Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/695fbdd9-3b97-3475-b214-b02ec744179e.roa
File:                     695fbdd9-3b97-3475-b214-b02ec744179e.roa (raw, json)
Hash identifier:          eyNbOnh61InHyEz29OfCoK0Vx7iv97sFdpi1C9ZnpFQ=
Subject key identifier:   DF:75:A3:8E:45:06:E2:86:AA:28:31:F2:43:11:B0:88:C8:76:AE:6D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB780D26AB1C5992AD9180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/695fbdd9-3b97-3475-b214-b02ec744179e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.13.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:78:0d:26:ab:1c:59:92:ad:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=cbb846a9-9ae9-4a0a-b350-ab657a612ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:55:59:28:f9:20:25:7f:80:63:6a:97:19:fb:
                    c6:4d:50:53:33:60:d7:ee:ea:be:d0:9d:d3:f9:2a:
                    52:6f:e0:98:90:90:1d:17:56:5a:00:f6:85:af:2b:
                    f6:3c:11:a3:c5:4e:66:45:cb:e4:c1:f2:1e:1a:a7:
                    ab:d0:03:c3:91:bb:de:fd:23:d6:b5:19:20:fc:43:
                    37:4c:d6:69:cc:a9:11:af:f9:28:5f:4b:53:66:6e:
                    a2:7a:2a:cd:91:ff:94:ed:63:56:0c:ed:89:54:ad:
                    40:a4:5a:97:8d:99:97:f8:4d:c5:a1:a0:0a:d3:06:
                    a1:6d:7e:78:76:c8:6f:b7:b2:cc:ab:5d:8f:47:ca:
                    6a:ca:31:99:62:2b:84:54:97:73:b8:3b:02:12:7a:
                    21:34:37:0d:f9:e6:6a:cd:18:01:23:19:0a:02:c8:
                    52:00:c6:67:61:b6:d9:d0:1c:f6:93:e1:00:e0:85:
                    d3:8f:49:f1:b1:4a:4d:99:4f:8f:f6:28:5d:79:10:
                    b5:d9:d0:99:28:b5:d3:02:c6:a5:71:37:fc:1b:f2:
                    71:27:05:ee:68:8b:95:70:a8:a5:72:29:42:3b:b5:
                    42:5c:ce:26:6f:da:b6:41:b6:f1:2b:22:32:e7:94:
                    48:42:79:23:90:0f:85:4d:96:c7:a9:c0:3b:d1:7e:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:A3:8E:45:06:E2:86:AA:28:31:F2:43:11:B0:88:C8:76:AE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/695fbdd9-3b97-3475-b214-b02ec744179e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:64:de:e6:88:3d:54:ba:1c:71:cd:b7:48:e6:ae:3e:57:49:
         1d:57:68:63:bf:2c:4a:75:bb:e1:35:f9:f3:4e:ee:8f:9a:c4:
         cf:69:23:80:c7:7a:89:11:85:89:0f:37:94:92:13:8d:33:45:
         09:0a:23:18:44:77:b5:d2:b0:82:72:f5:e9:d6:1b:4e:bd:1f:
         ec:eb:b6:e1:63:4f:ed:06:50:10:e7:80:db:83:2c:5b:21:19:
         67:b2:0e:7e:a3:cc:1d:bd:d1:dd:d4:5a:ee:5a:93:62:90:fc:
         79:31:bd:32:02:12:70:ad:18:d9:2c:e4:90:4d:fe:32:be:b0:
         40:46:2d:98:78:af:96:db:d9:67:19:45:58:1c:c3:74:7f:a8:
         fc:14:24:1c:3d:9b:4b:ed:9a:28:0d:54:e8:5a:67:dd:ca:24:
         23:60:48:4f:06:60:83:1e:69:7e:ca:f5:ff:9f:08:f7:d1:00:
         fd:c1:01:5a:28:51:39:89:34:f0:c9:19:50:d0:84:79:5f:23:
         9d:a2:f3:bc:99:35:da:54:03:a6:86:17:ae:68:c1:63:12:cd:
         2e:d5:d6:fb:a9:06:94:33:30:89:3e:5b:7b:03:64:11:5c:a4:
         68:b1:68:24:c1:ed:c6:fe:ca:1a:68:a9:a7:9f:86:8b:82:c0:
         2f:bb:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:18 2026 by rpki-client