Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/39c3e09c-66de-3a29-bea3-2f776076db13.roa
File:                     39c3e09c-66de-3a29-bea3-2f776076db13.roa (raw, json)
Hash identifier:          7ZrLMzEP9WRYoL+RIckhNxD/tYE6XDBwpyoLHm63Vfw=
Subject key identifier:   C8:E3:BF:23:65:A7:8F:F3:FF:9B:ED:81:90:F5:96:5E:6B:5C:12:1B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F529BC13D5CB14CE52100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/39c3e09c-66de-3a29-bea3-2f776076db13.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     22677
IP address blocks:        97.87.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:52:9b:c1:3d:5c:b1:4c:e5:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=7d99e626-887e-419e-b5d0-91582413c026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:8e:f5:84:77:58:27:17:d7:91:2f:27:78:
                    e6:bf:cd:c8:57:5e:14:b8:c2:1e:ea:d9:87:7d:fd:
                    fd:85:ba:96:d2:e6:6c:41:3f:7e:ba:13:a2:0e:c8:
                    a6:aa:e4:4b:e9:0b:24:3c:82:0c:7c:a7:ad:8f:e6:
                    e4:d2:24:d1:65:94:b7:5d:1a:27:fb:46:71:26:03:
                    1a:13:f4:75:24:53:88:78:2f:3f:5f:79:e9:2e:63:
                    ef:14:31:c6:f8:af:81:35:da:67:50:68:9e:39:fe:
                    93:26:36:20:04:ec:35:41:fd:5f:39:10:09:9c:6b:
                    a7:4e:ae:bf:3d:10:2e:8c:d9:e7:2e:fb:5a:bc:e3:
                    3a:d5:54:0c:7c:a1:92:34:4f:32:76:c1:4d:92:66:
                    a1:0a:56:00:30:27:9d:ca:0c:ac:03:ef:32:19:e3:
                    d4:6a:67:b9:89:ce:33:8f:53:d4:44:8c:0e:6b:00:
                    6c:3a:40:46:4e:60:19:f4:d2:2a:0e:72:93:75:0e:
                    6f:a7:49:68:56:39:a6:e3:aa:bc:a2:3d:ab:ed:b0:
                    b6:95:9d:0a:46:10:d4:49:11:24:7f:14:48:7a:39:
                    1b:85:ab:83:d0:56:1d:55:e4:14:a3:59:9f:61:86:
                    bb:7b:0a:49:74:72:4b:88:6d:d2:68:35:e0:e9:7d:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E3:BF:23:65:A7:8F:F3:FF:9B:ED:81:90:F5:96:5E:6B:5C:12:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/39c3e09c-66de-3a29-bea3-2f776076db13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d5:d7:eb:91:40:da:81:9f:50:b1:af:4c:b7:34:b9:53:0b:
         7d:d9:0b:87:30:bf:77:8a:0b:b3:15:ae:47:86:18:97:6a:2f:
         1f:6b:6f:11:74:cb:5b:81:3a:32:db:6c:ee:80:33:6b:f2:9e:
         df:35:6e:83:2a:f6:43:d8:d2:f4:db:ba:68:0a:e7:f8:99:d1:
         a7:63:93:c7:95:75:b9:b8:16:2c:fe:ff:4b:06:b9:7f:9c:a4:
         de:95:26:3d:99:7c:f9:c3:fd:e6:d3:65:ea:a8:45:84:a9:2b:
         7f:da:f2:8f:bf:aa:30:0d:c1:4b:4b:ed:a0:30:c5:6d:b6:02:
         a6:86:f0:1b:5d:e5:0a:eb:e5:7e:34:d3:82:e2:74:de:ce:3f:
         c3:50:07:c0:47:f5:a1:93:d5:32:83:76:da:45:e3:f2:f1:ad:
         9f:78:b7:83:ba:90:9f:30:7b:8b:b3:a1:9c:bb:f0:9b:ab:d0:
         3b:56:91:de:b2:d1:55:57:58:9b:50:f2:56:b8:f2:7b:8e:ca:
         bc:8c:64:8d:99:09:4c:e4:33:67:e1:d6:83:9c:81:f7:2f:1a:
         f5:d7:39:1d:2b:f5:03:54:d0:d6:4e:73:c0:8a:07:f8:94:7f:
         ad:63:06:41:2e:82:f2:8f:a0:43:17:f0:ca:f5:ca:6a:fa:59:
         ed:df:47:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD1KbwT1csUzlIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk
N2Q5OWU2MjYtODg3ZS00MTllLWI1ZDAtOTE1ODI0MTNjMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32O9YR3WCcX15EvJ3jmv83IV14UuMIe6tmH
ff39hbqW0uZsQT9+uhOiDsimquRL6QskPIIMfKetj+bk0iTRZZS3XRon+0ZxJgMa
E/R1JFOIeC8/X3npLmPvFDHG+K+BNdpnUGieOf6TJjYgBOw1Qf1fORAJnGunTq6/
PRAujNnnLvtavOM61VQMfKGSNE8ydsFNkmahClYAMCedygysA+8yGePUame5ic4z
j1PURIwOawBsOkBGTmAZ9NIqDnKTdQ5vp0loVjmm46q8oj2r7bC2lZ0KRhDUSREk
fxRIejkbhauD0FYdVeQUo1mfYYa7ewpJdHJLiG3SaDXg6X0FkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjjvyNlp4/z/5vtgZD1ll5rXBIbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzljM2UwOWMtNjZkZS0z
YTI5LWJlYTMtMmY3NzYwNzZkYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvV1+uRQNqBn1Cxr0y3NLlTC33ZC4cwv3eKC7MVrkeGGJdqLx9rbxF0
y1uBOjLbbO6AM2vynt81boMq9kPY0vTbumgK5/iZ0adjk8eVdbm4Fiz+/0sGuX+c
pN6VJj2ZfPnD/ebTZeqoRYSpK3/a8o+/qjANwUtL7aAwxW22AqaG8Btd5Qrr5X40
04LidN7OP8NQB8BH9aGT1TKDdtpF4/LxrZ94t4O6kJ8we4uzoZy78Jur0DtWkd6y
0VVXWJtQ8la48nuOyryMZI2ZCUzkM2fh1oOcgfcvGvXXOR0r9QNU0NZOc8CKB/iU
f61jBkEugvKPoEMX8Mr1ymr6We3fR5g=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:17 2026 by rpki-client