Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/93a8fbdf-6756-3c8b-bf5e-3c9ea4846cbd.roa
File:                     93a8fbdf-6756-3c8b-bf5e-3c9ea4846cbd.roa (raw, json)
Hash identifier:          IqkEJn+H+atzQkX5urW+GztOwevukuSJC7ULajIs/mE=
Subject key identifier:   9B:C6:6F:D1:7B:7C:E7:82:7D:E8:1C:5B:4F:03:E5:C7:66:C7:3C:D8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB5C0BDF6FC02BCB7AF800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/93a8fbdf-6756-3c8b-bf5e-3c9ea4846cbd.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.88.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:5c:0b:df:6f:c0:2b:cb:7a:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=27ad2031-819d-4e7f-a18b-cb100da775a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:31:d0:2b:92:54:47:46:c8:4b:5d:85:24:
                    6d:ca:14:9c:35:a2:4a:3e:a7:05:af:a1:68:e0:84:
                    b0:85:ba:10:2e:d3:f7:9b:a7:9c:81:0c:c8:77:58:
                    1f:e7:9d:a0:92:f3:96:26:f8:12:d5:b7:cb:5a:d8:
                    95:80:0b:cd:38:bf:ef:0a:1b:de:ab:0c:02:e5:cc:
                    93:c0:ba:d7:b0:50:b8:96:ca:fe:f2:da:72:da:2c:
                    ef:1d:fb:11:c0:ba:a3:b2:ec:cb:36:75:3c:d6:91:
                    3e:19:f8:73:2d:44:da:8f:dc:9c:8d:e7:09:2d:a9:
                    52:53:c8:0a:22:b8:70:c3:60:a4:6f:16:d1:04:79:
                    9d:3c:ca:ad:a8:7a:11:f5:4a:b9:87:2f:c6:4d:c4:
                    f5:c7:cd:cb:3b:a8:9f:50:fc:12:7d:49:96:25:6c:
                    43:77:e2:f6:01:88:69:3e:bf:f8:2b:5f:14:17:26:
                    98:11:f6:85:46:32:69:b6:ba:77:70:3c:5d:e3:79:
                    1d:c4:2c:5b:af:fb:57:fe:94:21:1b:62:19:3b:15:
                    9a:92:1d:a5:68:1e:54:7b:fb:1d:96:c8:99:80:6c:
                    bb:f0:42:27:cc:ad:24:1f:72:9f:c8:dd:d3:2e:0a:
                    be:e6:55:80:02:f8:8c:f4:c1:24:9e:a0:99:00:e4:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C6:6F:D1:7B:7C:E7:82:7D:E8:1C:5B:4F:03:E5:C7:66:C7:3C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/93a8fbdf-6756-3c8b-bf5e-3c9ea4846cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.88.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:b8:38:d2:70:13:2e:d1:cf:86:02:d5:ec:62:36:8f:c3:
         c9:06:cf:bf:d3:96:17:8e:21:ce:7a:dc:97:7a:90:90:10:6f:
         a3:9e:8c:ef:af:72:e0:c0:32:d8:af:24:a9:50:c4:a8:85:ef:
         30:44:ed:94:48:e7:a8:9b:bb:de:1c:a4:e6:19:30:44:b4:00:
         35:46:eb:a2:a8:52:aa:52:4b:9f:35:05:25:dd:9e:97:59:52:
         33:91:0a:14:bc:fd:b6:9c:7e:3e:3d:30:7a:ee:fe:f0:68:dc:
         f5:a2:6e:1d:e8:64:7c:e3:72:23:a2:37:5b:2c:82:7d:6d:22:
         6f:51:46:e0:3f:e2:77:d9:ae:ad:28:4e:57:89:b6:35:ac:93:
         4e:16:95:e4:1c:2a:e4:64:ee:6c:b2:af:85:6c:1f:f4:6c:3c:
         0a:83:51:81:aa:71:1d:65:98:c2:5e:94:f4:52:58:b9:96:26:
         3e:6e:92:0b:d2:ae:4c:83:f8:6a:34:b9:bb:db:f6:d8:52:d3:
         7c:df:ad:79:7f:07:b4:8e:f1:86:44:3b:04:38:a9:89:ee:27:
         bd:b3:6f:3c:67:4b:8e:60:12:d5:e4:bc:8e:25:6a:cd:01:e4:
         fa:98:1c:0d:8d:5d:0f:36:17:8a:42:fb:e1:86:e7:ee:47:67:
         9b:37:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:12 2026 by rpki-client