Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b32554a-3202-3fbd-8814-cc0a61d5568b.roa
File:                     7b32554a-3202-3fbd-8814-cc0a61d5568b.roa (raw, json)
Hash identifier:          imTXN7AfE8qIV0fLzUZ6DT3RBpEJqX0Aukqk2IOLLv4=
Subject key identifier:   ED:EA:63:07:F8:76:2E:61:EA:85:8E:B2:79:3F:23:62:A1:C5:24:5F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F74541C22393576E6400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b32554a-3202-3fbd-8814-cc0a61d5568b.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        71.91.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f7:45:41:c2:23:93:57:6e:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=f849ee97-441b-49f1-afd1-439e1e462402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:64:9a:dc:34:ab:23:3c:73:e0:58:af:43:
                    9a:56:df:cc:31:16:b9:e9:15:88:8e:af:17:11:cf:
                    ca:11:a1:02:ba:e6:5d:7a:c5:88:c1:49:e0:5f:82:
                    9d:c7:1e:80:4e:f1:6a:b3:5c:e2:16:10:d9:3d:50:
                    27:40:5d:ed:bf:35:5c:5b:a6:23:e7:92:43:55:01:
                    4d:33:ff:e1:47:9e:43:80:10:e9:c7:13:e7:3a:b4:
                    88:0e:11:f8:80:ac:47:28:66:1a:87:91:88:b0:1b:
                    a8:64:1d:22:4a:b3:f1:37:d0:fe:06:f9:8a:a6:74:
                    69:39:c8:c5:8c:5d:26:e2:83:c7:4d:bb:32:20:71:
                    94:98:1b:70:28:5d:ba:54:84:27:68:99:a4:e0:4d:
                    fc:0d:47:6f:30:d9:fe:a6:a0:71:88:ce:b5:2d:f6:
                    5f:50:99:de:0e:bb:07:60:9b:c9:af:19:f8:da:92:
                    27:02:84:92:8c:5f:54:05:24:60:9f:00:bd:b3:a8:
                    d3:43:fc:b2:ad:76:2d:06:4c:8d:5d:f8:a7:84:eb:
                    85:2a:62:ca:62:f4:92:6c:fb:e8:36:10:ae:c0:8d:
                    dc:9a:9e:49:86:3e:c9:58:56:00:3f:82:69:47:6b:
                    47:c1:ff:50:82:0c:10:f0:6e:3d:3e:91:ae:4c:47:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:63:07:F8:76:2E:61:EA:85:8E:B2:79:3F:23:62:A1:C5:24:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7b32554a-3202-3fbd-8814-cc0a61d5568b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:64:5d:38:ea:93:5c:c0:19:61:0f:d0:6b:43:16:0a:39:
         60:ab:ad:5f:a1:82:77:08:6d:2c:74:63:b9:7c:a2:16:8a:f5:
         a4:ca:04:31:26:89:3d:a6:85:7f:a4:95:8b:37:fc:b7:96:da:
         09:fb:05:14:e4:30:17:a1:03:6d:be:28:9c:11:44:bf:ce:39:
         99:53:04:ef:71:d6:41:5c:d9:7d:d7:e5:ca:12:72:a4:0c:e5:
         d6:89:ea:5a:88:b7:6d:4f:7c:8c:a1:43:3d:19:0d:38:d2:1c:
         16:73:00:8e:a6:ee:cd:3c:52:33:a0:d1:41:5c:2f:7c:ab:67:
         be:e2:fa:e7:1b:69:ab:8a:3d:f8:02:30:85:28:4b:d9:e6:f1:
         b1:95:53:e2:98:ca:ce:58:49:9d:89:f8:9f:f6:14:a1:0c:7a:
         77:f7:3f:dd:af:89:d1:99:01:bc:5a:51:73:7e:6f:f4:56:25:
         62:3d:c9:b3:ee:bb:3c:74:4b:74:e0:a0:be:cf:fd:96:d7:47:
         f8:99:fb:62:c8:6b:6a:0f:69:6f:ba:35:10:87:17:61:f0:f2:
         07:7f:ba:ba:12:5c:50:9f:a2:a9:4e:4f:f4:4b:dd:55:03:1b:
         87:39:3e:3e:bc:20:23:46:fd:2d:02:29:23:53:ee:58:56:21:
         24:5f:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:25:26 2026 by rpki-client