Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa
File:                     a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa (raw, json)
Hash identifier:          KY2t23z84nJkoHayZyc8+shQBT6exzgTsyMSOPlk4wM=
Subject key identifier:   B7:7B:01:31:13:8F:50:E3:A5:85:4E:88:DE:CB:19:57:89:6C:53:90
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB4989E720F5091304B880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        66.53.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:49:89:e7:20:f5:09:13:04:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=56b707fc-54ef-4624-aeea-8f97187aa10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:99:44:f7:33:f4:5c:cf:9b:d7:27:77:44:
                    a9:b4:99:13:84:15:f8:fa:05:0d:2a:bc:09:14:d6:
                    6c:a6:3e:59:c2:ef:91:28:65:13:b7:fc:c5:92:d5:
                    14:8f:a2:e6:ad:e2:b4:00:22:5e:1d:67:0d:ed:88:
                    5f:52:e3:32:7f:f9:7c:ae:06:cd:a4:3a:a6:92:ac:
                    80:cf:93:1d:d6:cd:40:4b:cc:ae:e1:58:5a:34:00:
                    80:58:5a:c4:52:b7:a3:10:cf:02:f9:2e:91:59:15:
                    65:02:0c:50:a1:d3:26:ad:93:28:75:57:9c:4c:d1:
                    fc:7b:ed:7f:31:4c:57:a0:51:14:2f:1b:b2:84:1d:
                    d0:f9:cb:0a:de:7e:77:06:3f:d9:00:99:70:7d:bd:
                    60:74:7c:72:99:6b:e5:c9:3c:cb:c8:3f:e4:29:7f:
                    29:9c:0d:c2:6d:a4:45:49:76:63:db:55:3c:45:ea:
                    21:7b:12:bc:2d:66:3a:d1:c6:fb:27:fb:06:58:93:
                    f1:ff:03:75:af:01:67:29:b8:1f:1a:61:e6:33:7d:
                    6f:48:e1:71:32:40:d4:7f:59:d9:82:8b:fe:32:5d:
                    d2:20:c6:9d:24:c7:28:c2:9e:11:16:04:16:3a:de:
                    01:59:2b:25:69:bb:ec:98:46:a3:44:61:c3:64:99:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7B:01:31:13:8F:50:E3:A5:85:4E:88:DE:CB:19:57:89:6C:53:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a08991d1-8cbf-3462-95a3-0480bc5fad2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.53.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:37:f4:ae:92:4f:da:08:0e:9d:dc:6c:88:61:85:35:21:8a:
         83:1e:42:40:75:57:89:8a:1c:44:68:df:14:22:de:7d:3d:de:
         10:08:7e:a2:ed:ac:96:93:7b:1c:3d:3d:35:7d:93:4d:a6:1b:
         b1:88:8b:27:55:87:00:c4:59:b0:ee:21:2d:ba:9b:e7:ee:d9:
         ea:77:2e:33:9b:32:b7:ca:88:2d:95:b3:9d:60:8e:bc:9b:dc:
         e8:d9:a3:22:c9:ed:54:46:84:e5:1f:dd:7c:bb:85:9b:e2:1d:
         4c:ae:b9:89:96:b7:c9:e7:7e:0c:f6:8e:bf:90:37:91:88:3d:
         69:47:79:41:65:25:bc:ab:76:ff:a5:d1:5b:e6:eb:fe:e0:ef:
         62:20:aa:45:20:c4:a8:b7:d2:94:40:dc:bc:d4:71:7b:68:63:
         8d:bd:fe:25:48:9f:74:6c:85:e4:a2:7f:ac:a1:fa:2c:bd:b9:
         e0:10:66:5e:af:e7:4c:14:8d:01:92:4d:59:42:82:80:52:bb:
         76:ec:ec:59:cf:95:40:21:49:f8:aa:8e:68:a7:a4:0d:d9:3a:
         0c:05:88:cd:9f:3f:a3:52:75:96:14:50:c7:b6:ff:6d:c5:6e:
         a4:41:c1:46:27:6f:43:7f:2d:c1:47:ce:67:a1:87:47:f7:85:
         1f:40:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:30 2026 by rpki-client