Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a25e9244-b350-300c-abbf-11d18deb9cce.roa
File:                     a25e9244-b350-300c-abbf-11d18deb9cce.roa (raw, json)
Hash identifier:          HNTaaqlawKMrrZwZgie369/l692YziQybW38Bfrkmv8=
Subject key identifier:   CB:1D:F2:40:E4:B0:02:EE:73:5D:FF:73:78:60:45:36:13:33:5B:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CADDE8906F7050BC536200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a25e9244-b350-300c-abbf-11d18deb9cce.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.15.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:dd:e8:90:6f:70:50:bc:53:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4f8b2857-b6a7-4968-af9b-38000f711668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:59:37:60:64:0a:3b:b3:83:c7:22:2b:59:d5:
                    18:cf:e8:a5:81:f9:ce:6e:79:d8:3b:17:94:aa:4e:
                    68:96:3f:46:23:dc:6b:cf:c9:3e:bf:73:09:2e:07:
                    8c:df:f0:1f:3d:43:f2:00:a2:35:9c:25:cb:10:39:
                    60:a1:23:7e:af:79:46:3f:d5:84:37:02:22:1b:bd:
                    6d:bf:72:52:c0:d2:12:f4:36:17:74:ff:c3:84:12:
                    8e:64:88:e7:8f:83:3e:12:de:7a:1d:6f:1e:ce:c1:
                    68:43:68:6b:1d:91:bc:ec:95:6c:66:af:12:a1:7a:
                    5b:fb:80:91:f4:79:7d:f7:e8:1d:e0:e6:e9:8c:bc:
                    af:03:e0:c8:52:d8:d3:07:e6:58:e8:9d:a1:5f:cd:
                    ec:62:f5:71:f7:ee:10:58:1c:bf:28:f8:5f:e9:00:
                    c4:bc:13:f0:b5:de:76:b4:6a:b4:07:aa:f8:5b:1f:
                    19:25:1b:d4:6f:b6:46:ad:de:35:85:5f:e7:03:81:
                    a8:5d:2e:b4:69:f3:df:18:c0:af:be:97:20:57:01:
                    3a:c4:8a:a9:49:48:39:2a:89:2a:73:a5:e4:dd:3d:
                    2f:ba:2d:9b:b4:9a:10:f4:55:b8:49:f2:7f:e1:e1:
                    03:5d:89:44:36:74:cb:7d:ad:d4:93:18:00:18:bb:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:F2:40:E4:B0:02:EE:73:5D:FF:73:78:60:45:36:13:33:5B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a25e9244-b350-300c-abbf-11d18deb9cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:87:37:71:32:4c:0e:74:54:79:31:db:45:2a:f6:03:a7:44:
         9d:e0:0a:c9:80:1e:02:6d:3e:e6:d4:6c:86:98:77:59:28:08:
         d9:59:0b:c6:2e:18:2c:23:be:0f:f3:ef:4f:96:e4:62:ce:82:
         00:1e:0f:85:57:b8:59:d1:77:0f:03:d3:16:14:38:0b:37:04:
         60:88:5b:36:16:30:88:6c:60:15:8f:dc:70:5d:e9:74:5d:8e:
         3a:c1:14:26:f7:42:75:1c:6d:be:ec:bf:dc:94:e5:de:38:ac:
         2b:a4:39:49:36:0b:c4:99:0e:b8:eb:ad:4e:f7:31:aa:76:46:
         2c:4b:be:41:39:c9:2e:58:23:cd:47:14:6c:88:3c:2f:84:4f:
         0c:e0:6f:26:57:e1:dd:3a:a2:48:91:62:1c:fa:9d:d3:bb:08:
         df:33:0a:5a:81:40:dc:34:4e:52:6e:03:72:96:29:a8:07:bd:
         43:86:08:32:d5:08:75:28:f8:72:13:54:c9:d4:45:70:56:2e:
         5a:17:bc:8e:a1:75:cf:e7:ab:63:89:e5:b4:7a:83:d2:f3:7d:
         a2:a4:89:ca:c4:6b:f9:a5:ba:7b:af:18:61:45:c2:0e:45:91:
         3f:c4:bc:54:32:21:70:c3:76:44:6e:29:48:54:f0:d3:83:49:
         aa:fd:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:43 2026 by rpki-client