Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa
File:                     dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa (raw, json)
Hash identifier:          L1BQjfXbbErKeoQfqH7iumcvowgmfQ3L1DWbB/K5PgA=
Subject key identifier:   AC:B8:A6:6B:EE:07:79:7C:28:83:D1:74:D4:CD:6A:D0:90:55:7E:73
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE4B28369A9542EBABEC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        96.39.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e4:b2:83:69:a9:54:2e:ba:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=5f80acff-dec2-4fa5-a314-13a9324e6d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:c4:c7:5e:d5:59:de:0e:5d:2f:1f:12:8a:
                    ba:4c:88:f3:ce:a2:a0:d8:17:54:8a:92:27:f6:45:
                    1b:62:60:38:cc:7a:64:96:d8:0c:14:eb:f7:ac:d2:
                    fe:9b:11:36:72:c1:69:7c:2a:6e:57:d5:fb:0e:49:
                    41:38:56:68:ac:15:f7:31:3f:29:43:14:87:c5:df:
                    05:a0:12:bb:e3:ce:3c:46:65:78:8a:2c:1c:e5:a1:
                    e3:2b:59:97:18:da:22:02:27:d1:ea:4e:51:82:ee:
                    11:82:13:00:98:e5:4d:cd:d8:9d:2e:67:20:41:d4:
                    19:2a:dc:e8:54:4f:82:2b:28:62:93:71:73:98:b4:
                    e4:59:71:92:ee:46:1a:f4:15:b6:d2:39:cb:17:21:
                    61:b6:fd:f0:83:02:e6:92:78:87:3f:ba:f8:d9:ff:
                    ed:39:f2:02:de:8c:ca:31:89:18:95:8c:d1:a9:d8:
                    5b:40:92:2f:8c:ca:61:84:e5:dc:50:eb:59:d3:21:
                    51:e8:02:23:86:33:7c:0a:6a:88:8c:92:5b:87:88:
                    fc:1c:71:38:9a:c4:7e:17:4f:ca:0c:a1:6a:9b:c9:
                    74:0a:a6:cd:d6:ee:b0:f2:91:3e:56:85:37:cd:6c:
                    66:a1:ae:2a:6f:76:e6:4d:3e:48:1a:f9:88:2d:c3:
                    09:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:A6:6B:EE:07:79:7C:28:83:D1:74:D4:CD:6A:D0:90:55:7E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dc5531e9-9cf0-3fb7-8665-3f48c30da9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.39.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:76:10:ef:7c:7c:4b:e1:4c:3e:71:55:65:07:50:0a:a9:1d:
         ed:37:56:76:7f:b5:bd:be:9f:cf:e6:36:dd:f1:9c:ab:9a:6d:
         00:fa:43:d7:24:65:97:d5:84:38:51:ff:31:bb:b2:0b:ba:e4:
         e2:2b:a2:3d:0b:18:d1:a7:45:0e:7a:e6:76:e0:40:5d:98:45:
         a1:1e:b1:28:76:a6:7d:3a:7a:53:35:35:10:c5:27:d7:56:f2:
         7a:fc:fb:bd:f1:40:98:26:99:0b:e0:84:91:c3:31:14:3f:c1:
         50:10:8c:ac:e5:9a:19:48:51:c9:e1:b7:9f:fd:7c:01:65:2c:
         3b:43:24:da:38:22:a7:53:06:00:b5:17:9d:cd:1b:fc:03:00:
         52:1a:21:68:e8:92:c3:2f:41:30:01:3f:7c:b4:c6:c7:5d:1b:
         05:e7:9a:f7:3c:d3:61:ca:c8:08:70:51:bd:19:19:21:c0:3e:
         a3:28:66:37:a9:cb:14:e3:73:c0:51:02:eb:26:4c:0d:6b:16:
         6e:9b:33:a1:77:4e:1e:fc:52:2e:98:4d:46:86:9b:b2:12:81:
         20:99:b0:6e:bc:f7:f3:96:db:f2:2b:56:6a:80:e5:59:4b:5f:
         ea:a4:1d:02:a9:e7:bf:39:65:aa:a8:d4:90:48:f4:5a:39:0c:
         32:fa:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:39 2026 by rpki-client