Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc149141-051d-3fe8-8f15-17b2771d15c1.roa
File:                     dc149141-051d-3fe8-8f15-17b2771d15c1.roa (raw, json)
Hash identifier:          X+mDcW/H3KbTcMQWNMWRBY1mT8pbsvTQUjC7SquSiXU=
Subject key identifier:   01:13:F1:14:D6:56:60:C7:6F:96:64:6A:76:72:E9:D2:AA:34:C3:BF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB8B1E3CB701C64E88F740
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc149141-051d-3fe8-8f15-17b2771d15c1.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.88.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:8b:1e:3c:b7:01:c6:4e:88:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=0e09e8f0-3804-461a-9ae6-2fb2375192d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:dc:e4:2d:79:7b:aa:dc:fa:88:97:ab:f1:
                    ec:67:c9:42:4a:71:1c:ab:aa:17:30:58:2d:54:90:
                    eb:d3:2b:3c:03:2f:48:cc:7e:93:0d:28:a6:e2:80:
                    d7:c9:07:67:63:80:99:91:a2:5c:bd:02:5b:8f:2c:
                    a3:57:9b:ab:f9:40:56:53:14:d5:b2:bc:6d:53:76:
                    92:92:02:a6:3d:fb:f9:70:36:2b:21:ae:a9:ea:bf:
                    9b:06:f8:85:a0:af:80:bf:dd:6d:68:cb:6e:a1:3a:
                    bf:fa:5d:6d:0b:82:a1:3f:01:3d:1c:4f:9d:de:f3:
                    4c:f0:dd:0e:4d:99:f9:94:b9:08:68:95:f5:dc:63:
                    1d:8d:1c:c8:d7:0f:53:45:7a:67:14:73:b4:cb:41:
                    40:9a:b9:92:53:c3:9f:01:6c:f9:28:52:4a:b7:37:
                    57:8a:d1:03:a6:17:e4:04:5a:9a:d9:51:2b:f9:08:
                    b3:33:ef:fd:fb:d8:b7:bc:5d:0c:b0:a2:65:4b:9a:
                    fc:02:19:bb:a2:bb:2d:c5:4a:94:ca:15:bf:33:81:
                    3c:15:6b:45:98:88:9e:d6:01:ab:89:63:4f:d5:28:
                    89:96:26:e6:7c:ab:b6:da:a5:1f:6a:46:ed:6a:f6:
                    c7:e6:ca:7a:0a:91:69:bd:eb:aa:b3:d4:d4:38:d0:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:F1:14:D6:56:60:C7:6F:96:64:6A:76:72:E9:D2:AA:34:C3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc149141-051d-3fe8-8f15-17b2771d15c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.88.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bc:bf:44:16:0b:3d:23:c3:1b:d4:c4:9b:03:b6:05:f2:4f:
         82:5e:ad:2e:b7:70:06:d6:3f:8d:52:9b:a4:04:02:e6:21:ab:
         46:80:50:61:04:b4:53:11:15:b2:b6:59:c0:f1:9c:2f:75:e3:
         0b:6d:7e:8e:a0:2d:46:0d:b0:29:78:04:99:f8:54:ac:ec:ac:
         9a:79:04:ec:ad:70:89:bb:b1:b3:91:41:b9:ed:e2:29:88:fb:
         70:af:e4:ab:aa:58:98:40:83:da:b2:a0:4f:84:a3:ae:ab:c2:
         0e:6e:4a:8e:ca:d1:94:75:2f:4a:1f:2e:09:b7:4d:4b:61:56:
         89:7e:e8:40:0d:98:21:a0:4e:1b:b1:a1:3f:50:d2:bd:7c:13:
         21:1b:a0:67:d6:52:d9:b1:68:3b:b6:14:b2:d6:b5:c9:4b:22:
         9f:82:ad:65:72:62:70:ee:29:58:2b:e1:17:01:41:96:9b:90:
         19:c5:9c:f7:24:be:aa:d7:00:c8:82:66:cd:bc:3a:61:51:62:
         2d:ae:0c:70:69:8e:d2:1b:84:fe:d6:ed:72:f5:83:7c:a2:34:
         e8:df:62:03:13:96:3d:0f:be:ca:08:dc:56:59:d5:07:be:45:
         ac:b5:41:e4:fc:28:a5:e0:ef:6a:1d:9e:45:e3:75:29:0d:02:
         06:57:07:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay4sePLcBxk6I90AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MGUwOWU4ZjAtMzgwNC00NjFhLTlhZTYtMmZiMjM3NTE5MmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll7c5C15e6rc+oiXq/HsZ8lCSnEcq6oXMFgt
VJDr0ys8Ay9IzH6TDSim4oDXyQdnY4CZkaJcvQJbjyyjV5ur+UBWUxTVsrxtU3aS
kgKmPfv5cDYrIa6p6r+bBviFoK+Av91taMtuoTq/+l1tC4KhPwE9HE+d3vNM8N0O
TZn5lLkIaJX13GMdjRzI1w9TRXpnFHO0y0FAmrmSU8OfAWz5KFJKtzdXitEDphfk
BFqa2VEr+QizM+/9+9i3vF0MsKJlS5r8Ahm7orstxUqUyhW/M4E8FWtFmIie1gGr
iWNP1SiJlibmfKu22qUfakbtavbH5sp6CpFpveuqs9TUONAwIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAET8RTWVmDHb5ZkanZy6dKqNMO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGMxNDkxNDEtMDUxZC0z
ZmU4LThmMTUtMTdiMjc3MWQxNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKS8v0QWCz0jwxvUxJsDtgXyT4JerS63cAbWP41Sm6QEAuYhq0aAUGEE
tFMRFbK2WcDxnC914wttfo6gLUYNsCl4BJn4VKzsrJp5BOytcIm7sbORQbnt4imI
+3Cv5KuqWJhAg9qyoE+Eo66rwg5uSo7K0ZR1L0ofLgm3TUthVol+6EANmCGgThux
oT9Q0r18EyEboGfWUtmxaDu2FLLWtclLIp+CrWVyYnDuKVgr4RcBQZabkBnFnPck
vqrXAMiCZs28OmFRYi2uDHBpjtIbhP7W7XL1g3yiNOjfYgMTlj0PvsoI3FZZ1Qe+
Ray1QeT8KKXg72odnkXjdSkNAgZXB/I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:02 2026 by rpki-client