Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f4873a4-5725-3307-80b4-8835c66518c3.roa
File:                     1f4873a4-5725-3307-80b4-8835c66518c3.roa (raw, json)
Hash identifier:          MPfSzxdYq9J46Xt8CPA1aCIt9jOKnCx1G/PGHqfCdJo=
Subject key identifier:   D3:54:7E:89:53:B7:20:90:34:F8:F5:FA:0B:42:8E:3C:89:B6:AB:44
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD0C3D33852455E00D3E8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f4873a4-5725-3307-80b4-8835c66518c3.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.215.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d0:c3:d3:38:52:45:5e:00:d3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=6df1e807-8c6f-4885-8d05-0f6d41ba9f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:e7:09:9a:8d:ae:47:62:35:29:09:ba:3b:
                    2c:60:d9:fc:47:11:3e:e6:ac:07:6c:a3:b2:8f:c6:
                    a6:83:75:15:ff:85:84:98:6f:93:f3:6f:33:cd:7d:
                    d4:73:43:e1:1f:61:96:cf:c1:06:8b:45:31:b5:96:
                    9e:d8:de:c7:8e:e5:80:a3:46:14:b2:15:6f:a4:93:
                    ef:87:11:a7:44:d1:42:fd:69:8c:b5:95:82:b9:f0:
                    ca:08:5a:c2:aa:7d:2c:0f:e8:5d:d1:53:31:05:0a:
                    1c:7f:c2:8f:b8:a1:62:12:b0:c9:00:d8:4d:3b:b7:
                    ec:fc:6d:65:69:fe:ed:3c:d5:d0:f2:72:e0:42:4b:
                    0f:5f:8c:af:f6:41:12:3f:e9:26:15:0f:8d:83:15:
                    c5:2e:8b:42:fd:0f:d8:f8:25:bb:7d:0c:79:ae:e7:
                    cc:e5:b5:4d:a8:54:9e:1f:7d:c1:65:4a:78:e6:27:
                    b8:bc:55:2b:f1:ab:a8:a7:e2:bf:b1:ad:68:6a:f0:
                    0f:57:f6:6d:df:05:b5:ea:b7:f7:18:53:45:ea:90:
                    41:f7:bf:58:83:9a:05:71:5e:ee:ca:29:b7:29:92:
                    76:74:63:2d:4a:3f:3e:ee:9f:fc:e8:2e:23:0c:27:
                    3f:81:19:09:16:b9:14:fd:67:8e:f9:ce:cc:f4:b5:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:54:7E:89:53:B7:20:90:34:F8:F5:FA:0B:42:8E:3C:89:B6:AB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f4873a4-5725-3307-80b4-8835c66518c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.215.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:c9:9e:b2:fb:5e:1f:19:0b:eb:31:7a:f6:8a:6e:50:e6:
         93:7d:fd:18:a1:f8:30:5e:a0:e0:05:a5:99:03:1e:08:26:88:
         82:e3:c4:e7:b3:62:0f:79:4c:79:53:e1:72:22:6e:89:82:7f:
         3e:d9:2e:eb:30:4d:cc:81:1e:78:f3:10:26:e3:e5:1f:76:52:
         ea:82:e7:78:6e:f4:ca:b3:63:00:32:77:8b:e5:29:b3:74:fc:
         a7:f1:4d:31:07:b2:42:d2:a2:bb:0e:a5:b9:75:7e:cd:6c:98:
         9d:ba:3f:b3:3f:ed:1b:87:1a:11:e5:dc:b2:8e:6d:49:e9:51:
         d8:90:0d:dc:22:73:d6:e0:81:cb:d3:72:f1:1a:94:66:09:f4:
         7b:97:88:6c:f5:45:56:a9:5c:13:81:c3:ff:70:4d:de:07:26:
         fb:fd:76:cd:ab:4e:0f:11:ec:1f:2c:95:61:85:7a:ab:91:23:
         ef:bd:cf:55:c0:66:eb:d3:33:50:80:fb:f2:6a:c6:e2:2b:5b:
         98:e4:c0:7f:47:89:dd:0e:b8:f0:86:0e:f8:fd:63:ab:66:15:
         63:94:35:72:1c:a6:15:41:31:95:ac:20:2c:31:04:74:16:60:
         f6:fe:b1:2d:46:e6:02:ce:01:17:af:07:f2:4a:9e:b9:91:c1:
         06:95:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:15:16 2026 by rpki-client