Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa
File:                     162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa (raw, json)
Hash identifier:          3LY+eYHfg/LgatbWneWYTwGceV+wwSpQ+kdEhnf3HTc=
Subject key identifier:   0E:FA:CC:00:42:C4:20:89:4F:E9:AB:8B:1C:C0:6C:0D:69:D5:F6:7D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DE2C29EE70A6976AD5240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        96.36.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:e2:c2:9e:e7:0a:69:76:ad:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f392de0e-6564-4d1e-acfe-600eab53fc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:5d:45:ad:ad:3d:90:9b:72:41:9c:5d:1f:
                    d0:4c:60:5d:1d:7a:1a:96:60:c2:55:87:0c:7f:95:
                    72:6f:29:b5:bd:78:87:05:a6:74:2f:d8:bf:1e:39:
                    70:36:61:d4:f5:bd:dc:1e:78:e6:0e:39:62:25:21:
                    d7:fc:af:1b:f8:49:e9:5e:9e:f0:f3:68:b8:1b:0f:
                    04:32:ad:3a:68:14:fa:22:dc:58:84:3d:06:e1:9a:
                    91:d9:ca:ce:a8:3a:73:a5:ce:83:99:ce:df:42:eb:
                    61:c9:5f:c2:20:86:c4:40:61:2d:d2:75:5a:dd:dc:
                    8a:b3:b3:57:f1:11:d0:34:41:83:66:90:2c:92:87:
                    1a:2e:92:c2:aa:75:d1:58:b5:2b:f3:80:bc:08:c2:
                    3a:c6:0d:c5:f0:f8:58:0e:23:3b:ed:4a:4d:53:1c:
                    68:98:d6:ca:ac:1d:e4:33:88:a7:c9:dc:92:0c:ee:
                    7c:d6:75:3a:4d:82:ba:1c:43:e5:10:54:a1:cb:84:
                    86:8a:52:87:b2:f0:4d:59:61:6c:5f:ab:73:37:dd:
                    16:3c:4d:de:58:ab:0b:45:00:bf:01:02:87:f9:2a:
                    9e:99:68:b2:a0:73:47:1b:20:ce:d4:cc:0a:d0:30:
                    b1:f8:20:31:a7:ff:26:62:fe:b5:2a:01:ab:b0:97:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:CC:00:42:C4:20:89:4F:E9:AB:8B:1C:C0:6C:0D:69:D5:F6:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f5:20:ba:f1:ad:57:ea:d3:10:26:b0:39:28:6e:af:72:96:
         9b:4c:da:3e:1d:e7:f5:d8:12:de:7d:6a:ee:cf:50:66:0d:31:
         26:f7:8e:8b:9c:02:c8:6b:9f:30:8a:75:c9:65:fa:ba:a0:bd:
         27:3a:10:2a:ae:25:29:42:45:b5:3d:9a:3e:fb:e8:6b:f3:aa:
         6b:f5:5c:92:af:f7:67:18:07:3e:64:2c:bc:ee:f2:19:75:66:
         b1:a0:ab:95:00:e2:c5:08:ea:16:32:ad:de:7b:97:0d:71:ab:
         19:43:de:d3:7f:e0:ff:95:3b:0c:cb:47:92:02:b4:5b:a5:30:
         6d:e6:3d:57:ec:33:45:4d:08:cb:7f:05:9c:5c:a9:f5:ff:ef:
         4f:72:72:39:87:1c:81:2e:eb:26:a2:d3:97:ff:3e:c5:5d:44:
         d7:6c:22:b6:95:62:f4:7e:01:8e:ed:a4:bb:6c:6e:84:67:4a:
         ba:f2:6f:a8:c5:65:3b:e7:cd:db:57:b7:01:a2:8b:83:95:04:
         f7:8c:32:ec:33:2f:dc:3e:da:17:c7:46:41:27:78:ff:c7:13:
         d1:f5:1d:a6:ba:75:9e:0d:ed:bb:82:1e:e3:b0:e4:85:13:6a:
         6d:03:44:63:da:8f:2a:35:62:4f:cb:92:67:30:0e:d7:c0:ae:
         9c:d2:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:18:23 2026 by rpki-client