Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa
File:                     a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa (raw, json)
Hash identifier:          Bd4SNYX1XA6PO4XpmYyQsepENYgtEpy7Vblt57kfBp8=
Subject key identifier:   91:0D:D9:74:01:25:19:40:A4:22:84:83:BD:18:29:08:CA:2A:DB:0D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE4612DC30514138D6A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        96.35.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e4:61:2d:c3:05:14:13:8d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=86253e02-6892-48e4-8357-47d26fcb589c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:b2:57:e6:03:1b:2c:ec:94:31:87:4f:64:
                    e4:e8:d6:b2:2c:e4:f9:33:3c:a1:d9:4b:72:4b:35:
                    e5:28:79:66:b8:64:13:3d:2c:d4:5d:1d:e9:6b:ab:
                    91:23:b4:3e:b3:6d:ef:ed:dc:83:6c:3b:82:e6:3a:
                    94:a7:f9:45:f5:a1:b5:19:4a:25:3e:b0:02:73:c5:
                    d7:05:d2:4f:73:d4:de:8a:92:af:13:ca:43:b3:c4:
                    e7:42:8c:f2:33:bb:33:b3:04:2d:55:30:5e:92:a9:
                    66:1f:bd:53:0c:e1:23:79:68:81:e1:b6:c8:65:c1:
                    9a:d3:75:5b:29:99:cb:3b:93:d1:66:63:3c:7d:20:
                    13:1d:82:73:d8:ea:7d:24:88:a2:56:ef:9e:be:57:
                    97:94:f7:96:c5:1f:98:64:ae:9d:3f:5f:e3:83:cc:
                    ba:e9:b6:57:f7:1c:d3:c8:ce:0f:3c:f6:86:c0:c1:
                    1d:5f:bb:37:75:18:fa:9f:e4:bc:59:70:e9:b3:80:
                    cc:07:93:b4:53:9b:53:b4:49:20:9e:69:74:a9:66:
                    53:6d:49:e1:a9:da:a2:44:4f:f7:14:c7:4a:2d:53:
                    c1:bd:22:79:35:7e:ae:98:bc:ac:fa:fa:c9:c4:d4:
                    1f:53:5b:20:7b:1f:8f:3f:d0:53:6b:32:a8:c7:ef:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0D:D9:74:01:25:19:40:A4:22:84:83:BD:18:29:08:CA:2A:DB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.35.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:df:fa:ba:29:ca:ff:83:53:ae:c6:a2:35:c3:d1:d7:59:3b:
         80:be:57:41:7c:cb:6c:b3:19:c3:39:cf:c2:50:36:8e:fb:e5:
         aa:86:27:d7:d8:fe:92:d8:fd:e2:80:29:0d:b8:e7:90:5d:d9:
         3c:4b:88:d7:88:bb:3c:1f:4a:c0:4e:2b:87:1c:bd:35:2f:c8:
         65:ff:83:f1:a8:d1:14:68:b1:74:63:ff:19:d2:f1:d4:6a:1a:
         e1:1d:e4:15:17:af:7e:f4:55:2b:4b:d2:e7:2e:c9:98:5e:17:
         e3:c2:d2:28:e0:c6:c5:33:f9:29:55:94:36:ef:e2:51:01:82:
         08:f3:5b:97:8f:67:31:74:b4:57:f6:18:ae:a2:f3:21:f2:24:
         68:96:e0:4c:8d:7a:65:3a:4e:25:3e:42:0d:74:13:d4:99:ad:
         9f:f5:ae:42:c9:ff:90:3d:86:93:e4:e8:13:f8:a0:6a:39:4f:
         45:6f:57:c7:18:03:02:fc:e9:29:a4:f7:fb:76:27:b7:cb:46:
         a9:5b:b4:e7:cf:0f:30:bf:6f:0f:2f:e4:05:e7:2a:39:e9:88:
         04:45:25:73:24:71:c2:bf:2f:f0:35:e7:da:5e:c1:07:44:20:
         33:ba:bc:1f:18:a9:7a:cd:9f:db:07:7d:ec:57:ec:3e:21:24:
         ef:26:12:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:05 2026 by rpki-client