Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d2b6ed0a-887f-3b99-a5d7-6487759176ab.roa
File:                     d2b6ed0a-887f-3b99-a5d7-6487759176ab.roa (raw, json)
Hash identifier:          Z9x+yg8eL88wKD64PoaWyRa489gVZz+HfOHGKWjmkSI=
Subject key identifier:   1A:02:56:FA:27:8E:FB:49:60:CA:3C:2E:1E:0C:83:EA:CB:06:43:C4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584DB7703F7847B9B299F1714C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d2b6ed0a-887f-3b99-a5d7-6487759176ab.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     20115
IP address blocks:        159.111.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3f:78:47:b9:b2:99:f1:71:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=67361ed0-1f77-4e73-95ad-b8b3bb062045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:15:d6:4a:0c:b6:0e:4a:a9:b9:6d:eb:e4:
                    91:f1:d1:15:18:2c:b9:51:c3:cc:2b:16:14:e9:9f:
                    41:52:5f:87:fd:4e:be:3b:54:b4:7b:57:85:15:86:
                    b4:52:4f:cf:d1:a1:97:7d:14:c2:05:5f:54:77:73:
                    d1:7e:d0:df:da:0d:48:05:ec:f5:e0:18:2b:93:2d:
                    b6:e8:ba:19:ba:ee:e6:57:0c:99:0c:91:3b:12:b2:
                    26:a6:3a:73:66:fb:55:93:7a:6d:e2:bc:ef:15:74:
                    d7:43:a1:f7:6b:c4:bc:d8:08:d0:ac:e2:29:86:84:
                    02:b3:0d:bd:1b:c7:cf:e9:e4:22:56:26:54:45:a2:
                    0d:17:6c:4f:8f:c8:a1:d6:5d:ca:56:81:11:dc:01:
                    fd:c3:a0:f3:76:56:58:0e:e5:44:e8:30:b6:63:8e:
                    c0:65:b5:b8:4a:91:92:66:c7:30:83:a9:fe:5c:f6:
                    02:8b:6d:24:e5:9f:5b:1f:5f:30:c9:55:e4:bd:07:
                    eb:ea:47:c1:16:c8:2c:f9:80:71:5f:f7:f7:e2:26:
                    49:b7:70:cb:c8:74:96:7d:77:6d:7d:60:14:7f:80:
                    71:27:45:23:33:b4:e8:04:db:f5:00:49:da:d5:0e:
                    35:7a:cd:f8:4b:92:5f:93:90:72:25:49:14:27:ff:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:02:56:FA:27:8E:FB:49:60:CA:3C:2E:1E:0C:83:EA:CB:06:43:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d2b6ed0a-887f-3b99-a5d7-6487759176ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:df:70:cd:64:fd:1a:43:ef:69:2e:10:50:8b:e9:4c:f4:5f:
         97:e1:cc:da:b8:71:bb:f6:22:42:84:74:e5:d7:22:2f:4d:e8:
         04:fd:f1:2e:a7:73:22:3e:d1:38:10:a8:a8:fd:6e:c5:1a:eb:
         46:2d:84:2f:00:6b:08:ed:46:25:54:f0:c8:76:c7:40:63:4a:
         1a:5f:0a:59:b3:da:13:e8:7e:77:32:83:43:e3:c0:93:bc:5d:
         72:9c:81:d6:49:15:09:25:f9:cd:91:bb:4f:b3:b0:ca:99:d6:
         2a:6e:69:9a:48:b4:79:39:b6:48:db:66:bf:54:af:46:ba:cd:
         c5:5d:48:d4:dd:de:c9:51:72:f5:53:1d:dc:53:54:0b:02:35:
         d5:f1:97:b7:b1:45:09:e1:10:8a:36:3b:b7:15:78:0c:73:1b:
         79:6f:cb:7c:50:9b:44:aa:f1:0e:75:7e:e9:ec:74:df:17:57:
         ac:b5:2e:9c:f8:5e:bf:fb:b4:8c:e3:6f:2e:fc:30:12:ff:e5:
         c7:97:6c:14:96:d9:1d:2b:93:9f:9e:ba:f8:f2:3f:1b:89:af:
         36:ad:6d:39:03:9e:48:21:b2:06:4a:51:b5:2f:39:ef:f2:a8:
         dd:c8:41:03:a4:b4:be:08:41:80:98:c2:d3:9b:5f:22:12:50:
         2f:ef:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:07 2026 by rpki-client