Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87372bfc-50fc-38d7-85bc-a5510b08e546.roa
File:                     87372bfc-50fc-38d7-85bc-a5510b08e546.roa (raw, json)
Hash identifier:          82glpmgEQH5vVAhMlihKjkj+LWytxP01inTItJ8qH2A=
Subject key identifier:   E3:5C:A6:63:CF:95:9D:34:75:4E:97:B7:F4:01:D1:23:6F:0B:39:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CACBAA5590DEF9DAE9A680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87372bfc-50fc-38d7-85bc-a5510b08e546.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.190.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:cb:aa:55:90:de:f9:da:e9:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=cf5e5c12-0599-4596-8c3b-191aa10fbbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:6c:9a:2d:c7:f6:2d:80:96:76:19:ef:03:
                    d7:55:9a:90:cc:88:fa:cf:81:74:18:c9:01:5c:6e:
                    cf:44:86:13:e1:0f:25:c9:dc:e2:fa:91:22:22:37:
                    fb:d7:8c:86:82:52:08:60:44:f2:0e:9c:ae:92:2d:
                    4a:d5:0d:c3:41:a3:52:00:ae:e2:19:12:9b:d2:68:
                    24:18:9a:d3:ee:f7:07:3d:f7:d8:1a:a1:ac:7f:4b:
                    88:92:41:57:30:37:64:89:4c:19:92:ee:62:38:df:
                    12:0b:bd:6a:b5:4f:c1:3b:cf:22:7c:25:d9:00:f5:
                    5b:e3:45:95:07:a9:b8:4c:af:23:81:4d:15:ca:36:
                    56:3d:c4:2a:22:51:33:89:a1:d2:37:aa:06:58:11:
                    59:23:c3:d1:69:b9:c3:06:e0:ae:2d:a3:33:2e:99:
                    b5:03:27:1c:b4:a5:dc:54:b6:f2:21:54:a5:5e:30:
                    1f:c8:ff:71:45:64:b6:6f:c1:3e:c3:a6:0c:2d:5e:
                    ba:bc:57:63:42:67:a7:d7:80:16:2d:fa:75:f7:dd:
                    1b:4b:ba:d5:3b:b0:30:15:d8:3c:c2:d7:1f:eb:78:
                    42:a3:25:64:df:2d:a7:ef:6a:43:f9:30:fa:19:a4:
                    a8:e0:8a:b6:52:e3:a3:fd:08:ab:2b:86:9a:22:62:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5C:A6:63:CF:95:9D:34:75:4E:97:B7:F4:01:D1:23:6F:0B:39:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87372bfc-50fc-38d7-85bc-a5510b08e546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:aa:b7:51:2c:44:6b:fa:7e:7e:0f:29:32:f3:a1:96:3c:
         ae:47:20:a9:67:e7:e1:c9:a5:86:bc:5a:bf:77:5c:f7:a4:6b:
         c7:2d:4d:09:af:bb:d0:fb:2e:0a:58:2c:8e:5f:55:c6:b8:63:
         de:6a:70:fe:96:ae:4e:21:2e:4d:b4:d5:e7:e1:48:da:3e:fa:
         40:1a:e5:bb:a3:3f:c6:0d:61:de:a1:95:af:25:2a:29:8d:3c:
         99:c7:27:69:ee:71:2c:ba:bd:79:c3:bc:9b:67:77:cf:eb:bb:
         5f:84:4f:24:00:b6:94:2c:06:e8:e5:2d:e5:36:a3:7c:17:72:
         1d:6f:62:ee:70:9b:7e:47:0d:96:2a:32:89:71:5d:3d:9c:63:
         98:15:b8:40:0d:65:f2:60:8a:7f:92:45:74:8b:7c:17:58:1a:
         ea:28:f1:a9:57:55:c3:de:e0:a9:7c:69:2e:6e:b6:ce:29:98:
         e9:28:7a:26:05:c5:b3:81:f3:77:5a:78:1f:11:56:97:f1:ab:
         fc:08:05:2e:8a:e6:59:d8:37:6c:f6:c4:26:ca:13:f1:e9:5d:
         b3:c5:94:b8:9b:f5:50:8e:7a:16:6b:1f:f7:8b:e4:4a:c8:13:
         09:f4:04:3b:73:a2:9f:bc:4b:fb:ad:4b:67:fb:fa:0f:d9:bf:
         00:67:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:20 2026 by rpki-client