Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/19c98e7b-5570-3232-9865-df9a5e62314c.roa
File:                     19c98e7b-5570-3232-9865-df9a5e62314c.roa (raw, json)
Hash identifier:          GXU5xmu/hs8tC55MGZvNlwRQeLL4t6kurMSvcHves4k=
Subject key identifier:   F7:49:BA:50:97:2D:49:A4:7B:4E:31:02:4D:7E:35:15:8D:D5:5E:77
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F5DCD820F123D53ED90C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/19c98e7b-5570-3232-9865-df9a5e62314c.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        97.95.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:5d:cd:82:0f:12:3d:53:ed:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=a23d9d87-1b05-4ba6-81a1-33013d3ea983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:b4:00:4d:5e:f4:1a:29:23:5c:a1:99:82:
                    80:f2:e6:71:86:91:ae:f5:3b:48:5a:2b:09:77:63:
                    ca:89:3b:e1:da:d2:f7:27:73:d6:c4:80:8f:5d:9f:
                    c1:cd:4a:59:a8:af:be:f9:ed:f9:e4:96:31:81:3f:
                    7e:6f:c7:77:f5:59:b8:19:1e:9e:c7:7b:d8:a2:ea:
                    ad:bf:ec:32:1b:6e:ba:cd:51:d1:fc:06:86:49:94:
                    9d:62:43:f5:6d:dc:3b:83:14:c8:db:c9:11:3c:c1:
                    21:69:00:1a:d1:db:c1:b1:37:52:e1:36:8c:16:a1:
                    79:41:d7:57:0b:cc:4a:0f:01:9c:b4:03:f9:62:ed:
                    22:06:1c:70:76:e2:41:c9:7e:f1:d2:a4:ce:57:2e:
                    d7:7f:65:d4:b9:cd:a3:2f:dc:97:97:27:ea:ab:06:
                    6d:99:4d:0b:40:24:9a:f1:cb:43:04:f5:e9:5d:b7:
                    38:bb:84:a3:ce:13:d2:28:8f:c0:23:33:38:8f:44:
                    b0:75:e6:a6:05:cd:94:e5:14:53:2e:e6:6d:51:eb:
                    a1:28:1d:4c:90:81:8c:9f:9b:a6:3f:68:31:9d:b3:
                    ba:74:a4:66:12:ff:88:55:c4:0f:42:fb:1e:6d:cc:
                    b0:d7:06:f6:57:77:1c:40:89:dd:4e:16:23:85:92:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:49:BA:50:97:2D:49:A4:7B:4E:31:02:4D:7E:35:15:8D:D5:5E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/19c98e7b-5570-3232-9865-df9a5e62314c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.95.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:43:c9:4e:9e:4f:4a:ce:92:6e:63:76:cf:e4:ae:3b:35:79:
         02:dc:90:dd:8a:46:f8:af:32:d1:00:8e:6d:16:5e:95:10:5a:
         8e:cf:b1:5e:8b:6d:b4:20:c2:97:aa:42:c3:cf:f1:35:2f:f5:
         9a:a5:80:5f:e8:ab:33:95:4d:00:42:1b:bf:b3:90:76:7d:56:
         2d:aa:88:0b:36:09:49:26:4e:de:8a:82:1a:99:70:49:67:0c:
         c1:69:94:9d:d4:05:a4:96:2a:84:7c:69:f1:c2:76:f8:92:fe:
         5a:83:1e:33:1d:b0:81:d9:a2:95:2e:af:ea:be:f9:6f:20:62:
         24:b8:b3:88:04:64:a9:da:b3:24:26:e5:30:a9:fc:d5:e5:d4:
         8f:ea:a4:b2:0b:c1:12:78:b2:fb:7a:69:e5:d4:ad:1d:0a:0c:
         8a:69:2a:ac:a8:15:96:35:b6:9b:7e:28:4b:85:98:c1:99:05:
         ce:15:ae:e6:98:1c:28:67:ea:e4:e1:b8:58:73:6c:35:7b:b3:
         34:69:e9:42:57:60:7e:69:33:b3:0d:d6:ff:ce:98:98:53:1b:
         08:7c:29:50:fa:04:63:ab:76:1a:98:f3:05:fd:79:e4:57:74:
         71:8d:c9:3f:29:a4:28:a5:10:91:14:c9:f4:45:68:66:a2:df:
         b7:d6:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:02:38 2026 by rpki-client