Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc2c1a97-392a-37e4-95b8-a699b610566a.roa
File:                     fc2c1a97-392a-37e4-95b8-a699b610566a.roa (raw, json)
Hash identifier:          rvlqzdbpJvsif4Utrwrf0AUXwan+mvzVs+LLgckVegc=
Subject key identifier:   8F:9A:81:8B:A6:FF:64:37:55:1D:DF:38:46:DE:3B:B6:0C:21:62:2F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB87BB68D2008096F6D1E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc2c1a97-392a-37e4-95b8-a699b610566a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        75.134.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:87:bb:68:d2:00:80:96:f6:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=65e61e62-916e-422e-892b-761afa79df62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:03:1e:6d:93:76:ba:c6:b6:5e:ba:03:da:
                    23:6b:3b:c9:88:77:01:ba:20:0e:ac:c4:d9:3b:f6:
                    63:f1:ad:33:24:fe:ff:f6:93:85:41:4a:c0:24:1f:
                    50:15:e0:73:d5:7e:d5:b8:bb:43:06:43:cf:70:27:
                    12:b4:ab:14:9e:5c:a5:e8:9f:ec:9b:0b:c4:20:b2:
                    89:a9:5c:f2:b0:18:5f:ca:57:85:5a:c5:b0:f6:f6:
                    24:05:ea:33:cd:be:e5:e4:71:8f:47:20:c2:6e:29:
                    3d:30:16:57:db:af:b8:cb:1e:ef:7a:d2:aa:5d:01:
                    5f:65:e1:28:8c:a8:5d:9a:49:83:be:28:bd:6b:8b:
                    e3:b3:ef:e2:10:2d:98:83:d8:f1:14:75:b5:0e:12:
                    ee:40:50:78:15:c4:e7:3b:67:f8:ab:c5:f9:85:05:
                    62:b5:b1:23:ee:88:8c:19:6d:bb:98:28:28:5d:bc:
                    bf:df:b9:44:6a:17:5d:2a:54:88:b0:47:4c:20:a5:
                    45:f2:b0:29:35:fb:f1:2b:57:46:93:b2:97:ef:ce:
                    d7:57:a2:bb:9e:57:fc:0e:ea:00:49:18:67:8b:c2:
                    fa:50:06:87:8d:70:86:cd:76:d6:f8:81:17:ee:fb:
                    26:30:ec:c6:5a:46:16:25:f8:93:42:d1:48:6f:c5:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9A:81:8B:A6:FF:64:37:55:1D:DF:38:46:DE:3B:B6:0C:21:62:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc2c1a97-392a-37e4-95b8-a699b610566a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.134.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:00:01:e5:a4:45:f0:ff:9f:f1:5f:16:55:f9:93:63:b0:
         e4:b4:6b:97:f1:fb:20:af:e5:4a:9d:dd:2a:e8:b5:7a:96:6d:
         20:e4:79:b9:43:01:29:79:41:68:0d:d3:32:95:4f:1e:8d:26:
         8c:a7:02:07:a1:3c:50:4c:66:4e:79:e6:84:a8:e5:67:ed:33:
         0d:d5:26:6e:7a:b8:85:c5:f7:dc:f7:2e:a3:5e:e8:e9:f2:7c:
         79:f6:5f:b4:78:de:95:63:a1:de:36:64:ab:6b:35:61:7a:b9:
         40:8e:c6:6e:b9:41:67:37:33:d8:59:04:5b:74:0a:7b:39:ee:
         b6:36:4e:57:70:21:dc:43:2f:c7:ec:30:cc:81:0b:73:10:52:
         e1:4f:00:92:34:d0:96:c2:4b:f4:e9:6e:a4:ac:78:53:e3:f6:
         e5:fc:95:05:28:50:d4:cf:a0:51:6d:bc:7f:bf:d2:53:5b:e4:
         67:d5:43:f2:2f:c4:36:39:e5:ae:a5:45:21:4d:11:36:8c:e4:
         29:88:34:13:dc:da:c8:f0:ba:d7:5f:b4:cf:9a:43:80:b6:e0:
         b3:72:89:60:cc:05:64:49:9a:da:9f:ec:f3:d8:3f:77:44:9e:
         62:3e:50:87:c5:1c:05:92:dd:1a:6e:3f:41:21:1f:fc:2c:01:
         de:77:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:34 2026 by rpki-client