Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa
File:                     69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa (raw, json)
Hash identifier:          UDag+RtHOx1nNJmU/PJ2S9+hnjX4AC1aVvL8AG/DnQU=
Subject key identifier:   CF:21:06:06:39:70:F5:3B:38:6B:13:BE:E7:7F:70:B2:CB:FF:83:A2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAE06A5EEC83326069E820
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.94.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:e0:6a:5e:ec:83:32:60:69:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=280af888-aa3a-4f62-b780-70b1fc73e0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:9d:1a:39:fb:0f:75:6c:9d:ee:30:e2:ae:
                    af:ac:8b:c6:e4:ae:6b:10:3f:6d:e6:5a:63:fe:c7:
                    a0:ec:17:02:8c:70:e2:32:e1:b9:c1:ea:0d:a8:f7:
                    dd:c9:d8:ab:9a:8f:43:cf:e1:92:ea:4d:f8:dc:e4:
                    a7:be:57:ed:85:29:6d:04:7c:8c:b3:1d:df:9e:3a:
                    9c:fd:be:78:99:cf:86:96:03:09:74:3a:7f:75:50:
                    52:43:ed:03:96:1c:44:a7:e5:4e:70:2d:7e:ad:4c:
                    bf:df:a8:c0:9b:3f:4e:b9:f8:6c:77:ac:08:b2:8c:
                    f5:73:a4:b0:61:6c:5f:d7:75:b4:11:70:ef:79:15:
                    78:eb:36:a4:80:89:20:39:ee:97:66:62:57:44:5b:
                    43:62:20:d6:34:b8:cd:a9:89:57:15:e2:c2:3c:62:
                    2d:e4:04:1a:cf:9f:d7:b6:c9:de:d6:f0:cb:79:13:
                    0b:b1:54:fe:dd:e2:82:a8:ce:47:4c:84:86:e1:62:
                    35:5d:f8:0c:02:bc:4d:4d:a9:1f:fd:96:41:d5:80:
                    89:fe:c4:5c:d0:2a:46:13:e4:48:81:0d:a0:99:f3:
                    bf:db:03:81:60:bb:16:db:65:b2:17:22:fc:61:cf:
                    43:35:07:72:d6:3a:cf:7f:29:1c:97:6c:1b:15:9c:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:21:06:06:39:70:F5:3B:38:6B:13:BE:E7:7F:70:B2:CB:FF:83:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.94.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:01:92:54:5f:d7:5d:88:de:17:84:68:18:7b:a0:24:0a:
         10:c9:85:08:9c:30:35:3f:9f:de:c2:22:b1:53:26:db:0d:c2:
         77:8d:ea:97:cc:ae:be:63:4b:cc:d2:28:9e:f3:df:12:62:6f:
         57:41:31:56:1d:3d:d4:ae:35:50:b7:c3:a1:4f:87:55:de:7e:
         be:6a:fe:c3:cb:7d:fc:33:68:37:d7:94:65:44:41:71:cb:9c:
         17:26:e3:39:8e:bf:55:08:ff:6f:13:15:0c:67:a7:37:9a:e5:
         73:87:e0:c0:ff:f2:04:76:35:00:7f:3b:29:96:a2:44:eb:62:
         3d:86:cb:99:80:2c:0a:be:9e:6a:9f:25:fb:39:df:2b:b4:03:
         f7:af:55:b8:55:b4:7c:1e:21:bd:f3:e2:bc:37:2b:d9:2d:ff:
         74:82:00:0c:c5:bb:66:d8:ab:b5:4b:75:e2:de:8c:86:e8:2e:
         28:38:26:ab:99:e9:3a:f2:94:11:fa:10:5e:e1:30:a2:d0:e9:
         42:ce:c5:50:03:43:b7:ff:73:c9:6c:4c:74:18:4e:6e:c3:bf:
         e9:1c:cc:de:38:7f:b5:24:9c:2d:76:4d:f5:12:12:4d:23:f0:
         00:b2:44:25:cc:99:d6:a5:4e:10:11:bf:fd:c6:27:68:28:6d:
         4e:53:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:12 2026 by rpki-client