Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa
File:                     af075a20-4673-3bd1-bb12-ab58c38e8135.roa (raw, json)
Hash identifier:          k/lVfnsfP1JX0FBC+LOpTdgjGFUEsGDK++ZodyLhdak=
Subject key identifier:   7F:F4:BB:57:C1:C6:77:5F:F0:B0:B1:06:5D:27:08:37:B0:16:BD:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F3D99365AEDDE4B3F9680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        71.87.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:3d:99:36:5a:ed:de:4b:3f:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=19d643c8-37c7-4804-9647-eb7ebf1b7c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:70:34:e4:79:38:ee:87:48:fb:c4:ba:a3:
                    9f:5a:ec:a4:9b:b5:f7:71:5a:2e:9c:d2:23:2d:5b:
                    30:17:cc:3c:2c:06:db:8c:9d:3d:4f:cc:00:98:0c:
                    bb:35:67:8f:1b:d5:b1:ae:a1:85:41:8d:e4:1a:f1:
                    3a:99:ee:a3:b1:ea:58:69:ff:8d:e1:29:a0:b5:b9:
                    9f:01:7b:04:f6:ed:ec:73:96:ec:56:3b:29:8d:1d:
                    38:fd:06:bc:14:3c:2d:80:38:f7:81:b5:50:7a:e6:
                    6b:cb:4c:82:03:36:7f:c1:e8:ab:42:c2:18:03:0e:
                    f7:8e:82:81:1d:53:e1:a4:41:00:8c:f0:20:d1:0e:
                    e5:1d:2d:bf:60:5e:60:b0:d4:8d:42:31:63:9e:20:
                    1e:f2:28:1e:dc:76:01:03:a3:0e:f5:71:0e:92:03:
                    aa:c8:51:f0:cd:b9:de:60:0e:31:9d:cb:35:27:d8:
                    52:2f:99:15:47:3d:00:e6:66:15:39:8d:7b:b4:a0:
                    d4:8b:19:45:f8:15:7d:d8:86:70:31:99:70:45:50:
                    59:c2:b2:d7:b7:62:5b:84:1a:11:e4:4e:a2:5c:23:
                    af:ec:74:3e:6d:42:3a:27:13:67:fc:9d:00:7e:db:
                    cb:49:91:7e:21:85:61:c8:43:d6:e0:64:a1:16:92:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F4:BB:57:C1:C6:77:5F:F0:B0:B1:06:5D:27:08:37:B0:16:BD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:a6:a2:72:36:87:6b:17:34:f3:7a:09:99:35:63:7c:49:
         9d:2a:0e:f4:1a:2b:81:93:8a:92:fe:42:7d:ac:c9:d6:49:f4:
         b1:c6:18:b0:b5:73:d3:05:72:f0:23:17:d4:01:ef:ff:63:5d:
         95:5e:ba:d5:db:d9:42:76:bb:09:fa:dd:3c:d4:f5:7a:fa:16:
         69:d8:ec:37:92:7f:b1:e8:20:69:4e:26:2f:a8:31:2a:f0:15:
         b1:22:33:a0:56:e8:a9:ec:a1:49:fa:9f:b1:2f:8a:68:60:1d:
         c1:8e:3e:a9:9b:5f:a4:ee:46:65:ba:ee:8f:85:dd:d7:e3:06:
         42:c2:d1:f3:eb:99:ec:d7:44:d4:ad:17:a6:36:3f:28:8b:3f:
         90:97:5d:e8:c2:2c:55:a9:5a:d9:92:44:7f:86:29:2d:47:5e:
         de:05:81:40:79:5e:eb:66:e6:62:db:70:91:17:4a:9d:3a:ae:
         47:8a:bb:85:bd:00:53:d1:e0:86:52:61:af:57:fe:06:16:99:
         4d:27:89:28:20:0f:43:8f:9a:ed:89:30:88:d7:96:e7:92:7a:
         92:05:5c:68:1b:9e:82:b8:f5:d2:70:09:8d:7b:33:9e:05:d0:
         62:e3:a8:4a:22:a4:08:04:bc:63:9d:52:fb:30:f6:96:26:ec:
         f8:fb:73:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDz2ZNlrt3ks/loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
MTlkNjQzYzgtMzdjNy00ODA0LTk2NDctZWI3ZWJmMWI3Yzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjFwNOR5OO6HSPvEuqOfWuykm7X3cVounNIj
LVswF8w8LAbbjJ09T8wAmAy7NWePG9WxrqGFQY3kGvE6me6jsepYaf+N4Smgtbmf
AXsE9u3sc5bsVjspjR04/Qa8FDwtgDj3gbVQeuZry0yCAzZ/weirQsIYAw73joKB
HVPhpEEAjPAg0Q7lHS2/YF5gsNSNQjFjniAe8ige3HYBA6MO9XEOkgOqyFHwzbne
YA4xncs1J9hSL5kVRz0A5mYVOY17tKDUixlF+BV92IZwMZlwRVBZwrLXt2JbhBoR
5E6iXCOv7HQ+bUI6JxNn/J0AftvLSZF+IYVhyEPW4GShFpKSIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/0u1fBxndf8LCxBl0nCDewFr2BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWYwNzVhMjAtNDY3My0z
YmQxLWJiMTItYWI1OGMzOGU4MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR1foMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8opqJyNodrFzTzegmZNWN8SZ0qDvQaK4GTipL+Qn2sydZJ9LHGGLC1
c9MFcvAjF9QB7/9jXZVeutXb2UJ2uwn63TzU9Xr6FmnY7DeSf7HoIGlOJi+oMSrw
FbEiM6BW6KnsoUn6n7EvimhgHcGOPqmbX6TuRmW67o+F3dfjBkLC0fPrmezXRNSt
F6Y2PyiLP5CXXejCLFWpWtmSRH+GKS1HXt4FgUB5Xutm5mLbcJEXSp06rkeKu4W9
AFPR4IZSYa9X/gYWmU0niSggD0OPmu2JMIjXlueSepIFXGgbnoK49dJwCY17M54F
0GLjqEoipAgEvGOdUvsw9pYm7Pj7c9s=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:48 2026 by rpki-client