Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/600d221f-4cee-329b-812a-e9c63a4cbd9f.roa
File:                     600d221f-4cee-329b-812a-e9c63a4cbd9f.roa (raw, json)
Hash identifier:          pFSwqsytS4Lgardp4kT3dLVGbIDRDPfSnKVuWw89gMI=
Subject key identifier:   C7:30:D5:E9:DF:18:B2:75:41:4A:9B:7D:BD:DF:BC:03:EE:27:67:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAF33C992F416C9C323500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/600d221f-4cee-329b-812a-e9c63a4cbd9f.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        16.203.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:f3:3c:99:2f:41:6c:9c:32:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a50c480a-d306-49fb-9f6a-d3df4d47d551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:55:23:c2:f9:bf:fc:45:97:b2:7b:80:49:
                    0d:04:de:7c:4c:7a:8f:01:5e:5a:50:16:a6:f3:c0:
                    c0:99:55:79:1e:56:52:a4:bb:95:16:76:f9:29:98:
                    db:94:94:78:02:3b:79:44:57:46:c3:78:3d:b1:bb:
                    c7:e7:a0:97:de:20:26:aa:79:1e:52:16:a4:88:12:
                    c4:03:21:03:43:d5:b8:32:aa:15:ff:7b:0f:3e:da:
                    93:66:65:07:00:0f:38:7a:14:b8:87:64:fc:27:b3:
                    0b:9e:c2:f2:14:d7:0f:0b:6d:d3:03:cc:37:80:b9:
                    61:b2:42:c8:1f:d4:2e:84:f9:a0:54:d0:e2:c1:12:
                    9d:6a:4c:9c:ed:51:f0:32:66:6a:09:92:72:51:54:
                    f2:c4:50:8a:cb:7e:69:36:c9:09:c6:ed:75:b0:7f:
                    75:e3:a5:58:78:de:c9:c6:b7:18:88:52:b6:5f:8d:
                    41:9b:a6:ea:d5:3a:8e:d4:ce:8c:c8:3a:d1:3d:2d:
                    c7:9e:dc:b2:1d:aa:ed:bd:e8:02:12:da:69:48:24:
                    37:82:f7:7d:4c:0d:8f:9b:c0:a7:a2:22:f0:ae:22:
                    27:64:2d:07:dc:39:26:c3:18:69:8b:e7:51:0f:72:
                    14:95:e4:79:ba:75:e3:e4:0e:b6:1d:9e:73:b9:79:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:30:D5:E9:DF:18:B2:75:41:4A:9B:7D:BD:DF:BC:03:EE:27:67:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/600d221f-4cee-329b-812a-e9c63a4cbd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.203.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:ec:f3:d9:83:6a:db:5e:dc:92:c4:04:4a:6d:29:59:59:
         d0:ca:9e:cf:33:30:6a:3b:44:cd:8f:1e:32:6f:f8:0f:85:19:
         2d:2b:aa:47:99:bc:a5:0b:ea:ed:cf:4e:be:85:0d:a1:66:c2:
         46:17:6c:40:d2:24:ca:1b:c8:df:84:c8:54:e9:89:dc:33:9b:
         d3:92:07:70:be:d4:d7:92:c2:22:73:de:3d:f1:09:0d:4c:d3:
         6d:c8:46:25:ad:b1:6b:20:0c:db:2f:ab:4b:12:f6:43:ae:f2:
         39:af:89:b5:3e:12:22:71:04:19:ca:a5:b1:f8:41:a6:62:3d:
         9a:90:99:f8:d9:d1:81:3e:11:c0:1e:c7:c7:8a:f9:f7:b3:b3:
         08:a0:42:c4:9e:9e:94:96:19:cf:45:dd:90:ec:3b:a2:c2:13:
         66:cc:fc:c0:9a:b6:bb:5e:75:d6:c0:fd:6d:03:12:65:8f:91:
         5a:b9:74:1a:77:c2:68:5e:9e:9a:12:67:74:88:ab:8b:4e:a8:
         a5:d3:88:b9:e4:12:88:bb:5e:5b:39:a7:92:e9:4d:5e:52:3e:
         d6:4a:08:8d:fb:c1:12:cd:30:52:94:2b:bc:85:ad:11:86:a2:
         4c:ce:04:44:a5:da:73:40:a3:a8:ee:89:3c:eb:82:af:e8:d5:
         2e:cd:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:49 2026 by rpki-client