Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bcc68b6-4b86-3da4-9b2e-e81a7f2174a3.roa
File:                     7bcc68b6-4b86-3da4-9b2e-e81a7f2174a3.roa (raw, json)
Hash identifier:          G93rDjeQe3EOs9mEofiKQxQ7/D2ddKCsHJ+h3k2koaY=
Subject key identifier:   11:09:53:24:4E:98:62:BE:8B:89:38:CA:A8:47:CC:73:24:CA:1E:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FAD5533F4FBF1338F1D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bcc68b6-4b86-3da4-9b2e-e81a7f2174a3.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        71.84.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:ad:55:33:f4:fb:f1:33:8f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=aed8ba36-6cee-421f-b1fa-89b0fc3bad35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:57:e5:43:bc:d5:c0:ed:f6:af:08:be:95:
                    16:be:8d:d5:8f:12:f9:f4:98:31:f7:66:8c:f1:2e:
                    de:6f:01:3f:f6:a5:04:44:f0:ed:0f:6e:92:d6:9d:
                    16:cc:04:c3:a9:8f:58:8c:7b:8b:1c:74:c0:a9:6e:
                    02:9c:f6:a8:4c:bd:31:17:6c:33:09:d7:27:24:ac:
                    c6:78:89:a6:b5:62:3f:7d:f1:d0:d6:42:50:6f:7a:
                    b7:07:ed:1f:48:9a:92:06:18:e6:97:b2:3f:07:32:
                    3d:6f:64:fa:40:d1:a2:20:90:24:9d:10:e9:d9:35:
                    48:6d:ed:47:7f:cd:cb:a8:7d:45:15:b5:81:13:88:
                    23:e5:88:92:4e:13:b8:28:1c:b6:fc:e7:b2:96:7b:
                    f5:84:d7:7f:9f:83:a4:de:ef:97:c6:79:56:9b:3c:
                    e5:d5:40:41:02:0e:72:94:46:b3:d6:fa:10:ac:9d:
                    e8:3b:bd:7d:44:2c:f2:e4:e9:58:d8:81:fd:cb:29:
                    b2:a2:65:b4:ec:fa:83:89:3c:6d:fc:81:8f:da:1c:
                    98:bf:7e:2a:c2:ae:62:b3:9a:d5:33:8a:a6:41:99:
                    aa:26:c6:10:e7:a2:b9:65:5e:97:88:57:0c:fa:75:
                    65:94:ae:be:9c:54:87:67:89:4f:61:1e:67:5e:1c:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:09:53:24:4E:98:62:BE:8B:89:38:CA:A8:47:CC:73:24:CA:1E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bcc68b6-4b86-3da4-9b2e-e81a7f2174a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.84.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:38:10:73:bc:e2:e7:40:4f:ce:6f:a4:0b:d7:b1:70:94:b2:
         3a:01:e2:56:45:0e:aa:cc:28:93:5d:74:38:ae:fa:3c:b7:61:
         cc:22:08:43:70:f8:5d:bb:d6:4b:92:57:44:94:07:08:85:ef:
         b3:b8:ce:06:68:05:cc:98:70:d6:cc:28:91:34:f2:6c:41:4c:
         e9:9d:28:a1:4f:32:49:46:e0:f8:b8:16:f1:0a:11:e9:ce:a5:
         f1:dd:f0:18:00:eb:a7:80:8e:5b:65:90:68:66:96:43:38:33:
         2d:9b:4c:cf:14:ad:6e:e9:98:c7:f9:fc:f2:0e:9d:ff:56:60:
         ec:24:2d:91:7d:66:15:c8:4f:53:e6:a5:10:e8:7d:13:b3:ff:
         9f:a3:4d:59:01:64:9d:71:c6:00:2c:64:ed:db:9f:6b:d0:ae:
         96:38:e6:d4:72:62:a9:7b:30:47:94:e6:87:89:8c:82:e9:cc:
         ab:4b:44:ea:c8:45:63:6f:88:dd:4b:6f:47:49:84:9d:63:e1:
         b8:9b:de:08:87:81:d2:5e:06:f3:4c:ff:c0:ec:ac:0e:29:77:
         8a:e8:15:16:74:ba:38:ca:4d:24:cb:c3:c2:f1:8e:28:ef:be:
         d8:02:c6:29:b4:56:cf:3a:ce:5c:19:24:ed:85:f0:65:63:ad:
         7f:97:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:26 2026 by rpki-client