Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/caec6f68-397a-3351-9dc7-f51ea826c296.roa
File:                     caec6f68-397a-3351-9dc7-f51ea826c296.roa (raw, json)
Hash identifier:          JuJTYSQ4PZMSQc/TCkZFx8Z8ubn7QKr4RfUjzOto8MM=
Subject key identifier:   6C:E4:99:89:D3:DB:AD:EB:7C:DD:04:32:BC:50:10:99:ED:98:52:8D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F55F5DB9F190516D2E720
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/caec6f68-397a-3351-9dc7-f51ea826c296.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     22677
IP address blocks:        75.129.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:55:f5:db:9f:19:05:16:d2:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=14affde5-b19f-43a7-8a39-f24f463f8bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:2f:4b:82:74:7c:0d:49:5a:45:42:6a:24:
                    47:39:b3:34:e7:6c:4b:bd:40:3b:7c:62:d0:a9:d6:
                    5c:05:f3:da:a7:41:7f:cf:2c:bc:22:fb:78:44:4a:
                    c8:68:e7:d5:a1:cf:70:69:5b:1d:f3:fe:ff:e2:15:
                    3f:51:08:45:32:2f:e3:c8:0b:6d:ca:ff:5c:a7:c6:
                    f9:fd:98:b2:35:fe:af:96:db:89:fe:13:a5:f2:fe:
                    e5:48:86:3c:87:84:9a:30:94:ef:e1:47:60:52:e0:
                    58:c7:93:a1:29:01:d0:c4:5c:ca:83:52:70:78:a3:
                    99:ec:b2:6d:57:99:88:8b:17:29:ae:98:ab:f5:8d:
                    80:b0:36:37:56:fb:9d:61:01:78:02:ad:ea:2f:c5:
                    12:e3:ff:56:be:89:72:bf:e3:f5:f2:41:df:43:98:
                    6e:9b:33:a4:cc:69:a6:0f:f7:fb:23:8a:92:51:97:
                    b4:85:ca:b3:89:a3:68:95:ec:81:8e:80:f3:72:4f:
                    7c:21:d0:59:01:70:08:63:99:11:a1:68:54:87:e1:
                    75:d3:31:00:d1:f5:1a:3c:29:6c:44:7d:ed:ff:23:
                    66:48:42:69:01:af:63:74:9a:83:3d:08:d4:4d:ec:
                    79:90:02:63:63:27:a5:69:da:de:3a:39:20:70:cd:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:99:89:D3:DB:AD:EB:7C:DD:04:32:BC:50:10:99:ED:98:52:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/caec6f68-397a-3351-9dc7-f51ea826c296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.129.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:1e:af:9d:e3:26:c3:0f:03:cd:61:fd:bb:5d:bd:1e:33:
         fd:3e:b9:45:0f:fb:20:e7:21:0f:89:e3:47:61:e6:5d:9e:27:
         02:b4:8e:a6:31:64:4f:6b:c8:cf:d8:e7:d3:09:c3:6b:ad:53:
         4a:4b:d4:7d:b2:28:c1:3f:d9:7d:0e:6c:cd:7b:e5:ba:d1:b9:
         c6:b4:b0:34:35:fc:6f:a0:12:f2:6b:87:f1:31:f8:c1:b3:6e:
         3f:86:0b:93:f7:a4:4c:bc:6c:ec:06:ae:fa:55:18:01:b7:c1:
         dd:ad:9f:50:ae:4a:7c:4a:89:44:8e:d6:d5:a9:21:16:9e:13:
         1c:40:a6:38:9f:75:57:1a:c2:fb:82:79:22:9c:49:a2:20:8b:
         1c:32:9e:59:30:1a:a8:50:98:1b:c5:61:91:c3:aa:2e:6a:f0:
         13:0a:c2:40:f4:51:ff:df:01:8a:8f:be:1f:20:b7:c7:89:40:
         98:a0:b6:9d:63:92:b3:2e:e6:fe:28:db:6b:55:a5:83:2b:29:
         70:24:10:d8:d7:28:ca:a7:a9:14:e2:7e:dc:ba:3a:f2:03:e7:
         6a:78:87:b4:5b:ff:ac:ea:11:45:6b:13:14:54:9c:e3:4c:01:
         6f:7c:21:4a:49:fc:95:fc:f6:09:62:49:88:fc:1d:9b:29:54:
         ea:72:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:25 2026 by rpki-client