Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
File:                     b3d1120a-b857-30de-bd4c-58937c25ac9b.roa (raw, json)
Hash identifier:          r3GUCq1inA9tardtyMMuXLXo0M1/RWqT6npZOP7+rXA=
Subject key identifier:   8F:6F:6F:85:5C:23:EA:1C:5F:AE:E7:39:0D:F6:F3:D0:A9:6E:D9:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB7F0EFCE16F08B34AD180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.8.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:7f:0e:fc:e1:6f:08:b3:4a:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a374b3e4-142d-4250-9b96-83ec509dd54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:8c:26:87:db:d8:b0:f4:e3:9a:8c:b0:4a:
                    0c:3f:eb:66:17:1e:8e:42:57:a5:ba:f3:c1:b8:c0:
                    af:b5:5c:dc:f6:3e:a8:d1:5f:44:24:f2:07:fd:f9:
                    2d:e4:fd:a3:49:7c:c3:18:a9:88:b5:49:64:83:d5:
                    07:e8:53:19:48:89:fd:4c:e2:f9:23:26:78:4a:e4:
                    84:3a:5b:70:8d:51:17:b0:cb:71:06:58:9b:4a:27:
                    18:0a:75:3f:18:fa:21:5d:6b:39:9a:33:aa:ca:9d:
                    60:3d:67:7e:8b:62:fd:c2:d7:79:2f:aa:a3:9e:9f:
                    63:3f:8c:d4:b9:ab:7c:f9:4b:5b:5b:07:93:62:32:
                    0d:ee:07:82:ff:be:78:45:8b:99:55:3c:ee:c4:1b:
                    ed:05:fe:37:6a:5e:4b:fa:05:4c:71:74:2e:80:4b:
                    af:7a:80:5a:54:a1:45:85:78:7a:ec:f2:db:b5:bc:
                    ce:f4:90:2c:de:6f:14:eb:ab:32:fd:6b:c3:5b:5d:
                    9f:d5:0b:e1:39:c0:16:1e:b3:4f:87:9a:1d:cb:ee:
                    2e:37:e9:06:52:47:be:1e:a7:3a:6e:75:37:da:7c:
                    d3:fa:15:47:48:e7:f0:02:d3:24:69:d1:63:27:c4:
                    87:59:93:da:13:0c:94:cc:3f:f2:60:08:43:4e:f5:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:6F:85:5C:23:EA:1C:5F:AE:E7:39:0D:F6:F3:D0:A9:6E:D9:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b3d1120a-b857-30de-bd4c-58937c25ac9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:82:ca:df:00:03:45:42:ff:96:27:4f:32:c5:0e:c9:06:42:
         ad:bb:19:1a:a1:ce:2d:ca:31:22:64:53:21:cc:13:48:12:5e:
         47:25:4e:3f:e5:94:98:86:7a:41:a0:39:ab:db:6b:f4:4c:e2:
         a3:b5:55:93:a4:1a:2b:04:2b:fc:85:99:12:73:88:84:32:e9:
         93:42:e1:ed:44:3c:f3:5e:ee:ac:5b:02:2c:12:56:e1:18:2e:
         d0:7d:7c:e9:bb:68:66:2f:0e:34:2d:0f:4e:ec:6c:66:13:81:
         15:38:7d:10:ee:1b:fd:d7:62:13:af:59:61:d1:68:14:45:d2:
         86:3f:38:56:2f:9f:a7:d5:4b:37:f6:aa:7a:b5:5f:67:21:7c:
         be:7f:eb:45:a7:34:2f:8b:66:c0:ca:f6:37:b7:f3:e1:08:1e:
         e2:d4:73:88:c4:c1:1d:b3:7f:10:84:6b:18:39:06:51:e8:20:
         3f:15:1c:26:7e:02:98:90:4f:d8:d4:5c:d3:bf:5d:92:f8:c5:
         75:7f:ea:2f:8d:87:a1:83:e6:ae:f8:34:f6:5c:2d:a0:df:9e:
         0c:bd:02:96:b4:4f:f5:9f:3c:18:e4:15:37:f1:e4:40:74:06:
         cb:3f:b2:93:b4:e4:20:b8:6d:a0:2d:b0:4f:e4:0b:1e:c8:94:
         aa:04:20:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay38O/OFvCLNK0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YTM3NGIzZTQtMTQyZC00MjUwLTliOTYtODNlYzUwOWRkNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFuMJofb2LD045qMsEoMP+tmFx6OQleluvPB
uMCvtVzc9j6o0V9EJPIH/fkt5P2jSXzDGKmItUlkg9UH6FMZSIn9TOL5IyZ4SuSE
OltwjVEXsMtxBlibSicYCnU/GPohXWs5mjOqyp1gPWd+i2L9wtd5L6qjnp9jP4zU
uat8+UtbWweTYjIN7geC/754RYuZVTzuxBvtBf43al5L+gVMcXQugEuveoBaVKFF
hXh67PLbtbzO9JAs3m8U66sy/WvDW12f1QvhOcAWHrNPh5ody+4uN+kGUke+Hqc6
bnU32nzT+hVHSOfwAtMkadFjJ8SHWZPaEwyUzD/yYAhDTvVmoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9vb4VcI+ocX67nOQ3289CpbtktMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjNkMTEyMGEtYjg1Ny0z
MGRlLWJkNGMtNTg5MzdjMjVhYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMCCyt8AA0VC/5YnTzLFDskGQq27GRqhzi3KMSJkUyHME0gSXkclTj/l
lJiGekGgOavba/RM4qO1VZOkGisEK/yFmRJziIQy6ZNC4e1EPPNe7qxbAiwSVuEY
LtB9fOm7aGYvDjQtD07sbGYTgRU4fRDuG/3XYhOvWWHRaBRF0oY/OFYvn6fVSzf2
qnq1X2chfL5/60WnNC+LZsDK9je38+EIHuLUc4jEwR2zfxCEaxg5BlHoID8VHCZ+
ApiQT9jUXNO/XZL4xXV/6i+Nh6GD5q74NPZcLaDfngy9Apa0T/WfPBjkFTfx5EB0
Bss/spO05CC4baAtsE/kCx7IlKoEICQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:38 2026 by rpki-client