Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d47119e2-66f3-3edc-ac72-d8d0ee561366.roa
File:                     d47119e2-66f3-3edc-ac72-d8d0ee561366.roa (raw, json)
Hash identifier:          dacefNVLIiU1E4XWj1n5sfl17YxtBRvzmvheNwtGKZw=
Subject key identifier:   21:90:7F:01:60:E6:4C:80:D3:E5:8E:34:34:73:28:96:13:22:59:CA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB69D7ADAAC6D84D8E8980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d47119e2-66f3-3edc-ac72-d8d0ee561366.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.191.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:69:d7:ad:aa:c6:d8:4d:8e:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d40059ce-9630-4a9c-9064-52914f87ff0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:18:82:7a:8f:fb:8f:bf:2d:d5:ec:f0:2b:
                    71:ba:30:97:21:f6:bb:5f:90:ed:eb:3e:cd:4e:8a:
                    fc:0e:cc:95:43:c6:40:ad:6e:30:b7:5c:00:23:7c:
                    32:14:bc:bd:f0:8b:b7:47:bd:e4:c6:4b:86:3b:b3:
                    ef:52:c4:3f:6f:d6:8b:17:4b:ae:4f:5a:c5:b4:4c:
                    46:3b:cc:49:5c:30:e1:56:ba:9d:25:97:bd:4c:67:
                    f8:5e:a5:39:66:ba:bf:85:0c:bb:c1:5e:f3:9a:1b:
                    ae:6b:d1:fb:c9:af:ea:72:32:7f:f0:48:db:3a:6d:
                    5d:97:5c:69:73:84:9e:9b:1a:65:76:10:39:3f:88:
                    17:02:c8:b3:b7:e2:67:51:4d:c9:26:40:15:a0:77:
                    52:3b:b9:45:8d:e3:1d:c9:33:c3:ef:95:e6:5d:76:
                    26:f1:5d:70:43:4c:66:8e:52:8a:4a:1d:f7:3e:31:
                    8a:ec:09:13:49:6d:11:07:62:9f:02:1b:97:fb:77:
                    1f:44:73:97:43:f2:0d:4c:c5:8f:20:9f:6a:d7:cc:
                    09:bb:c4:af:49:c1:3e:a6:63:11:80:ac:56:49:90:
                    dd:61:96:f8:df:b1:aa:d9:d7:f7:91:b6:17:6f:84:
                    4f:92:f7:06:4a:5a:4a:99:b8:8c:4c:31:64:e6:3f:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:90:7F:01:60:E6:4C:80:D3:E5:8E:34:34:73:28:96:13:22:59:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d47119e2-66f3-3edc-ac72-d8d0ee561366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:07:2b:bf:b7:c1:e5:44:53:57:53:c4:fa:b8:30:b0:22:c3:
         04:11:b1:6f:83:97:ae:fe:42:07:c1:8f:0d:a6:a4:bc:32:ff:
         40:00:cb:dd:2a:8e:e5:4e:13:7a:fb:48:09:20:29:ab:f7:7f:
         23:dc:28:57:43:6b:f4:c9:64:bb:7d:b9:b1:50:ae:3a:1c:4a:
         4a:c9:4d:f2:04:ca:fc:16:b2:05:18:b5:1a:77:61:43:a1:a1:
         35:93:c1:3c:96:04:13:df:bc:21:cd:cd:84:c5:3e:6c:03:e7:
         2b:d8:a0:29:d5:3a:50:3a:e6:59:44:9f:92:89:d8:d6:43:04:
         30:29:f1:9c:3e:4b:04:43:33:e5:3c:43:c8:78:41:79:aa:04:
         0b:24:a1:d9:c1:9d:8d:00:8e:19:85:8a:55:60:b0:f5:46:6e:
         63:ad:46:f8:eb:d2:94:89:80:7f:d9:9f:37:95:72:33:a8:dc:
         76:68:b3:3d:46:dd:9b:4a:c7:9e:4b:1e:19:9d:f5:2b:55:ac:
         d0:33:a8:25:ea:c1:d3:d2:cf:a6:37:be:d3:1e:96:7b:93:19:
         ec:6e:ef:d4:99:3a:e5:6f:3e:ff:cc:ec:2b:33:80:5f:f7:7c:
         74:c9:c7:42:fb:31:cf:a5:8b:fa:3f:81:21:bf:7b:27:53:a3:
         0a:14:dd:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay2nXrarG2E2OiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZDQwMDU5Y2UtOTYzMC00YTljLTkwNjQtNTI5MTRmODdmZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCIYgnqP+4+/LdXs8CtxujCXIfa7X5Dt6z7N
Tor8DsyVQ8ZArW4wt1wAI3wyFLy98Iu3R73kxkuGO7PvUsQ/b9aLF0uuT1rFtExG
O8xJXDDhVrqdJZe9TGf4XqU5Zrq/hQy7wV7zmhuua9H7ya/qcjJ/8EjbOm1dl1xp
c4SemxpldhA5P4gXAsizt+JnUU3JJkAVoHdSO7lFjeMdyTPD75XmXXYm8V1wQ0xm
jlKKSh33PjGK7AkTSW0RB2KfAhuX+3cfRHOXQ/INTMWPIJ9q18wJu8SvScE+pmMR
gKxWSZDdYZb437Gq2df3kbYXb4RPkvcGSlpKmbiMTDFk5j/XQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGQfwFg5kyA0+WONDRzKJYTIlnKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDQ3MTE5ZTItNjZmMy0z
ZWRjLWFjNzItZDhkMGVlNTYxMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQr8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEHK7+3weVEU1dTxPq4MLAiwwQRsW+Dl67+QgfBjw2mpLwy/0AAy90q
juVOE3r7SAkgKav3fyPcKFdDa/TJZLt9ubFQrjocSkrJTfIEyvwWsgUYtRp3YUOh
oTWTwTyWBBPfvCHNzYTFPmwD5yvYoCnVOlA65llEn5KJ2NZDBDAp8Zw+SwRDM+U8
Q8h4QXmqBAskodnBnY0AjhmFilVgsPVGbmOtRvjr0pSJgH/ZnzeVcjOo3HZosz1G
3ZtKx55LHhmd9StVrNAzqCXqwdPSz6Y3vtMelnuTGexu79SZOuVvPv/M7CszgF/3
fHTJx0L7Mc+li/o/gSG/eydTowoU3ZM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:32 2026 by rpki-client