Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90324140-aff0-3ecf-809a-0c343cf7a077.roa
File:                     90324140-aff0-3ecf-809a-0c343cf7a077.roa (raw, json)
Hash identifier:          1doA2SucgHB8HhIsbkyrRH0uH2LkOzyTHR7Bcour9VM=
Subject key identifier:   CC:67:F8:C5:01:A7:2E:B6:6D:CD:7E:7F:54:88:B6:5C:30:C9:1B:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FA3B928116D1641E03280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90324140-aff0-3ecf-809a-0c343cf7a077.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        47.134.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:a3:b9:28:11:6d:16:41:e0:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=06a20ed7-86fe-4d09-9ac2-51957ca5c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:10:78:06:8d:d6:8c:6a:9c:89:a8:d8:10:
                    c0:de:d0:a9:7a:89:31:0c:3f:68:c9:59:00:c2:cc:
                    66:a8:e2:c5:5b:b3:86:47:5c:b7:da:1a:01:32:ef:
                    b5:fe:d3:11:53:21:70:1c:f5:9a:79:c5:9a:20:3f:
                    8c:84:b0:c2:f1:d9:38:af:34:fc:60:79:43:ce:1a:
                    79:63:bf:c3:b3:21:39:53:24:7c:d8:0a:d3:32:04:
                    02:f9:be:e0:9b:97:ff:78:54:62:63:8c:bc:52:c1:
                    1d:bc:66:43:e0:4e:07:90:f0:44:0c:a4:93:87:12:
                    64:6e:c2:fb:1b:64:68:39:c3:3b:f6:ca:20:8d:be:
                    6b:ad:51:c4:d5:1f:0a:47:a0:3f:ef:36:43:81:48:
                    cc:d1:64:4b:4c:49:1e:86:3e:21:39:e3:09:65:3b:
                    2c:02:16:2e:ec:af:57:a8:67:e8:d5:aa:8d:85:02:
                    d4:f7:ea:3b:f7:53:df:58:3b:17:05:1e:d7:3b:0b:
                    d3:0a:f3:55:b1:ed:95:ff:90:3c:f6:d2:d5:ec:d1:
                    ab:ef:0e:94:be:9b:8f:c6:08:8b:76:5c:b4:8a:64:
                    dc:e0:7e:54:fb:46:47:60:d7:3e:8e:56:9f:2c:e8:
                    3b:51:be:c2:eb:5a:9e:2a:ee:39:83:c9:23:07:14:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:F8:C5:01:A7:2E:B6:6D:CD:7E:7F:54:88:B6:5C:30:C9:1B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90324140-aff0-3ecf-809a-0c343cf7a077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.134.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:e0:58:19:10:de:32:55:b0:aa:26:b4:35:70:2b:ff:2e:
         80:29:5e:19:6e:5a:20:4d:3c:b0:5f:d2:ea:50:45:a8:cd:e7:
         da:2e:98:1f:5a:6c:31:22:b9:f9:a3:46:34:2c:ec:cc:0f:ab:
         0a:33:45:21:0a:10:1a:3d:a2:eb:e9:67:b0:5b:cd:af:47:45:
         cc:f2:ed:96:b9:a9:3e:da:f5:01:b9:ea:95:43:0e:bf:73:e2:
         8f:a3:ed:cd:cb:a7:d5:a9:2b:b8:c7:dc:5b:29:28:d8:6c:70:
         3f:3a:44:d4:99:a9:db:38:20:eb:28:16:e7:ac:fe:d4:39:76:
         cc:b1:68:42:cd:e3:6f:9d:20:31:3a:54:32:81:ef:b2:53:97:
         9b:68:d6:74:b2:8c:bb:03:09:1b:e5:57:05:4b:b1:82:c9:a7:
         24:1f:db:66:07:66:80:b6:fb:b6:c8:39:fb:d9:c7:9b:10:36:
         5a:f4:49:79:24:ad:f6:51:e3:b3:45:43:c5:e8:f1:93:49:4d:
         c3:36:71:1c:30:42:59:8e:b2:8b:b6:da:7d:31:5a:1a:12:1e:
         94:7e:6a:66:6e:c4:7f:5a:01:4d:be:ba:85:56:1c:01:e7:b9:
         69:51:c5:f4:4e:4b:a6:dd:15:56:4c:99:6c:36:64:57:2b:53:
         74:74:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:58:50 2026 by rpki-client