Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0b9930f-a2c8-3b5b-99b7-2cf353918e53.roa
File:                     a0b9930f-a2c8-3b5b-99b7-2cf353918e53.roa (raw, json)
Hash identifier:          lMb3cQFSHV87sMaB/9sarewO79n8hhzTgKyDMgjdNxk=
Subject key identifier:   EA:56:16:C8:79:C1:38:9F:58:B4:37:84:F4:5B:39:FD:13:20:6E:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F331D2C96F42BBF2C8AF77E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0b9930f-a2c8-3b5b-99b7-2cf353918e53.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        47.42.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2c:96:f4:2b:bf:2c:8a:f7:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=029b54fe-fc68-4dca-b471-f3088ac551b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:76:78:2d:38:00:cf:79:14:8b:a0:28:2a:
                    ec:c8:88:f8:91:1a:72:cf:d6:6f:21:71:61:29:38:
                    59:d8:02:71:04:24:e9:e6:6f:b5:29:25:28:06:a3:
                    4d:2b:58:47:0d:e1:ad:9d:06:fc:dd:11:72:3b:5d:
                    a9:0e:6d:aa:af:27:57:04:b0:f4:de:9d:83:de:49:
                    00:50:6f:84:08:45:bd:5c:68:d0:94:95:41:97:a6:
                    9b:62:13:b7:c1:50:79:fe:1f:15:d5:4c:00:b0:10:
                    a0:9b:b5:a3:11:e0:31:4d:21:2c:7f:93:27:6b:10:
                    c4:74:57:e3:4d:cc:e1:a6:43:51:92:e8:a4:f2:bd:
                    27:5a:5d:6d:fb:58:5b:b3:c9:99:02:eb:e1:b3:75:
                    1d:c5:e6:07:d0:75:02:e1:a7:73:90:ab:d5:8d:ce:
                    83:54:1f:4e:47:9f:06:90:6e:79:a5:c1:9e:1c:67:
                    6b:de:e7:7f:f3:49:b2:ac:b8:8c:8e:c7:4b:0b:84:
                    16:d3:65:4c:fe:11:7e:62:c9:94:e7:b4:82:f3:be:
                    c2:d8:39:4c:d3:5d:06:ab:47:74:2c:e7:12:59:76:
                    1a:bb:86:26:07:39:ca:3b:12:d2:d0:0a:02:9d:e6:
                    15:7b:48:e4:8d:fb:02:02:d9:78:83:d0:2c:60:d6:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:16:C8:79:C1:38:9F:58:B4:37:84:F4:5B:39:FD:13:20:6E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0b9930f-a2c8-3b5b-99b7-2cf353918e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:e9:c4:df:17:3b:40:44:97:bf:71:58:e6:a2:0f:71:e1:
         e1:cb:97:74:56:36:ef:23:c6:17:f5:6b:b7:1e:fe:89:46:b0:
         d2:90:56:12:06:3f:1a:82:ee:72:a0:a7:1a:7a:cd:35:9e:00:
         f2:41:d3:89:8b:be:21:58:45:af:40:cc:92:34:0b:18:d9:40:
         81:c7:ee:ad:2c:26:5b:79:53:bd:eb:8c:a2:0b:d7:9a:7a:08:
         85:9a:56:ef:bb:5f:40:fc:89:c9:db:9a:37:32:e9:81:60:b0:
         47:46:e1:4a:c1:d3:1a:e5:59:ec:4d:17:69:63:76:9b:f0:bd:
         a3:3a:4a:39:d7:3c:4f:a9:4c:31:bb:7a:9a:87:2f:93:9c:91:
         98:71:64:9a:66:15:2e:8d:72:49:c8:d3:40:a6:28:ef:2e:19:
         b1:a5:57:06:67:bb:8d:07:9b:ef:5b:d0:7f:9b:e5:97:58:7c:
         ba:f6:67:eb:f2:7e:6d:94:2b:c2:86:4d:af:d7:a0:76:e5:d4:
         58:af:fa:c1:ea:e9:d8:ee:e1:51:d2:ce:78:cf:e0:55:88:8e:
         8e:24:fd:67:8f:f9:77:47:fa:25:f0:58:72:de:c2:f3:fc:dd:
         90:6c:c6:20:0b:4f:24:72:6f:08:ab:4e:db:bd:3f:0c:e4:f5:
         4f:d0:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:41:29 2026 by rpki-client