Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1edca70-ef42-3688-ba75-140bb48739a9.roa
File:                     a1edca70-ef42-3688-ba75-140bb48739a9.roa (raw, json)
Hash identifier:          t5MKYwbIS0Vgi+ypbddx2kbS10em4O2sYY7/s540xqs=
Subject key identifier:   16:90:75:67:CA:19:4F:85:DB:82:46:9A:43:38:99:DE:B4:97:B9:2B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB7615044DEB227063F380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1edca70-ef42-3688-ba75-140bb48739a9.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.14.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:76:15:04:4d:eb:22:70:63:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c4516ba8-4fc1-4bbe-aa66-800c51a7d38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:b7:3e:45:d1:10:6d:06:a0:75:33:d3:9c:
                    a8:ea:da:32:1f:fe:bc:27:26:ef:f1:e0:84:59:23:
                    18:5d:61:80:43:f0:1c:22:e2:38:2a:be:6e:0c:a6:
                    bb:17:bb:5d:fb:bd:0c:18:4f:84:d9:c9:d1:ac:e5:
                    3e:b5:41:dc:c5:ef:63:be:bc:41:aa:f8:d2:2c:28:
                    14:b9:96:70:a7:5f:fd:3b:9b:dd:3c:f2:76:cb:80:
                    04:19:55:1e:da:3b:2f:94:30:98:9d:b0:87:8d:17:
                    8d:72:2b:24:1d:8e:07:d8:ee:c7:59:de:80:f4:83:
                    36:9a:6a:31:89:61:a2:95:8a:5a:dd:6a:6b:53:4d:
                    a8:f3:a8:c1:91:88:0e:87:e8:44:bb:ab:f6:58:cb:
                    a2:c2:54:9a:32:4f:06:3e:83:20:53:2c:f9:1d:ff:
                    44:8b:1c:b0:71:9d:08:43:7f:64:60:14:0c:d6:40:
                    39:01:9f:d7:3b:11:af:58:a7:33:e7:1f:36:47:85:
                    a6:2c:4c:12:27:f0:29:53:76:59:19:ea:22:2e:89:
                    9c:21:66:e1:54:92:b3:db:97:e0:a5:79:ed:37:d7:
                    d5:0d:68:5c:6a:68:64:9e:8c:8a:8e:c1:b4:c4:43:
                    4c:ed:09:50:e5:bf:1a:85:8e:fa:01:c8:d1:02:5e:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:90:75:67:CA:19:4F:85:DB:82:46:9A:43:38:99:DE:B4:97:B9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1edca70-ef42-3688-ba75-140bb48739a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.14.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:74:eb:41:57:b6:5c:b1:c6:af:0e:8c:72:a0:dd:f4:2b:
         a4:06:fe:44:40:64:83:28:d6:1d:00:82:15:44:38:db:65:4f:
         fd:36:6d:2c:b2:19:66:1b:43:6a:d3:ce:6f:ee:96:0c:5b:a9:
         a8:ce:e9:a0:e6:4f:fa:c7:2f:50:22:7c:10:fb:3d:e1:8a:e4:
         59:a2:71:38:d0:12:53:28:ee:18:34:02:dc:ea:b5:45:8e:f1:
         bb:8c:ae:60:4d:79:8f:07:91:cd:ee:e0:f1:88:14:5e:2f:f5:
         5f:20:c9:d4:f3:17:42:27:10:47:7f:79:a0:5e:75:bd:0a:52:
         03:86:5f:ac:e8:59:5a:97:1c:aa:76:a0:62:33:af:01:f0:7b:
         90:eb:6a:f7:41:2a:c5:bc:3c:a9:87:d4:27:bb:56:30:70:ff:
         0d:13:00:4f:39:94:1b:1e:6a:dd:08:0e:43:91:e6:16:31:0b:
         37:bf:a9:b7:f7:59:8f:01:c9:c5:d5:08:d3:ea:f4:44:54:f0:
         90:8a:49:aa:8c:b9:95:f8:f7:62:9c:59:ac:66:b9:bd:3c:ff:
         7e:51:bd:ef:0b:39:04:8b:f4:ab:79:94:4d:89:2a:ac:16:3e:
         75:25:78:18:44:73:4f:7d:43:2a:37:f9:5b:36:d8:b2:fc:e7:
         49:42:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:07 2026 by rpki-client