Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fa077221-59f4-3b53-92fb-b10ff203bdf1.roa
File:                     fa077221-59f4-3b53-92fb-b10ff203bdf1.roa (raw, json)
Hash identifier:          y1Q0gaCw9ce9W/YX+ZiiGBDygUbbSIaa9cyvee2hFUM=
Subject key identifier:   6B:37:BC:36:7C:A0:A0:2C:3A:D3:AF:5C:3E:39:32:C2:32:48:18:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE72E6C36E852D9642580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fa077221-59f4-3b53-92fb-b10ff203bdf1.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        75.136.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e7:2e:6c:36:e8:52:d9:64:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=12c3858f-6954-43dc-894f-93f684373941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:16:fa:18:2d:56:51:b3:6f:9d:b3:9d:7d:
                    76:3c:95:db:0a:87:72:8c:6e:f7:f1:9a:c6:89:fc:
                    0d:1b:67:91:ee:a4:98:91:e9:4c:e6:8e:90:47:ad:
                    4f:1f:0e:f0:a3:16:7e:62:b3:61:db:b5:0e:d4:28:
                    78:a4:19:77:09:7f:18:c7:73:d1:43:26:15:4b:4b:
                    e2:20:81:1b:b4:e1:12:53:ae:a2:20:09:35:23:02:
                    3f:ac:73:9b:05:2a:d1:26:17:19:f3:e9:19:96:37:
                    2a:79:9b:ef:7b:3f:a5:00:a4:cf:c6:56:2b:79:38:
                    6d:c8:56:d5:4e:0c:10:b4:92:76:94:80:43:f0:5c:
                    ed:e6:9d:06:2a:63:d3:9b:cb:e2:90:10:80:33:82:
                    fd:56:3f:85:ae:65:1a:46:69:68:b9:b5:20:87:41:
                    64:6e:73:2a:62:6a:5d:c8:ae:db:84:ee:10:ea:fd:
                    e7:4a:57:74:48:2a:b6:25:35:d8:ff:af:29:5c:e4:
                    85:31:29:12:07:6a:b2:1a:26:93:06:49:c6:e1:a1:
                    2f:43:f9:81:93:90:e4:7a:29:7b:85:31:60:7b:36:
                    4c:bd:30:06:d6:75:4a:7d:ad:45:39:47:9a:24:c5:
                    02:95:c6:50:da:fe:3f:15:5b:09:79:b6:a8:87:d5:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:BC:36:7C:A0:A0:2C:3A:D3:AF:5C:3E:39:32:C2:32:48:18:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fa077221-59f4-3b53-92fb-b10ff203bdf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.136.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:df:66:0d:d0:36:36:8b:ff:c6:d1:1c:a0:54:11:24:bd:69:
         ce:3c:e0:fa:82:a0:9c:5a:f6:62:0f:6f:69:88:cd:58:e8:d9:
         17:4f:ef:40:b9:ce:5f:86:a0:a1:06:43:c6:2c:f8:e0:4d:8f:
         1f:9c:55:a5:02:49:9e:fb:c4:6f:a6:60:b2:aa:2d:34:ed:ad:
         80:4e:43:83:f0:61:cf:bb:02:1a:87:17:eb:10:2a:76:27:89:
         50:86:4c:cf:2a:67:fc:a7:a5:dd:0b:28:fe:68:46:53:9e:77:
         e1:12:29:b3:76:4f:02:6a:a5:b9:32:35:27:f7:de:be:e6:f4:
         30:c9:45:5a:49:00:58:b4:da:2e:1d:39:eb:ad:6f:10:a2:fb:
         1f:4f:9d:f9:03:bf:3f:cd:db:c7:49:80:42:13:db:cf:8c:69:
         45:29:ca:fe:2e:0b:62:00:f3:8f:c3:4d:04:a0:41:15:35:59:
         8b:04:3a:42:e0:d6:c1:86:08:53:87:79:44:7e:a5:43:38:f3:
         af:3d:2a:59:e5:e0:05:b6:69:d1:a7:39:38:dd:c5:d7:9d:73:
         26:7b:88:46:bb:4d:52:2b:b8:1b:40:fd:32:6f:89:62:4d:e9:
         dc:1c:2e:e6:32:e6:39:a2:0c:69:b9:23:ce:df:84:08:55:ce:
         2a:15:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:42 2026 by rpki-client