Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9fd64900-c2b8-3b19-8b4f-2dca1f1f218a.roa
File:                     9fd64900-c2b8-3b19-8b4f-2dca1f1f218a.roa (raw, json)
Hash identifier:          X8fBxVyduuxHcpsBXWTWsUoD73AFtUzcAvsQP/u5IDU=
Subject key identifier:   4F:58:5F:11:05:D7:A4:D1:B9:28:82:EA:BE:04:E1:31:8B:2D:1B:8A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE0E799A5192A59EF1160
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9fd64900-c2b8-3b19-8b4f-2dca1f1f218a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.89.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e0:e7:99:a5:19:2a:59:ef:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=680851dc-ea6d-403a-8547-4b180eea985f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:61:f5:fb:cb:8a:89:b5:4a:f1:db:6e:9e:
                    f0:11:9b:80:b1:5f:5d:b9:8b:a8:1e:20:58:de:61:
                    65:72:af:65:e6:4d:b3:72:46:39:fb:62:a0:b0:22:
                    e3:d0:62:ea:1f:ad:9a:67:e4:31:4e:84:be:16:8b:
                    e8:c8:06:4e:cb:6a:f5:ec:6f:a0:b4:61:d4:31:75:
                    e6:05:4a:97:a8:eb:a8:7f:b8:27:68:20:79:d7:05:
                    5b:94:90:bf:c2:b9:fa:d8:01:cb:66:6b:1d:d0:c3:
                    8b:ca:d0:4b:24:bf:a9:d6:3d:fb:e3:60:c3:5e:17:
                    2f:4f:eb:35:7c:7d:2a:99:1a:05:ed:5f:00:59:d7:
                    7e:35:de:c9:e9:ea:34:5d:dd:1b:21:2d:25:fa:62:
                    42:50:f9:55:a9:d7:80:17:a6:cd:f0:47:d4:1f:52:
                    ce:13:05:9b:b1:4f:b7:37:12:fd:4a:90:58:0f:5b:
                    d6:f0:df:6e:85:52:fd:50:16:80:2f:94:28:7c:e8:
                    1b:7f:01:0f:3b:62:17:90:a7:fa:91:f9:bd:35:19:
                    0d:9c:f5:10:17:fe:9c:f7:93:83:62:d7:a4:48:3a:
                    5e:f3:ec:56:01:b2:ed:0e:1f:33:75:a8:3b:d2:79:
                    5b:eb:ac:f3:3c:cf:16:0f:82:61:85:bf:72:fe:3c:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:5F:11:05:D7:A4:D1:B9:28:82:EA:BE:04:E1:31:8B:2D:1B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9fd64900-c2b8-3b19-8b4f-2dca1f1f218a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.89.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:9e:b6:ae:eb:4b:e1:99:fb:2d:4b:76:99:0c:6b:97:ed:
         82:92:89:c4:e8:e3:10:f9:54:22:33:9d:8c:91:d1:a0:87:b8:
         42:76:b5:0d:8f:eb:ce:a9:3e:62:fc:c2:cb:5e:2c:81:c4:c0:
         73:ca:3c:00:12:db:4c:5b:e5:ec:6a:bd:91:72:8e:ed:f4:c6:
         6d:50:5e:02:ae:c8:d1:bf:10:b4:20:9c:f7:a5:cf:c8:d8:9a:
         3b:63:bf:cd:fe:85:dd:ae:23:59:83:0c:4b:2f:73:4c:b4:74:
         c9:24:05:be:17:3e:a9:80:67:83:ad:f7:d4:34:62:31:fa:b7:
         d1:7b:f8:6d:cd:ed:a1:63:1e:42:07:b4:7a:38:84:a3:9f:0c:
         a9:78:d6:ee:aa:81:4a:67:33:3a:25:3a:13:aa:ee:02:14:20:
         89:52:99:97:0f:fa:f8:fb:b8:1d:e7:06:f7:c4:82:78:8f:34:
         2d:4f:3f:df:74:c2:55:ad:bd:e5:10:c2:a8:c5:68:60:ea:7e:
         9e:48:2c:45:03:d7:38:cd:87:be:12:f0:27:16:0b:dc:74:9b:
         e0:07:6e:fb:00:1c:17:4d:8b:e9:6e:d4:c5:0c:9e:a3:fc:f6:
         ca:d1:5e:60:d7:a1:57:36:4e:2b:e7:6b:a8:d8:92:d8:47:06:
         28:05:fb:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyuDnmaUZKlnvEWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
NjgwODUxZGMtZWE2ZC00MDNhLTg1NDctNGIxODBlZWE5ODVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrxh9fvLiom1SvHbbp7wEZuAsV9duYuoHiBY
3mFlcq9l5k2zckY5+2KgsCLj0GLqH62aZ+QxToS+FovoyAZOy2r17G+gtGHUMXXm
BUqXqOuof7gnaCB51wVblJC/wrn62AHLZmsd0MOLytBLJL+p1j3742DDXhcvT+s1
fH0qmRoF7V8AWdd+Nd7J6eo0Xd0bIS0l+mJCUPlVqdeAF6bN8EfUH1LOEwWbsU+3
NxL9SpBYD1vW8N9uhVL9UBaAL5QofOgbfwEPO2IXkKf6kfm9NRkNnPUQF/6c95OD
YtekSDpe8+xWAbLtDh8zdag70nlb66zzPM8WD4Jhhb9y/jzZGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9YXxEF16TRuSiC6r4E4TGLLRuKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWZkNjQ5MDAtYzJiOC0z
YjE5LThiNGYtMmRjYTFmMWYyMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR1mAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhvnrau60vhmfstS3aZDGuX7YKSicTo4xD5VCIznYyR0aCHuEJ2tQ2P
686pPmL8wsteLIHEwHPKPAAS20xb5exqvZFyju30xm1QXgKuyNG/ELQgnPelz8jY
mjtjv83+hd2uI1mDDEsvc0y0dMkkBb4XPqmAZ4Ot99Q0YjH6t9F7+G3N7aFjHkIH
tHo4hKOfDKl41u6qgUpnMzolOhOq7gIUIIlSmZcP+vj7uB3nBvfEgniPNC1PP990
wlWtveUQwqjFaGDqfp5ILEUD1zjNh74S8CcWC9x0m+AHbvsAHBdNi+lu1MUMnqP8
9srRXmDXoVc2Tivna6jYkthHBigF+3s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:41 2026 by rpki-client