Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9fc0db3d-8561-3020-baac-81890e1adb13.roa
File:                     9fc0db3d-8561-3020-baac-81890e1adb13.roa (raw, json)
Hash identifier:          4GuVjIM2RUZHwoUeBps+XT3fv9RWBRLHEladuxyNWtU=
Subject key identifier:   17:70:B0:B7:36:F7:49:72:BC:BB:B4:B1:C1:E2:7C:C0:35:9B:AE:AA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE3097C645A081B186B58
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9fc0db3d-8561-3020-baac-81890e1adb13.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        75.130.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e3:09:7c:64:5a:08:1b:18:6b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8fdec890-16a3-405f-900f-212bb8c1b0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:21:c3:88:7c:a8:bf:bb:8d:9f:ca:48:ed:
                    c0:3c:1c:7c:01:39:29:34:9c:5e:78:58:f0:60:25:
                    b6:10:17:05:43:4b:64:33:ab:84:67:09:3f:98:f9:
                    9f:eb:a1:0c:54:cb:f9:d3:db:f0:50:e2:71:b5:65:
                    b6:ee:9c:26:6a:2d:4b:58:f8:76:58:04:6b:05:5f:
                    38:06:2d:25:6f:ef:b9:cf:46:2a:16:4a:6c:68:f9:
                    eb:f5:e9:60:4f:96:42:74:c3:88:e8:26:66:ec:ab:
                    36:71:20:af:30:cf:86:e7:b6:7c:be:29:31:25:73:
                    09:08:a7:d3:1c:65:e3:41:d8:bb:13:0b:16:bc:0f:
                    a0:e2:38:ee:1d:cb:e3:b4:9f:2f:ce:87:c1:29:1d:
                    dc:a9:4e:b7:24:a2:f3:09:be:c5:83:3a:22:08:6c:
                    5c:c7:7c:47:0d:a8:58:41:9b:03:74:4b:55:1d:2f:
                    7d:cc:58:15:70:21:53:65:45:0e:f0:f2:b5:16:cf:
                    ee:94:39:d2:50:c1:d5:b8:1a:c7:31:b0:72:e3:c6:
                    5f:93:39:60:09:7d:39:43:97:63:9e:4e:54:c1:58:
                    b5:6f:04:b0:e0:b4:ca:57:00:6e:06:37:2a:77:76:
                    2b:5f:e2:41:b7:b2:ef:02:fb:1e:d3:1a:ac:5a:0c:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:70:B0:B7:36:F7:49:72:BC:BB:B4:B1:C1:E2:7C:C0:35:9B:AE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9fc0db3d-8561-3020-baac-81890e1adb13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.130.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:52:21:4f:0a:01:2f:31:c5:5c:8c:17:56:ae:9a:45:45:
         80:04:f8:2c:09:48:2b:e8:03:03:c1:92:cb:d2:ba:38:78:18:
         23:21:6d:ef:7b:3f:16:4c:aa:ce:7c:f0:b8:a2:5b:da:5f:7e:
         68:8e:da:44:cd:f4:6e:1c:40:80:19:67:44:4e:db:ef:86:4b:
         d2:cc:8c:6b:92:91:24:6b:20:6d:47:33:a3:8e:fa:2e:13:b4:
         7d:d8:f4:71:b8:97:21:78:15:9b:07:b1:10:ec:35:7d:4a:c9:
         47:d4:be:3c:a6:f1:9e:ed:27:80:ce:ab:c7:c4:77:b5:07:d6:
         81:a1:bb:99:03:0d:9b:5b:d8:83:7e:60:4a:54:e1:28:56:9b:
         8b:ec:15:42:00:ef:30:a6:66:e5:8e:eb:2f:fc:56:89:62:f2:
         5c:f2:f7:58:3c:f9:5a:b7:1d:15:0f:bb:35:48:f3:55:2b:02:
         5f:93:92:d6:55:fe:9b:7c:46:73:83:e5:94:0d:67:fc:4d:cf:
         e7:2b:c6:57:1f:7f:69:4e:c1:dd:59:50:64:82:ac:5c:c9:8b:
         40:6d:8f:df:dd:2e:9c:69:fb:9e:4a:5e:aa:cd:fc:ab:5a:07:
         2a:93:78:07:82:d9:92:11:84:39:4a:6c:59:c0:f9:8c:dc:a4:
         40:1f:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:23 2026 by rpki-client