Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa
File:                     b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa (raw, json)
Hash identifier:          ruMRZvVj9Kf0R69ctSVOXo4KdOwy9tMQz4PTM1yE8W8=
Subject key identifier:   5E:91:DA:63:85:97:A8:7F:6C:FD:C7:A5:51:C5:B2:48:9E:AF:34:05
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB585EC8CAB854DC721D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.86.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:58:5e:c8:ca:b8:54:dc:72:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3dc35bb3-6b6d-4a18-b85c-28ad714e7d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:5a:c9:36:49:61:45:6a:59:a5:44:c8:7d:
                    2a:86:b9:f1:f7:9f:47:83:b8:2d:8b:8b:36:2e:87:
                    9a:52:24:95:1a:fc:35:85:23:6b:e0:b9:5d:17:5c:
                    f6:b9:76:89:5a:23:0b:ab:13:ab:42:b3:7f:93:5b:
                    57:45:3d:cd:53:7c:e0:da:ac:ea:2b:f8:ae:c3:42:
                    5d:f8:c9:f8:59:9d:0a:a7:ca:50:74:e1:79:db:f1:
                    02:98:e1:28:dd:2f:60:83:8b:8d:13:e8:55:51:5a:
                    d2:2e:a7:0e:40:17:07:29:34:aa:28:e8:94:a8:b7:
                    ce:36:d4:88:d1:66:06:0d:ce:44:fd:f4:97:dc:21:
                    31:a4:7b:a6:12:a1:f9:f9:cd:2b:da:5b:58:0b:6b:
                    8f:97:84:fb:30:78:cf:1d:7a:3b:9d:6a:b0:ec:91:
                    f1:21:14:8c:b1:b2:67:7c:9c:f1:2e:68:01:d7:97:
                    8e:1d:f1:e3:a4:a8:d5:84:2a:9e:50:43:db:e4:4a:
                    00:d7:20:42:a7:b2:85:fa:4c:67:32:7e:44:dd:45:
                    72:bc:ff:0c:76:9c:d5:16:d4:2a:d7:d5:c4:8b:27:
                    db:46:c6:1e:56:d5:48:71:c6:43:da:de:8a:fa:a8:
                    d8:29:86:bd:a1:51:d6:31:47:eb:de:44:2a:6e:a0:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:91:DA:63:85:97:A8:7F:6C:FD:C7:A5:51:C5:B2:48:9E:AF:34:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b1f45149-3f95-3665-9dd9-79ae12c23ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:7b:e9:da:a2:58:e9:11:35:4a:53:e0:73:d7:8d:3e:39:
         61:2e:41:26:6f:75:63:30:24:fc:a4:5d:11:e3:73:59:85:9a:
         24:a3:7d:fa:25:8e:9c:a9:5d:16:86:4d:39:57:ed:c8:5c:52:
         e3:c9:fa:9a:ac:71:c8:2e:74:77:ef:14:1e:e5:00:41:9d:a1:
         d4:76:9a:30:6d:e1:e1:fc:c8:29:e0:24:90:e7:8b:4f:c0:6e:
         b6:5f:c9:c5:67:3d:e4:6f:b1:ea:f4:fc:86:ec:38:ca:25:b5:
         2b:cb:33:43:cc:30:b0:78:19:df:1a:45:06:49:33:ec:7e:4a:
         03:f9:d6:24:a0:5f:74:48:b4:20:59:91:22:b0:93:fc:a0:49:
         92:b8:c8:5e:67:89:d3:b1:4f:1e:2d:02:3c:07:e6:3b:79:51:
         d0:95:6c:2f:65:04:95:5e:cd:a6:56:ba:a8:78:09:49:35:81:
         59:5c:71:7e:78:7c:69:42:94:96:c3:72:2b:a1:9b:f6:93:14:
         97:a0:b1:2a:27:19:43:b9:61:32:d8:5f:91:65:fe:0f:a0:8d:
         f9:5c:5d:b0:e7:f8:b2:53:de:59:7a:f0:08:2b:c6:93:32:6e:
         d4:92:2c:08:f6:0d:d8:26:8b:43:75:76:e5:c4:4a:f2:8f:fd:
         38:4c:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:56 2026 by rpki-client