Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f12dacd-d3d5-3e37-9458-f60fa69cadd8.roa
File:                     7f12dacd-d3d5-3e37-9458-f60fa69cadd8.roa (raw, json)
Hash identifier:          40alH/4r9T7XR9L2cQg8MzjRzztU9scbV1ktra5tUPk=
Subject key identifier:   37:E5:C4:F4:0A:A0:AE:B7:B1:88:AC:83:EA:AE:C5:B3:35:25:6A:6A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB5C4BD7236047DD8E38C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f12dacd-d3d5-3e37-9458-f60fa69cadd8.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.90.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:5c:4b:d7:23:60:47:dd:8e:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=9dcdf002-de4c-4fc2-88d0-59aa9156c6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:8c:74:38:6c:dd:a3:7f:c1:86:a6:99:4b:
                    14:40:fe:de:34:a4:90:90:9c:4d:81:61:22:31:97:
                    de:9d:86:6f:86:e6:a1:17:1a:0b:f7:f0:63:64:41:
                    b1:08:35:dc:65:2c:b7:a8:49:f6:75:a0:6c:86:2f:
                    af:34:ea:79:fd:2d:2b:c6:85:f0:b0:a5:bf:6a:2d:
                    03:6d:1a:91:3f:9b:68:d1:c2:08:97:90:bd:d2:d3:
                    f1:34:e9:8d:03:7f:c9:e7:35:e5:25:80:4e:48:d9:
                    8f:68:0f:d3:56:d9:f6:3c:08:fe:f8:0d:6b:c4:44:
                    86:82:c0:ff:fd:c3:db:7e:46:fc:1b:04:ab:f4:66:
                    bc:f7:dd:93:76:e2:b7:65:ff:1c:17:83:56:80:be:
                    e8:89:b0:3b:42:a2:35:f3:d9:c3:61:8c:d7:d9:c3:
                    0c:b4:ab:0b:20:a1:ef:26:ee:97:d5:29:83:bd:6a:
                    e7:e8:79:bd:f1:d1:6b:e6:66:74:03:74:0a:89:62:
                    36:ab:8a:95:55:2a:8e:86:eb:2f:69:68:b2:1c:0a:
                    76:ad:5b:68:e6:e1:c9:6f:1d:7b:62:86:74:a9:3a:
                    7b:75:74:cc:d3:b0:ee:c0:8a:98:8d:68:c5:5f:80:
                    18:01:ad:28:75:da:d4:42:74:2a:8e:3f:07:47:51:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E5:C4:F4:0A:A0:AE:B7:B1:88:AC:83:EA:AE:C5:B3:35:25:6A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f12dacd-d3d5-3e37-9458-f60fa69cadd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.90.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7d:f7:a7:c0:76:17:d0:5a:b8:14:8b:72:66:a0:58:f3:ce:
         1b:70:33:f4:54:43:14:92:05:84:7b:45:43:f5:c0:b7:d3:cc:
         09:fd:19:07:26:d4:a3:a3:92:c7:45:99:2c:b0:23:1c:c0:03:
         85:1a:a7:11:40:b9:7c:66:18:1e:56:b3:c8:23:be:a3:72:aa:
         19:a6:6f:7c:b5:72:a8:4b:fe:c0:2c:06:98:b2:11:1c:87:32:
         7e:52:bf:6c:5a:8d:5e:22:d6:e1:cd:22:6a:42:25:ed:6e:b8:
         a8:60:8a:b8:6a:b9:19:6f:c6:ff:f5:f2:37:8a:4b:71:6a:6b:
         e7:23:16:a5:4d:1a:bf:ab:15:74:d0:af:86:c4:35:24:d2:4e:
         8a:3a:47:33:81:0d:3b:e1:3b:df:f0:f5:4c:cc:59:5a:ea:25:
         d2:a6:e4:b7:08:88:92:5a:69:c0:de:e7:c8:16:bb:da:8c:0a:
         95:73:1f:39:76:ac:da:00:3b:b9:6b:92:b4:c5:c0:82:0d:db:
         f1:af:08:a2:1f:3d:a5:7a:9c:b1:8c:f9:09:f5:f6:08:58:9c:
         41:62:15:ae:90:2f:db:e4:40:be:9b:be:fc:09:b2:78:29:73:
         86:d3:0b:e3:e2:f8:2a:cf:98:c1:6a:cc:1a:cd:a4:b9:89:1b:
         85:e2:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:45 2026 by rpki-client