Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6aba9390-0d31-3b8b-a5a7-75a26aaa537a.roa
File:                     6aba9390-0d31-3b8b-a5a7-75a26aaa537a.roa (raw, json)
Hash identifier:          TbjLzT4YJ4T5a3DWwK/FmVwpHRZqReUod13gPJIj644=
Subject key identifier:   BD:22:8A:92:2E:E5:0A:91:DF:DE:12:79:B6:28:EE:B1:25:94:40:7D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB783D6D1CA7920368A080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6aba9390-0d31-3b8b-a5a7-75a26aaa537a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.13.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:78:3d:6d:1c:a7:92:03:68:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a3dd76a7-7e54-4d24-8c85-bc262b6e3bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:20:dd:e8:14:de:e7:2b:16:65:7a:de:c8:
                    2f:a9:1f:8e:77:80:d2:ab:0f:d2:ad:67:52:06:b5:
                    5b:08:7f:22:ff:e8:c2:1a:c5:bd:08:a2:24:3f:54:
                    57:8c:42:23:e6:14:84:41:5b:67:91:75:93:24:2a:
                    69:ef:d9:d5:4d:6a:18:80:95:ab:57:19:02:10:b2:
                    2c:4b:de:c4:25:10:60:94:c2:93:90:1a:85:c8:7a:
                    51:5b:6f:e7:01:5a:9e:64:b6:ad:62:6c:f0:e4:7b:
                    20:2e:0c:00:d6:4c:d3:08:99:98:ff:c6:b9:d7:65:
                    d0:2c:bc:c3:3f:1e:c7:b4:06:7c:03:cf:c0:50:57:
                    0d:f4:04:8d:80:6e:a6:ce:cb:22:0e:91:26:30:81:
                    07:65:64:a5:5e:41:70:a0:b4:10:23:e0:ef:74:da:
                    53:79:e3:ec:27:bc:32:45:af:32:cf:23:d7:b7:d9:
                    92:98:b2:23:e7:e6:e2:45:08:eb:91:b7:7a:3f:74:
                    90:4a:ef:6b:47:02:23:0b:39:42:0f:ee:da:61:99:
                    c8:19:7d:a2:ce:f7:78:b7:06:c5:67:61:f3:73:87:
                    f9:51:8f:7c:e9:66:09:2d:b7:fc:71:a3:1b:fa:8c:
                    44:97:d4:4b:93:ac:35:61:78:2e:81:39:2a:f8:68:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:22:8A:92:2E:E5:0A:91:DF:DE:12:79:B6:28:EE:B1:25:94:40:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6aba9390-0d31-3b8b-a5a7-75a26aaa537a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:98:f8:46:54:34:c5:3f:6b:e7:4e:fc:94:06:8b:c7:de:b2:
         27:5d:86:9b:b6:7a:6d:df:8e:2f:c6:89:ee:5e:a1:ba:d8:73:
         25:fa:3b:57:f7:e6:8f:bb:69:f6:7d:26:48:20:ea:ef:e0:30:
         50:60:b9:ed:aa:c1:10:c9:fd:e1:cd:26:58:c2:50:e2:22:92:
         4f:f8:1f:ea:62:f3:be:a8:5b:ea:50:b8:a7:73:9d:17:de:ba:
         1e:aa:70:2c:79:5a:c6:66:6a:b6:6f:24:ad:6f:66:77:84:ee:
         39:09:10:c9:8e:51:6d:58:d5:d4:a6:1c:50:0b:8b:e3:4a:8b:
         16:6b:d6:27:77:59:cd:9f:52:9d:b3:f3:5a:4d:33:48:be:05:
         8d:f2:67:9c:46:32:8b:f1:fc:e2:ec:e4:5b:b8:04:02:0b:70:
         d2:da:46:3b:d5:00:0b:85:37:d6:0e:5d:e6:2b:90:6c:0e:55:
         7e:fc:58:c4:29:9f:91:c0:7e:cd:08:b7:45:52:2d:43:b0:76:
         d9:6a:6b:f0:a3:0c:69:1c:36:f6:61:30:d2:0d:f2:33:e9:87:
         87:79:6e:7a:4a:1b:fd:a3:c1:d1:7c:4d:06:f3:61:b6:76:61:
         56:d6:2e:3c:5e:e7:86:19:be:95:30:2a:5a:b9:32:7d:80:f7:
         2a:d8:47:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:39 2026 by rpki-client