Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/54b65f25-cb9f-3b21-96ee-48f72fbd337e.roa
File:                     54b65f25-cb9f-3b21-96ee-48f72fbd337e.roa (raw, json)
Hash identifier:          na1doUgjiDF98BIFt4R+MuUxRgD5P3WCtX8U0q7pVP8=
Subject key identifier:   88:80:2E:58:FD:1F:4A:76:8B:E1:DE:7B:3D:81:F8:E5:05:09:10:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAD80AF0A57E2551159E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/54b65f25-cb9f-3b21-96ee-48f72fbd337e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.93.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:d8:0a:f0:a5:7e:25:51:15:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=146e7eec-c77f-4ae2-9a19-9f31275bc258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:37:5f:8a:04:f8:55:12:74:a3:b7:a2:2a:
                    95:f3:a5:31:0d:b7:2c:cc:84:20:b9:a8:e0:58:9e:
                    0d:ba:48:1d:0c:71:91:79:de:35:40:ab:3f:0b:5a:
                    f6:0b:68:52:84:2e:b7:fb:b3:04:8e:c4:28:d7:7b:
                    11:a9:a0:f6:63:bd:98:0d:df:05:02:0f:e5:0d:22:
                    7f:eb:36:ea:f8:5d:1a:91:91:03:95:89:1b:b4:db:
                    a6:04:87:eb:f5:d9:e9:64:52:82:67:85:e8:6f:43:
                    f4:6a:e5:9d:44:2a:47:b7:96:a5:63:6e:d6:2a:3d:
                    25:7b:87:5d:85:3d:e0:f1:34:59:89:cf:7c:f6:ad:
                    a5:1f:58:ec:ae:63:a6:1a:c8:20:13:62:cc:cd:fd:
                    04:ef:e6:67:40:f6:ff:ca:b2:5e:6b:1a:bd:83:63:
                    a2:45:52:08:69:d9:55:79:e2:7a:0c:f9:f0:c2:0b:
                    65:3a:34:3d:36:0e:6c:af:24:da:2e:62:19:b4:91:
                    44:a5:c5:bc:83:6f:5c:3d:bf:12:8d:13:6d:44:4f:
                    94:7f:92:40:b8:d0:38:bb:60:a4:a1:83:e5:1a:ed:
                    0d:89:0f:5a:f1:d9:9e:7f:1f:af:bb:85:8b:45:da:
                    44:ef:78:7c:37:b9:93:b4:26:31:ab:98:9e:4e:e5:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:2E:58:FD:1F:4A:76:8B:E1:DE:7B:3D:81:F8:E5:05:09:10:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/54b65f25-cb9f-3b21-96ee-48f72fbd337e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.93.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:60:52:f0:94:f2:e5:55:3e:ad:7d:e9:64:97:d0:c6:33:70:
         7d:36:a4:6f:3a:1b:9b:37:67:26:3f:37:d8:38:ce:b8:29:91:
         36:a2:f5:cc:8b:a5:ee:f0:20:24:e3:5c:9e:d2:c1:1f:4f:a2:
         56:6e:36:f2:ef:a1:7a:84:2b:7e:4d:5f:91:10:69:67:72:f6:
         26:f1:1d:54:12:a6:04:cb:4f:bb:27:97:a4:f0:1b:24:bb:e5:
         c2:ee:54:15:f2:82:c9:2a:03:c3:41:57:b4:8d:c2:a1:0a:09:
         15:4b:8c:4e:ce:23:b8:57:ae:ab:b7:25:94:63:20:c0:0b:aa:
         a0:2a:be:f2:91:3f:cc:d3:58:62:7e:ca:78:5c:cc:47:a5:2d:
         dc:af:e8:fa:bc:ba:79:c9:81:fb:02:40:89:a1:a3:c8:c9:fd:
         39:a5:a9:da:66:7f:a7:44:80:70:03:83:ff:16:bc:8a:8e:3c:
         37:ed:81:64:5d:e2:5b:89:00:f5:d3:f5:cf:f4:84:0e:c1:fb:
         9a:0b:a8:27:5f:87:40:6d:e3:ea:53:a5:0a:8e:94:e1:f5:16:
         f1:98:35:ff:42:cb:64:93:64:66:f7:c6:c0:38:c9:0c:d2:13:
         41:12:31:80:20:3e:01:f0:04:83:6b:a6:c4:f4:17:d0:71:22:
         18:29:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:19 2026 by rpki-client