Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/147a8d4d-0dc9-384e-be97-33286b2473cc.roa
File:                     147a8d4d-0dc9-384e-be97-33286b2473cc.roa (raw, json)
Hash identifier:          wUIT7BVp0hGl3wV58e0hXq3uS/fGVhYv25d575J5XHQ=
Subject key identifier:   FB:04:72:04:C1:7B:F9:6C:56:5E:67:45:85:E3:BC:66:4C:AF:1F:FC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB44E8E7418F609EA78800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/147a8d4d-0dc9-384e-be97-33286b2473cc.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11351
IP address blocks:        192.60.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:44:e8:e7:41:8f:60:9e:a7:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=44021821-a68e-41b9-972d-6606d65d16c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:94:e8:81:e5:81:e5:91:4a:75:49:42:89:
                    dd:b1:e4:09:cb:70:9a:b6:45:37:8d:c4:c0:5c:03:
                    c0:4d:88:f4:28:0e:fb:af:d9:a7:7d:b9:ce:20:e6:
                    5f:bf:59:80:99:42:75:ad:bf:b1:3e:3d:31:71:e9:
                    b6:9c:aa:0a:55:08:12:7c:a6:56:c1:57:cc:82:12:
                    f9:86:25:21:8a:3c:b4:eb:fd:d6:3c:16:a5:23:98:
                    0b:03:43:18:3a:87:b4:83:3d:ef:79:3a:7f:bf:0f:
                    4f:87:20:1d:4e:f7:f3:12:f5:bc:70:19:d7:dd:87:
                    da:3c:01:45:2f:e2:21:aa:23:78:be:aa:26:a5:e4:
                    ab:52:39:d5:78:6c:8a:34:09:75:9d:41:3e:da:c9:
                    91:a5:02:9e:fc:f5:af:51:64:af:8c:7f:53:46:a5:
                    c4:f8:d8:02:43:fc:b3:c4:b9:98:fc:ec:be:7b:11:
                    a8:30:12:7d:c8:66:9a:fc:24:31:cf:49:67:11:b5:
                    fb:63:3b:25:f0:1d:dc:74:fe:bc:4f:f1:7a:a9:a4:
                    de:dc:c9:df:8d:de:e9:62:99:37:81:49:e0:25:2e:
                    47:98:92:50:d4:3a:c0:8a:e3:1f:2d:d1:86:67:96:
                    fb:1d:d8:c4:13:c4:85:45:2d:a7:87:6d:c6:72:55:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:72:04:C1:7B:F9:6C:56:5E:67:45:85:E3:BC:66:4C:AF:1F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/147a8d4d-0dc9-384e-be97-33286b2473cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.60.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:e7:63:f2:24:be:c4:08:74:20:b3:e0:31:a8:63:52:2d:
         a2:76:cf:0d:aa:81:47:f5:2d:a5:15:27:ed:94:b5:5a:a3:fd:
         64:b2:06:7d:d0:97:50:88:98:d5:a4:bd:ae:91:23:95:00:1a:
         0a:a8:14:c6:14:74:4b:2f:8c:30:23:d2:9d:c9:86:b4:b3:6c:
         67:a2:e5:e3:16:05:5c:74:76:58:5b:9b:c7:05:5d:4f:bb:17:
         89:6f:24:fc:15:07:0c:ce:bb:36:2b:9d:83:ac:8f:de:7a:9f:
         22:c7:97:95:64:2d:9f:a3:5d:b1:51:a3:2e:b9:a8:0a:a4:28:
         58:b3:d7:b9:2c:0d:cb:b4:e5:e6:f6:b1:70:ae:8c:b9:9c:33:
         b7:4c:ae:16:22:d0:5e:54:5c:74:8d:fa:4d:f0:f2:9e:d8:93:
         e6:41:c5:4f:58:97:a5:49:c3:a4:7f:95:44:5f:79:68:d2:4d:
         9d:8b:3b:93:0d:2d:ed:44:61:55:41:ac:ce:a3:49:a7:28:f3:
         c9:f3:b8:21:2e:38:94:fe:13:6a:7f:3c:1f:2c:7c:02:88:41:
         61:44:7a:46:49:d9:ef:84:b0:06:1f:62:fc:62:3f:32:c9:f8:
         97:30:79:ac:c2:9c:3e:1a:2f:e1:89:7e:a5:94:24:ec:60:18:
         63:d1:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:02 2026 by rpki-client