Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d65d063-c3a5-3f73-a2a6-fef6bd50803c.roa
File:                     8d65d063-c3a5-3f73-a2a6-fef6bd50803c.roa (raw, json)
Hash identifier:          KmvHfoT0BCFPG4RWfyOQBeO1zP0lNedTrZU3oBZoggU=
Subject key identifier:   94:7B:B0:A0:86:C8:CC:78:90:04:36:F4:16:09:74:89:6D:79:63:AF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CADDB2D932F32E60197610
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d65d063-c3a5-3f73-a2a6-fef6bd50803c.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.14.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:dd:b2:d9:32:f3:2e:60:19:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a0fc970d-e25e-4b4c-98fc-53309a64a323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:55:a3:97:be:15:83:55:94:e6:58:c7:05:
                    6f:0a:39:33:b0:73:5a:00:3a:f0:5c:0c:e3:b9:d2:
                    cb:b1:2e:f5:9c:fb:9a:95:f1:fc:74:8a:17:a6:c2:
                    03:86:cc:94:7c:55:53:15:14:32:c2:7a:5e:c1:89:
                    35:0a:f3:94:6f:04:ae:cb:ab:38:2d:d7:25:c6:2c:
                    51:be:e3:08:29:c5:20:22:95:97:e8:90:84:d4:b7:
                    31:85:9a:80:14:af:47:1f:36:c2:df:5d:ff:2a:52:
                    77:66:63:e9:f8:06:79:9d:20:b6:5d:c4:11:ef:71:
                    ff:f5:87:3b:b4:1c:9e:5a:d3:ff:ec:b4:fa:50:47:
                    92:3d:d3:b4:dd:f7:fa:ab:18:b8:f8:85:ed:41:c6:
                    53:1e:63:a2:fa:8c:90:10:0a:1e:07:e5:60:f7:8c:
                    af:60:83:2d:27:a6:6f:59:56:f4:42:95:7f:47:b6:
                    76:62:76:06:f2:6b:72:85:db:09:cc:c9:84:9f:89:
                    7f:0d:3c:03:0d:6c:80:51:16:04:8e:36:45:3d:53:
                    4a:2c:f4:df:c8:a5:48:bb:0e:6e:bc:9c:35:34:b0:
                    a0:24:25:d3:99:42:ec:57:f7:87:85:f1:66:eb:2d:
                    ca:ff:28:08:3d:7d:39:cc:4b:0c:aa:69:d9:94:df:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7B:B0:A0:86:C8:CC:78:90:04:36:F4:16:09:74:89:6D:79:63:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d65d063-c3a5-3f73-a2a6-fef6bd50803c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.14.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:98:9c:f4:ed:80:72:31:9e:88:99:b7:2d:d2:6f:65:47:40:
         0a:ce:38:a5:67:be:f4:11:dd:6f:1b:76:52:f8:30:0b:29:e2:
         b5:f5:e7:32:26:c6:9b:d6:5d:f1:eb:ec:50:68:e9:fc:63:31:
         00:c4:37:72:89:c2:46:aa:16:64:a3:3d:59:67:df:57:49:dd:
         b2:51:47:6e:14:ef:7b:45:f7:fa:46:16:43:d4:b0:0f:fe:dc:
         b5:8a:04:df:ec:71:38:25:95:bf:e8:cf:57:ff:8c:3a:77:c2:
         54:79:8e:3a:90:7c:84:98:ca:8f:06:1c:60:65:d5:f1:9a:f6:
         a8:d1:cd:19:9e:3d:1a:88:ff:4f:d7:13:6f:14:d3:c1:96:31:
         9e:72:ce:77:6a:c1:3c:a0:ad:58:5c:e1:e5:09:55:04:8e:f1:
         9e:c4:5a:29:6c:96:2e:42:1c:8e:70:b9:a1:1f:29:ea:c9:b5:
         4d:42:70:79:5e:e3:9a:17:f8:20:f9:2f:40:1a:86:c5:cf:3b:
         01:63:0e:20:cf:2b:65:1a:b6:e7:53:5a:e1:92:71:43:a3:c8:
         96:5e:b8:8d:52:5a:d1:0b:7a:dd:dc:2c:06:96:25:b0:66:f8:
         a0:d1:bd:ef:9a:b8:ea:4e:ca:42:b4:dd:24:1f:d4:d2:f1:00:
         c2:af:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:44 2026 by rpki-client