Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25ee0c84-c92c-375c-8e4a-517715ab8868.roa
File:                     25ee0c84-c92c-375c-8e4a-517715ab8868.roa (raw, json)
Hash identifier:          lXVreSDffLtV0L2YLfkksCqInAge3bgaBOcRsPUZoOk=
Subject key identifier:   64:66:BF:CC:86:53:A5:D6:CD:E3:A6:AB:4E:AB:8D:03:19:7A:7C:01
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB8CE627988E04CA147900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25ee0c84-c92c-375c-8e4a-517715ab8868.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.86.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:8c:e6:27:98:8e:04:ca:14:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=e9c976c8-4a65-4708-bbb3-250474d618dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:e0:5d:59:36:4f:98:18:70:89:d1:05:59:
                    54:d7:aa:75:b3:21:19:0a:65:01:39:25:85:1f:4e:
                    c6:d1:6f:a3:d0:22:54:14:21:7e:60:b8:d2:f6:9b:
                    84:40:63:27:16:34:63:35:67:cc:e3:5b:50:c1:06:
                    45:88:00:33:30:e6:c7:fc:f6:07:73:32:88:7e:e4:
                    02:dc:c6:8e:f9:54:0a:36:ce:09:47:6a:f2:28:7a:
                    06:88:16:73:eb:72:8b:7c:04:a7:9e:97:db:82:5d:
                    bf:80:db:7b:8e:a9:1a:31:cd:7a:07:e2:b7:6e:1d:
                    d0:4c:0c:69:10:c2:fd:e9:6e:f2:26:10:ae:56:34:
                    18:47:70:e9:19:b4:3e:75:47:f6:b7:fc:d0:37:95:
                    8e:11:c3:2c:4f:e3:49:cb:22:64:5e:f0:5d:1e:4d:
                    7d:13:f9:ee:7a:4a:42:10:76:86:11:69:8e:cb:8e:
                    26:31:32:fe:7f:17:e5:94:d8:b5:20:15:f4:4d:a3:
                    d8:c2:a6:f2:7e:c9:e9:22:43:48:1e:53:82:43:67:
                    33:3c:20:7a:71:99:96:bb:90:77:70:cf:e3:81:90:
                    1b:1d:8d:10:00:63:3b:b6:06:15:21:1f:36:4d:a6:
                    8a:f3:d0:f4:c5:1f:03:04:a9:bf:1c:2c:46:27:df:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:BF:CC:86:53:A5:D6:CD:E3:A6:AB:4E:AB:8D:03:19:7A:7C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25ee0c84-c92c-375c-8e4a-517715ab8868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:b8:d0:ff:12:f1:dd:cd:c3:de:7f:57:56:65:99:e1:cd:
         43:c7:c1:1a:22:1a:f0:c3:9b:dd:c3:5e:fc:31:57:68:a1:16:
         68:a6:8d:94:b0:83:dc:c2:2f:f1:39:cc:be:37:22:78:80:a3:
         27:fd:fd:bb:63:49:39:d3:53:ea:80:a0:5b:a6:66:2a:bc:a9:
         94:11:5d:48:65:b8:6a:54:8f:a7:4d:46:7d:c2:2e:c8:d1:dc:
         e4:1b:69:9c:cf:a8:db:99:0d:aa:52:33:00:b3:15:96:30:a1:
         ae:48:0d:0c:ee:c3:ff:03:a0:ed:ac:df:84:f2:27:75:a3:d6:
         5a:79:13:51:85:12:4a:d7:64:64:45:fb:85:58:fe:6c:b4:fe:
         e6:bc:e6:67:68:40:65:e8:3a:f3:55:a7:e0:f2:0c:4c:c7:65:
         45:cc:38:db:16:c7:ba:b7:c4:58:b9:75:d5:90:d4:09:af:ff:
         2c:5e:28:57:9e:71:24:ed:ed:67:4c:7b:28:66:23:cd:dd:02:
         de:86:8d:eb:b1:3c:2e:6a:74:8f:54:4c:ad:55:9a:3b:af:34:
         c5:5c:28:be:b9:39:c4:77:ac:5e:42:d8:ed:89:40:4a:af:d8:
         e6:7c:7a:8a:cc:e6:d6:09:12:c5:d5:fe:e1:33:ec:65:c1:cb:
         fa:ae:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:04 2026 by rpki-client