Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6486124b-6b2b-33fd-be5a-9746967fea08.roa
File:                     6486124b-6b2b-33fd-be5a-9746967fea08.roa (raw, json)
Hash identifier:          kN+FxKjX3eLbmOshNI3Ix+eB5tecqXHqb1yIAxcOQlo=
Subject key identifier:   D8:30:41:F9:89:EC:5C:DB:1C:B6:AE:B5:44:B4:59:99:FD:F2:B1:C6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD4565E0F049B247AFE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6486124b-6b2b-33fd-be5a-9746967fea08.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.13.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d4:56:5e:0f:04:9b:24:7a:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=792fa226-9732-44cf-b823-c31802189bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e4:20:22:bd:d8:28:4d:0e:2e:e0:0e:e4:40:
                    0a:41:a7:d6:c0:fa:8e:88:8f:a4:cc:18:5f:63:26:
                    fd:fd:7d:59:2a:4a:d7:71:87:63:00:0b:14:5d:68:
                    de:f9:a8:91:77:73:18:fe:55:69:35:c4:47:b4:11:
                    32:51:ea:de:cd:5c:ff:fd:f0:94:37:da:cc:cb:2e:
                    90:4b:52:7f:55:4b:3e:46:69:dc:e5:1e:2a:d5:e4:
                    52:55:08:f7:e6:a8:34:be:a5:0e:06:bb:e6:b3:2d:
                    51:bd:7e:fb:2e:16:d7:2e:d8:d8:ad:f3:80:e0:53:
                    89:ea:c4:93:12:6e:ac:3c:37:9d:e0:7c:49:bf:88:
                    74:ec:58:d6:d4:0c:da:36:b8:44:21:8b:83:00:65:
                    bc:56:8e:6e:41:a0:aa:2b:a0:43:8d:24:20:84:29:
                    e4:37:ea:e6:9f:e4:72:fe:17:9b:79:80:fb:02:ec:
                    47:fd:49:3a:b4:61:61:f7:67:66:65:e5:8d:58:a1:
                    e4:4d:bb:c6:10:a2:3a:3a:f8:be:36:cc:eb:00:e3:
                    f8:1e:89:77:47:8a:c0:e7:e9:d8:b2:6c:6d:c1:57:
                    e3:39:f4:d5:8f:b6:d0:b2:5c:82:f7:73:55:c6:c4:
                    51:89:f1:00:d3:4f:2b:14:6c:60:14:63:3e:d6:43:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:30:41:F9:89:EC:5C:DB:1C:B6:AE:B5:44:B4:59:99:FD:F2:B1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6486124b-6b2b-33fd-be5a-9746967fea08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:45:0f:93:3f:8f:aa:70:c5:5f:4b:90:b3:d0:d4:78:88:06:
         89:9f:b1:4d:73:51:be:72:2a:57:30:89:57:d7:db:ac:13:16:
         82:48:6f:61:b7:4d:6c:1e:b3:ee:65:0f:3c:3a:b8:92:95:a8:
         a3:a6:0b:bb:14:5a:2b:07:f2:ba:e0:dd:da:ae:6b:70:c7:02:
         1c:1a:49:90:98:59:d6:3a:86:a0:14:53:e0:76:32:c5:c1:7c:
         07:3d:22:33:f7:0f:ac:5a:7d:8d:b7:8c:42:af:8f:93:61:e9:
         48:d4:8c:db:e0:47:28:d8:f4:78:f0:32:a4:e6:af:2f:a3:66:
         37:67:1e:9c:eb:57:53:23:fa:28:0f:c0:a2:93:1d:7a:4c:fb:
         97:c5:8b:ee:2f:72:7d:a0:6a:74:21:56:ad:42:80:5b:d5:07:
         be:70:c7:b6:d8:db:5a:ce:bd:f5:44:50:cc:5b:52:8d:99:c9:
         a0:43:88:0d:2c:ca:80:24:50:27:4b:96:60:41:a1:f2:20:37:
         d4:a8:10:3c:35:b7:d6:40:28:97:ee:10:15:d1:d0:29:29:a7:
         77:07:ec:8a:e1:e9:68:3d:35:f2:67:97:92:2a:c1:f3:40:74:
         ff:04:ec:24:03:cb:2f:a1:67:af:5f:78:77:8e:5f:8a:0f:f1:
         b4:21:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:02:33 2026 by rpki-client