Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/624e15e4-89de-38b2-a06f-062e910c46c0.roa
File:                     624e15e4-89de-38b2-a06f-062e910c46c0.roa (raw, json)
Hash identifier:          SlUTgrZKUkSiUvvB5dXpy6V3hE+TPFIOErT50ICzLLk=
Subject key identifier:   03:72:D0:B3:20:41:8A:19:A9:A7:65:16:1B:7F:AB:D0:23:93:A0:DF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB6173520F42135C66ACC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/624e15e4-89de-38b2-a06f-062e910c46c0.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.94.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:61:73:52:0f:42:13:5c:66:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b0e2dc9a-090d-46cd-9b09-95930c4ab142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:ae:d6:de:6d:7b:0f:23:a5:fe:bd:dd:f3:
                    71:95:89:48:ba:48:97:bd:42:cf:24:03:c4:02:7c:
                    c0:8f:9c:de:09:83:f8:76:67:63:49:66:a6:ca:3d:
                    c9:f9:d9:3f:43:c7:ae:df:b6:ca:47:a7:93:29:47:
                    8a:9c:0d:c4:99:b1:52:f2:fb:22:61:84:f2:17:3d:
                    c2:8e:7e:ab:a3:5e:fa:16:e1:7b:fc:5e:60:b1:ce:
                    2d:49:bb:05:72:98:7b:cd:23:9e:a0:e1:61:a3:84:
                    a4:60:06:f9:64:ff:10:43:ce:8d:8f:c0:95:10:03:
                    d0:9d:a7:19:72:3b:6c:3c:b2:4e:fd:d0:0b:c6:b9:
                    67:2c:c2:44:29:6a:3c:76:28:d3:9c:eb:be:33:d5:
                    8b:11:4e:25:c0:a7:aa:4d:3d:41:c1:1b:a3:84:7a:
                    11:9f:b9:ab:4d:63:0a:89:63:d7:07:a2:3a:01:7c:
                    a6:61:92:2e:cb:8d:2a:c6:4e:93:42:e3:b3:cc:4d:
                    61:6a:36:47:44:29:e2:dd:f4:b5:4a:4f:4b:91:0e:
                    13:81:17:a1:b9:6b:84:8a:a5:92:84:30:1e:5d:94:
                    9a:ad:e9:29:2f:5a:22:a6:9a:05:ed:ef:76:02:09:
                    96:60:34:f6:10:23:7b:76:e2:da:e6:10:47:05:22:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:D0:B3:20:41:8A:19:A9:A7:65:16:1B:7F:AB:D0:23:93:A0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/624e15e4-89de-38b2-a06f-062e910c46c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.94.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:1f:96:c7:4c:6f:e8:17:5b:c1:03:34:4f:52:7a:dd:ef:7f:
         9c:b5:5b:4f:d4:ff:79:ce:f2:c6:da:9a:a4:97:6d:b5:13:ab:
         fd:eb:5a:6a:35:46:a8:74:8d:ad:e5:d1:9d:e8:a7:e0:96:a6:
         15:04:24:fe:82:15:02:95:95:e6:86:9a:bb:06:8f:44:61:71:
         98:6e:67:c3:44:38:12:b0:92:f9:9a:c0:9e:c2:93:3f:d9:c8:
         ea:c7:e2:8a:14:58:19:da:e7:bb:e7:2e:2e:78:85:4a:d2:3e:
         d2:88:c9:e0:11:9f:4f:36:12:19:79:5d:38:8a:93:40:ac:cf:
         7f:d5:d3:b6:78:33:44:2a:c9:82:0d:00:f5:32:0e:b0:9c:75:
         14:61:41:4f:9a:53:73:e4:9b:18:77:10:5d:15:ea:4a:7a:32:
         99:1e:ad:9f:53:87:f0:0c:bf:06:28:c5:ee:93:69:b5:61:0d:
         6d:6d:59:f8:f6:7c:2e:3e:fa:e0:78:99:75:95:c8:ec:60:e9:
         39:20:7a:9f:e3:24:c6:69:1c:6f:33:5d:32:ee:91:ec:63:f5:
         de:59:92:95:13:66:39:27:86:2f:77:37:c5:90:d9:b2:c3:88:
         44:32:a9:4c:0f:0c:8e:26:0a:9e:7e:4f:13:c5:e3:05:1f:ed:
         95:a4:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:22 2026 by rpki-client