Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d82be487-15c7-3283-b581-ea8fdfe4259e.roa
File:                     d82be487-15c7-3283-b581-ea8fdfe4259e.roa (raw, json)
Hash identifier:          L41VwtoaCZqaEfxrIo83xL9BuLv8GZ1UerdIRZ2tDT8=
Subject key identifier:   E3:DC:AD:19:34:D9:46:A7:5C:AA:EC:F9:A1:A2:3A:E2:06:22:62:72
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CACBFB20220D32457C8600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d82be487-15c7-3283-b581-ea8fdfe4259e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.190.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:cb:fb:20:22:0d:32:45:7c:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=abe47aa3-6158-480b-b492-611d21d0a026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:09:fa:d9:91:08:3d:58:5d:d6:a9:d9:f5:
                    b4:ad:c7:9c:e3:36:da:99:bb:aa:e0:3b:1b:54:58:
                    92:21:eb:4c:78:20:63:8b:6f:6f:61:03:1a:aa:ea:
                    99:6e:c0:ba:68:8d:a8:97:1c:1d:79:79:6e:0d:9c:
                    d1:df:23:45:8d:be:af:0b:eb:0d:b5:b8:da:2d:72:
                    4f:79:32:99:8a:ec:87:c4:55:cd:da:55:7d:fc:be:
                    7e:1b:c5:92:c8:ba:fb:13:46:03:a0:6a:c2:69:1b:
                    f9:18:45:e4:d3:fd:18:77:3e:87:d1:13:3a:0d:a0:
                    20:9b:74:ad:34:7b:84:b0:7c:d9:c2:09:60:33:e1:
                    f4:60:8e:2c:61:12:b0:74:6d:1b:1d:c4:05:55:be:
                    2b:2c:d1:59:0e:7f:10:2e:b5:51:3a:bf:6e:8b:60:
                    36:c3:55:15:43:30:b8:0c:db:2c:5f:f6:2a:20:80:
                    38:86:72:d2:21:12:f3:54:ac:49:7e:cc:11:8e:e4:
                    14:7c:61:fd:6a:a5:ef:79:8f:3c:af:d6:7f:2c:10:
                    1b:f5:67:13:17:6f:0c:41:a2:9f:ae:40:12:d5:6a:
                    df:70:0f:dd:85:50:02:9d:83:1e:50:4f:10:bc:78:
                    40:ba:06:e4:26:29:0c:69:c2:07:e2:f9:69:59:9f:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DC:AD:19:34:D9:46:A7:5C:AA:EC:F9:A1:A2:3A:E2:06:22:62:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d82be487-15c7-3283-b581-ea8fdfe4259e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:d5:ce:c3:5d:7b:ad:2a:44:ff:5a:96:de:7b:81:32:31:
         64:66:4a:f1:4c:c7:72:e4:1d:7e:b2:0a:5b:a2:f9:5f:25:28:
         19:22:e3:ad:6a:cc:ad:e8:86:ff:5a:ff:e6:58:b2:ce:7b:9a:
         2c:47:e0:6e:43:3c:a9:f8:8b:27:22:f5:96:f1:31:2f:2e:5f:
         0b:ab:56:9e:6a:5e:5b:72:e9:2e:61:92:fd:0b:ce:42:e7:4f:
         ff:b9:a2:38:c0:73:46:cf:3e:46:e2:3a:56:f7:1c:91:0f:25:
         1f:c6:18:79:9e:84:f7:15:c8:48:33:ed:8e:80:3d:8d:c9:00:
         2c:c4:49:d0:83:5d:3e:b9:89:1f:cd:7f:8c:55:7e:a4:49:eb:
         49:45:28:6d:43:6f:98:69:b8:22:81:93:4e:67:00:98:09:57:
         86:77:96:4b:47:ac:cf:d5:80:4b:9c:aa:a3:9c:fd:c8:ea:a9:
         3f:c0:24:f9:6f:93:39:75:e5:42:de:a5:fa:2c:86:d9:a8:e4:
         fd:2e:0e:92:27:89:e7:1e:f9:69:9c:9e:97:9b:24:ce:16:f3:
         9f:e0:4a:75:70:64:39:a6:3d:bf:99:84:55:74:e1:f6:a6:61:
         d0:26:6c:a8:49:bd:4d:08:bd:f2:d0:36:64:15:82:58:12:92:
         a8:93:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:16 2026 by rpki-client