Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0cd0b02d-6884-3ff5-99c4-f77f8ca7d3b7.roa
File:                     0cd0b02d-6884-3ff5-99c4-f77f8ca7d3b7.roa (raw, json)
Hash identifier:          EXo2gc867eLY9+OZjdo78DETI+wxu5HkqcNOkHV7m7w=
Subject key identifier:   1B:98:54:45:08:4A:86:B0:E2:50:88:42:37:E5:8F:A2:99:89:D4:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B80B770D6945C9ED64AEF3000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0cd0b02d-6884-3ff5-99c4-f77f8ca7d3b7.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     20115
IP address blocks:        71.91.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:70:d6:94:5c:9e:d6:4a:ef:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=1ec907a1-62f8-46cf-b2cb-6089b3216ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:01:ac:9b:9f:20:9a:42:17:0f:fe:fe:3e:
                    bd:40:d9:9c:71:49:38:f5:c3:36:81:cb:a3:ef:40:
                    84:76:4c:d1:34:2d:f4:28:4e:22:6c:26:84:51:4c:
                    fc:73:a4:af:72:1e:3b:d6:cb:2a:c6:08:bd:41:79:
                    5d:13:eb:b5:6e:17:67:eb:96:6a:b0:45:24:44:1c:
                    fa:04:73:c4:ef:c8:38:eb:fd:b3:d6:f5:9d:d2:31:
                    65:f2:5c:fb:84:00:e0:b6:d1:e5:7c:5f:3a:97:08:
                    d2:39:09:2c:2f:64:88:e3:97:85:dc:ad:f9:28:54:
                    47:08:6e:4d:13:b9:d2:15:d1:94:da:9a:3e:fa:57:
                    fb:b9:51:4f:dd:2c:31:9a:bf:97:45:35:56:34:a4:
                    0a:fb:d2:04:89:98:0f:2f:3e:8e:54:97:57:27:13:
                    97:11:70:ad:45:1a:16:b8:15:73:97:35:60:5a:6b:
                    49:d8:a9:e7:71:0c:ec:52:ef:16:eb:bc:34:5e:c3:
                    ae:43:f3:86:ac:9b:97:5e:09:3c:2e:a0:8f:6d:2a:
                    57:81:d5:84:05:cf:8b:97:fd:b1:c8:ae:57:6d:d2:
                    a4:02:f2:e2:20:bc:2e:df:e4:8f:90:c0:93:a2:6d:
                    f7:9a:9c:f9:fa:a2:01:5b:6c:5a:23:61:09:e3:dd:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:54:45:08:4A:86:B0:E2:50:88:42:37:E5:8F:A2:99:89:D4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0cd0b02d-6884-3ff5-99c4-f77f8ca7d3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:67:5e:c9:e3:cc:80:d3:aa:14:2f:68:0c:41:be:b3:16:
         f8:34:66:3f:1b:73:88:5d:ae:1f:b7:46:ab:ac:c6:73:39:35:
         03:90:85:c4:09:fc:fa:4b:92:c9:f8:7d:8e:44:a7:26:8a:32:
         f8:6d:c3:6b:14:f8:c7:0e:b2:a3:a9:38:04:37:a1:05:ec:a3:
         1e:ca:c1:0d:89:4e:23:7e:bf:53:88:59:ba:7a:21:a3:93:b3:
         66:40:f3:f8:dc:8a:9e:dd:2b:d9:98:31:10:c2:7d:31:eb:99:
         34:98:e3:df:68:72:17:2b:3f:47:3e:5f:d1:46:7b:fe:64:0a:
         15:1c:73:20:7b:61:96:07:2a:9d:74:01:7f:a3:61:3d:69:65:
         95:2d:7a:51:34:bc:87:c8:6f:d5:fb:93:44:ca:e1:dc:df:d3:
         d8:b7:c5:c2:9f:41:df:6d:94:b7:8a:34:59:60:96:39:58:39:
         f5:bf:b4:ba:54:b6:03:60:31:3a:0a:4d:fd:a3:93:e9:fd:9b:
         8d:e9:26:2f:24:a8:14:44:b5:44:a5:bb:3b:de:26:8a:55:3c:
         2a:1b:4f:5e:d2:e9:4b:62:cf:26:16:4e:d4:60:09:29:b1:d5:
         bc:36:99:95:a9:40:ee:81:e4:b7:fe:f6:c6:61:3a:db:6a:d0:
         db:61:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:52 2025 by rpki-client