Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa
File:                     6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa (raw, json)
Hash identifier:          jV0bvfCzUBQlUM1Z/Z1cHD/FibzeaUBNjMlDg4uDW44=
Subject key identifier:   A1:9B:2A:D9:EE:CE:83:74:CB:9B:D7:22:3D:29:C0:CA:3C:FC:A0:A8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDE777B644E12A36F8AE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.90.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:de:77:7b:64:4e:12:a3:6f:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=cd30c521-7e7a-4174-bf57-42024310b5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:27:7d:7a:46:b6:6a:53:aa:e2:c9:4c:9b:
                    f2:0e:27:f9:07:cd:e7:bd:b3:51:af:93:92:b9:5c:
                    ed:ec:4e:c0:df:e9:29:95:1d:1e:ac:ed:f7:e6:27:
                    42:8a:ae:f1:f6:89:85:9e:bd:5c:e3:9e:bb:d4:5e:
                    43:9b:6b:92:ac:c2:21:4e:aa:ff:81:71:ed:d1:48:
                    e9:49:08:73:a6:26:fa:c5:2d:52:d2:63:a1:75:10:
                    a6:b8:fd:89:99:6b:af:8a:5d:4d:63:5b:aa:ef:eb:
                    f8:2a:4b:4e:ce:51:53:53:37:11:4a:2f:eb:9d:0e:
                    53:22:31:bd:ec:c3:88:9c:31:55:99:2a:f9:6b:4f:
                    c1:75:e2:ee:4d:58:9f:44:d9:3d:a4:10:58:b8:79:
                    ea:08:2b:3e:8a:44:74:a6:64:e0:7a:d3:96:48:10:
                    90:77:4a:42:74:c8:12:26:bc:4e:fa:be:69:ea:f5:
                    da:9e:78:ba:3e:07:f0:8c:ed:b2:cd:ec:d4:15:9f:
                    31:50:97:49:ad:d5:a4:ba:8c:6f:88:90:54:8c:29:
                    87:12:e5:58:37:f1:c8:72:4f:4f:62:b2:13:ed:13:
                    42:46:7b:31:f4:bb:af:c8:e9:ff:93:2f:aa:13:10:
                    76:0c:96:b9:85:22:f4:1a:27:c1:63:d2:a5:73:a6:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:2A:D9:EE:CE:83:74:CB:9B:D7:22:3D:29:C0:CA:3C:FC:A0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.90.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:48:9e:df:99:86:cf:b2:58:a4:76:b6:c9:31:90:31:28:ca:
         17:40:d2:67:b2:4a:63:41:a1:66:fb:c5:ee:d1:c5:8b:42:7a:
         85:4e:d6:8c:56:e3:44:f7:6c:80:41:e8:c5:69:f8:36:60:33:
         c3:2b:1d:94:eb:c6:df:44:d1:bf:8e:d0:6c:ff:f9:e1:5b:64:
         2c:53:00:4d:f3:8b:27:b8:be:75:29:4e:35:fd:66:9e:8d:41:
         91:68:d5:06:54:f7:d2:e2:d7:b4:77:e1:b1:e5:9d:cd:45:44:
         49:0c:a6:4f:4b:86:e7:1b:a2:f1:a2:dc:bc:26:8e:d6:ec:be:
         c8:e4:12:5e:b6:ae:c2:29:3c:d1:74:b5:31:c2:41:62:64:2c:
         e8:23:3c:e0:5f:0f:b9:9e:78:75:b6:60:4f:02:11:0b:7a:70:
         b2:9c:15:13:4b:64:82:32:d4:b4:2d:6c:67:a5:07:01:04:d9:
         fe:a7:c2:14:59:fa:10:c9:b9:8d:b7:be:4c:b0:ee:16:be:cb:
         71:a1:9c:51:b9:c6:b9:2e:22:c3:ec:33:d4:c0:48:fa:9b:85:
         5f:52:33:05:c2:79:44:2d:f0:52:8f:82:5a:81:ce:7b:fb:d4:
         4d:96:33:49:f6:e0:68:39:fe:16:b7:37:7d:5c:07:b3:da:53:
         a9:0d:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:12 2025 by rpki-client