Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8527f5aa-a999-38b4-ad52-97adff24aef0.roa
File:                     8527f5aa-a999-38b4-ad52-97adff24aef0.roa (raw, json)
Hash identifier:          6RGAChKtB9ya8KT8jRh8aFTcuqg857r34wXfJouxKh8=
Subject key identifier:   A7:61:49:16:20:24:3C:29:46:87:9A:47:0A:68:FD:CC:2C:C5:95:19
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE909D58A81FF4C6F5800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8527f5aa-a999-38b4-ad52-97adff24aef0.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.89.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e9:09:d5:8a:81:ff:4c:6f:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=48719178-d537-4a50-aa66-6675bcd56e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:52:4c:eb:3d:24:a0:d3:12:2b:43:a0:26:
                    f4:5d:44:13:d9:a2:9e:b2:ae:0f:87:b2:6b:69:c2:
                    ca:ee:50:81:be:72:bc:56:b1:6c:52:22:bc:97:74:
                    48:24:85:43:e6:ac:ff:2f:42:fb:87:54:3f:18:ed:
                    ef:5e:b0:0f:96:50:45:cf:41:9c:2b:cb:61:5d:13:
                    ea:a1:e9:04:da:32:3c:ad:a6:90:c9:0f:10:bd:95:
                    02:b2:a9:22:3c:b7:e5:09:f5:04:7f:43:b9:7f:23:
                    68:a5:f9:d1:84:a9:fe:46:4a:ad:e4:56:cc:b5:45:
                    17:57:bd:28:bf:12:f8:54:7b:a6:28:ab:0f:d5:4e:
                    0e:44:1f:9d:06:4a:5f:be:2b:da:60:ef:db:6b:5f:
                    d6:e6:2f:c2:44:16:26:41:38:50:02:a5:6e:b7:ee:
                    b0:27:45:30:9c:6d:d7:dd:65:61:59:5a:ae:fd:5b:
                    95:85:bd:62:7e:af:00:7c:fb:6a:95:4e:7c:0a:f9:
                    a7:89:41:e5:4c:3f:18:af:8f:61:f6:0d:ef:22:f8:
                    80:95:1e:e9:4e:f1:f1:75:54:05:79:c1:99:91:d4:
                    61:c3:e5:d4:48:5c:c5:e2:3d:ed:09:a1:ca:49:95:
                    3f:49:5e:9c:f4:ac:38:ff:37:22:2c:2e:c7:ba:db:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:49:16:20:24:3C:29:46:87:9A:47:0A:68:FD:CC:2C:C5:95:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8527f5aa-a999-38b4-ad52-97adff24aef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.89.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:60:7e:8b:3c:58:bc:fc:3b:23:9a:5f:5f:a8:61:6e:98:05:
         a3:b9:7d:80:69:89:06:0d:d7:58:db:16:2b:c0:23:6b:91:68:
         a7:ee:34:42:3b:08:a4:b4:0d:1b:d2:26:55:af:e8:b4:f7:a2:
         17:17:32:e2:b3:50:27:61:1d:6d:fd:e1:37:90:cb:97:16:22:
         aa:ab:4a:6f:2d:53:dc:ed:f8:b8:8f:86:c5:2b:11:35:a2:f3:
         5f:32:93:79:08:94:c7:ca:9f:18:00:a5:4d:e4:45:90:86:e3:
         9d:0c:33:c3:a2:4f:3b:5a:a1:95:d0:d8:8f:e6:80:97:c3:f5:
         e6:3a:d7:1a:56:cf:5e:f2:14:62:84:d7:9e:84:ea:2d:ed:8b:
         65:3c:6c:bc:02:7e:1a:ee:76:a7:9d:43:8f:26:2a:f6:10:bd:
         5a:ec:e6:33:3c:33:74:89:a2:fc:af:4a:a0:f0:6e:3e:45:61:
         d1:7e:55:81:28:d9:1a:7b:f0:8d:e1:62:1b:13:b1:f1:cb:0d:
         3b:77:ae:38:f8:8b:5f:72:03:e8:68:f6:0e:f2:2a:96:16:1d:
         08:e6:ee:14:7f:c0:e1:1b:dc:33:62:7f:3c:c0:cb:74:a4:a9:
         88:b4:2b:3e:0a:76:ea:b8:7e:91:ad:89:ac:4e:4c:f5:50:ad:
         b1:14:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:06 2026 by rpki-client