV/PsO1y
B0IBCWx7o0KLQMUAFUI1SIDc/Ctrx0gRNGbThffpEVaQ9g9gK8RmwrHcVL1duEcR
oB8576EBdJDnPkuXT9KBeDzBmqvMBKw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:20 2026 by rpki-client