Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8f07e34-9f0c-3c77-ba0c-591201623470.roa
File:                     c8f07e34-9f0c-3c77-ba0c-591201623470.roa (raw, json)
Hash identifier:          otqs4i+lUp1vjDEcZO9iOgr8MsEa7PJXsRNNCnnoVzQ=
Subject key identifier:   7A:29:B6:03:67:81:4B:4C:2C:27:16:9B:BF:B1:D3:35:E9:44:19:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAEFDD93F67D765035E080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8f07e34-9f0c-3c77-ba0c-591201623470.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        192.62.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:ef:dd:93:f6:7d:76:50:35:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=12e15523-a15e-412d-8023-f0129d44695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:75:42:70:2c:3c:e1:2f:83:4d:60:7e:3a:
                    77:f4:b4:de:49:3a:f7:10:f3:75:77:58:34:03:56:
                    2c:c2:b3:59:17:2b:91:c6:ee:98:ae:c1:9a:05:a9:
                    47:bb:56:4d:ee:c3:6d:2c:04:8d:a0:33:94:92:ee:
                    b5:72:ff:2f:36:16:ad:81:3e:a1:f0:23:28:16:d9:
                    1d:ee:c2:f1:60:92:99:bc:29:e9:f4:87:5d:b5:48:
                    34:e3:a9:7c:8f:f8:a1:12:3c:98:4d:6e:5f:a9:c1:
                    5e:c5:d5:bd:68:b3:dd:38:60:b7:e0:ce:25:56:f7:
                    53:1c:87:66:ab:ed:4f:8d:dd:f1:f8:3b:91:f6:75:
                    fa:b6:d1:87:b6:bc:01:21:24:19:46:5b:fb:06:11:
                    6f:79:d0:1c:7f:8d:0b:60:00:46:c9:11:5f:cd:f8:
                    85:90:4f:a5:c2:62:1d:e7:ee:6e:81:0e:5d:50:1c:
                    ec:52:39:97:77:91:29:c9:63:09:ef:c1:ec:18:17:
                    c4:7c:7d:32:a7:8a:e6:3c:b3:d8:c8:20:77:80:cf:
                    ef:5f:d8:0a:ba:73:65:20:f2:4a:58:e0:8e:ec:4d:
                    44:de:f4:e4:68:f3:1c:07:a5:ce:94:26:94:9d:28:
                    eb:9c:4b:9e:85:63:1f:09:cb:ca:15:d1:70:48:49:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:29:B6:03:67:81:4B:4C:2C:27:16:9B:BF:B1:D3:35:E9:44:19:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8f07e34-9f0c-3c77-ba0c-591201623470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:f3:c7:e4:98:16:ba:3a:e8:f5:dc:81:71:5b:1f:62:ca:
         10:76:27:2e:fc:a5:ee:bb:13:91:36:32:ec:26:56:b9:96:d5:
         5f:e8:05:8a:26:65:07:4d:47:8b:75:5c:46:a2:99:4b:30:70:
         f3:89:ab:37:62:ae:f3:88:04:75:6f:95:83:af:55:ac:72:f1:
         0c:57:19:5f:41:a5:26:86:8a:3b:93:8d:bc:7a:cc:00:6f:f8:
         6e:d6:54:d4:37:21:96:c5:eb:b6:b1:eb:18:e0:28:c2:b5:7b:
         6e:58:bb:2c:f4:bf:cd:59:63:e8:33:fa:1d:d4:c1:1c:33:ca:
         6f:e4:27:67:f1:65:5c:27:8a:49:6a:70:db:1e:9f:29:02:9d:
         78:87:f7:1c:3b:ff:c0:9b:6f:70:08:d3:ed:fd:e3:5d:e8:4c:
         53:34:e0:b1:0e:58:90:28:8b:73:f9:f5:ce:cc:2d:0b:36:eb:
         bb:46:4d:d8:c8:b5:07:3a:e5:1e:40:2b:c6:e6:2f:41:88:c5:
         31:1d:da:02:b7:e9:ef:b8:a4:94:f5:c7:d3:1d:32:27:df:0c:
         a7:ed:a6:dd:e3:c4:78:ab:5c:37:a9:ab:dc:d2:1e:d0:0a:0b:
         20:2c:09:9b:ba:30:c7:6c:1c:1f:31:af:e2:05:49:06:0b:48:
         49:96:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:03:18 2026 by rpki-client