Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47e3ac6d-0a41-3341-84df-b3156426eafe.roa
File:                     47e3ac6d-0a41-3341-84df-b3156426eafe.roa (raw, json)
Hash identifier:          h7CR2FmTNt/caAXgJXWTmff1qOLYq0Z12/xbHFoGH8g=
Subject key identifier:   5C:13:58:49:81:CA:99:F1:97:CB:57:C3:E1:4F:C1:A0:34:3D:55:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F4D92DEF4C6BDB85BC000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47e3ac6d-0a41-3341-84df-b3156426eafe.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        128.92.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:4d:92:de:f4:c6:bd:b8:5b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=d70d0223-a60c-415e-8fdc-9d044d686cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:e4:55:d4:59:6b:9b:ac:dd:1f:ae:95:ff:
                    5c:c7:79:f6:37:31:dc:aa:74:4f:01:98:ca:51:88:
                    e8:e3:fa:45:7e:64:7a:5b:63:2a:db:bb:89:c6:8c:
                    33:3f:a5:ab:e1:81:97:88:6c:ee:ff:c0:2e:a5:39:
                    b2:57:05:7d:f1:33:ff:05:f5:92:b6:7b:cd:a5:ad:
                    2d:25:71:13:29:09:d6:43:2c:93:05:c5:5d:b4:55:
                    d1:fb:85:e6:d8:e9:53:3d:de:9b:3d:c1:3d:b2:46:
                    d1:8a:43:25:c2:3a:0a:5b:e8:f4:63:6b:8e:7f:fc:
                    bc:70:75:9c:ee:d0:4b:65:ca:d0:ac:97:f9:0c:80:
                    ba:4b:c5:8c:06:e2:e8:bf:6e:ef:00:b7:e1:82:08:
                    81:e9:8f:f6:9c:bc:71:12:55:f7:57:1b:dd:09:b8:
                    bd:61:99:2c:8b:11:6b:89:68:82:99:5d:3b:59:a6:
                    36:3b:68:da:52:82:93:40:60:e0:d6:4a:32:32:24:
                    bc:b5:83:77:77:ae:20:be:84:80:01:a2:e9:da:55:
                    3c:de:f7:15:fc:6a:57:d3:46:06:11:89:d6:86:fc:
                    bf:15:07:e4:a8:d7:fa:b9:de:9d:3d:c3:9a:a3:68:
                    d3:5e:49:df:e8:8f:4b:86:d5:18:0c:1d:5e:98:97:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:13:58:49:81:CA:99:F1:97:CB:57:C3:E1:4F:C1:A0:34:3D:55:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47e3ac6d-0a41-3341-84df-b3156426eafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:16:39:5a:76:db:83:35:be:56:2b:64:82:7f:21:59:2a:c1:
         c4:be:a5:72:65:5d:0c:01:8d:f8:7b:2e:9f:62:2e:c1:43:1c:
         78:a2:6b:fc:29:73:7c:ed:ce:81:05:4c:52:0c:1e:c0:bb:43:
         4a:53:1b:4a:91:85:a5:bf:a5:d8:81:bd:bf:c0:f0:1c:36:9b:
         3f:f5:ba:17:ac:84:65:01:05:aa:37:40:f5:1f:fb:3e:76:37:
         1f:96:f9:11:8e:e8:0f:b8:83:9a:bd:5d:3e:51:b6:68:c0:55:
         f4:83:93:bc:0b:95:5d:63:e3:9d:3d:d8:fc:46:f2:c0:bf:a0:
         bd:88:b4:34:e8:ae:d2:46:a0:eb:c0:7b:85:db:d7:a4:46:3e:
         89:60:f7:85:3e:75:b6:ee:7a:53:64:2f:fc:3c:db:1d:b4:89:
         f0:01:96:f2:1b:e1:7b:bd:ef:0b:ef:31:b6:23:26:93:7c:50:
         de:47:74:78:49:1c:de:0a:96:35:7e:92:2f:a5:3f:c0:65:ae:
         83:e6:be:bc:96:d0:90:2f:c9:17:65:79:35:d3:16:7b:c0:1a:
         2c:81:e0:d1:2b:59:ab:17:1b:f6:3a:44:e1:c9:b9:47:06:1a:
         75:ca:68:33:91:b2:85:2a:cb:1a:0c:e6:f6:20:fb:26:b3:1b:
         27:8d:ac:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:45 2026 by rpki-client