Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948b4dc5-6277-3214-ab00-f2b5873cd796.roa
File:                     948b4dc5-6277-3214-ab00-f2b5873cd796.roa (raw, json)
Hash identifier:          yT9VwE5mEtC2JapJe9ujvdbeIlFn6bAZ5F6EoJw5RC0=
Subject key identifier:   1C:66:F1:F6:3E:9D:35:FB:BB:EB:1F:2B:1F:5A:60:86:D1:01:F0:45
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAEA52E6FED08C11408880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948b4dc5-6277-3214-ab00-f2b5873cd796.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        75.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:ea:52:e6:fe:d0:8c:11:40:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a240d8e9-d743-4233-a9e6-c724d8d63ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:d7:be:2c:91:88:11:b3:8e:6c:84:2c:08:
                    9d:46:0d:ad:58:5e:74:73:be:5f:51:f6:c6:81:dc:
                    7b:0d:4e:e8:a2:3f:9c:01:33:17:47:c7:14:d1:02:
                    9e:f2:5d:86:c8:a4:dd:48:b7:ac:5f:bd:84:18:b3:
                    ae:29:3c:d6:af:a9:8e:7b:bf:02:ab:97:e0:d8:9e:
                    22:4c:1f:e5:ac:47:eb:fb:73:8d:04:c9:e4:c7:bb:
                    5e:68:ab:df:f9:b8:c5:99:76:7b:a7:30:c6:8a:19:
                    8c:01:22:0a:ca:4e:42:8d:7e:2d:f7:18:7b:9b:cc:
                    d9:9a:c1:ef:2f:af:1d:f0:72:e3:75:95:73:4c:65:
                    bb:a4:0a:44:9b:c6:35:14:43:3a:41:bc:a2:64:81:
                    73:95:4b:b4:af:82:28:f9:c2:6f:9b:77:18:0a:3e:
                    e7:6e:e3:b8:96:68:1b:61:2c:a6:1f:7a:ad:9e:16:
                    0e:bf:07:66:64:2f:f8:6e:d3:e7:ab:d1:bc:95:01:
                    63:e8:0b:a2:16:9c:06:4c:6b:8b:60:db:59:55:65:
                    3f:38:46:bc:26:9d:8b:84:7c:7d:ec:fe:30:0a:14:
                    77:3c:fa:b5:1e:25:dd:d6:e4:63:c8:03:f4:b8:63:
                    5a:ae:80:22:92:31:12:72:cb:e2:df:09:d1:13:e0:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:66:F1:F6:3E:9D:35:FB:BB:EB:1F:2B:1F:5A:60:86:D1:01:F0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948b4dc5-6277-3214-ab00-f2b5873cd796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:ba:d1:6e:1b:9b:a4:e1:df:7f:0a:7d:21:9d:80:d4:5f:
         60:b2:22:e5:98:57:ed:cd:89:2c:50:14:bd:5b:4d:b2:0f:f7:
         09:d5:0e:03:d6:68:de:fc:96:9f:f6:70:1b:15:4f:a8:84:a8:
         05:8d:5a:1f:4b:b7:9d:4c:51:dd:f3:c7:de:7a:c9:14:60:46:
         30:5c:2d:65:e2:b6:ec:63:ac:4d:ca:ac:5c:51:5a:b1:e1:bb:
         46:d9:c8:fc:e2:51:e2:ed:8e:cf:1f:98:e5:ab:99:d0:df:35:
         0c:2f:6e:89:c9:04:12:fb:0c:4e:48:9c:42:0e:f7:32:7e:cb:
         86:6c:cf:75:50:3e:d2:8e:01:e6:3d:f2:76:8d:50:0e:98:96:
         b4:47:6a:71:6d:8e:20:7c:35:de:8c:63:e1:81:4e:05:87:d0:
         48:d5:f2:ff:1a:99:4d:45:02:35:0b:55:5a:45:23:26:c1:59:
         15:45:7d:09:ea:b3:a6:9b:9f:e4:98:12:5f:18:fc:ab:6b:e1:
         b9:2d:1e:84:c5:3d:cd:98:7e:d7:29:07:9e:b0:0c:9b:ca:1e:
         c5:ca:47:1e:34:73:70:a3:3f:fc:f3:6a:47:84:de:e9:75:e7:
         d5:49:02:00:cf:c8:70:9e:e6:8d:94:42:68:c4:92:ac:f1:5f:
         df:06:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:06:24 2026 by rpki-client