Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/854c3c84-4733-32ed-b584-eccd6291c23f.roa
File:                     854c3c84-4733-32ed-b584-eccd6291c23f.roa (raw, json)
Hash identifier:          mOkvWmWPaA6TrdLM8b7s0V9VsyRQU12rvO60xivgCok=
Subject key identifier:   4F:68:E8:D9:9A:1B:53:06:05:EE:81:B5:86:79:35:C8:07:72:50:F8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F53419DB30E3D266AFA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/854c3c84-4733-32ed-b584-eccd6291c23f.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     22677
IP address blocks:        97.87.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:53:41:9d:b3:0e:3d:26:6a:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=51ca4e9f-75d6-4219-ace0-981d1a970817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:b8:2c:ab:fd:63:8c:d4:a8:b0:86:b8:8c:
                    5c:5b:7a:89:26:87:e6:84:db:25:76:fd:35:cc:77:
                    8f:e4:86:b2:af:73:82:9d:7a:db:f4:17:34:1f:59:
                    58:f9:8d:e7:b3:d8:c8:26:45:06:72:f0:0f:e9:0b:
                    34:70:30:d5:21:4b:ec:3c:61:4a:60:b0:da:0b:59:
                    c7:66:e3:c5:82:4c:39:58:c1:c0:d8:42:ea:d0:fe:
                    16:b4:84:46:c1:dd:53:f8:f6:45:4c:77:d6:e1:bd:
                    0b:bf:ff:31:85:57:24:07:cf:6f:53:47:4f:66:1b:
                    1c:8a:a5:35:bc:9c:a1:13:f0:5f:4a:6d:a9:29:76:
                    25:e2:13:f1:c6:bb:06:d0:66:09:e6:6b:89:7d:2e:
                    e6:e0:e1:b7:c4:d9:c1:8b:40:e0:87:bc:ca:e6:5e:
                    c0:65:87:92:9d:f3:57:ed:1c:15:1a:0e:ec:fc:a0:
                    7d:54:cd:cf:64:58:19:64:05:98:93:28:8d:cf:85:
                    1d:61:d3:e1:19:65:42:b2:84:8c:80:36:a5:8c:b3:
                    31:34:4d:26:bd:4a:b1:59:b7:de:e0:8f:bb:41:9f:
                    b7:9b:cb:cb:55:b5:6a:86:44:82:3f:cd:4d:eb:58:
                    2e:5f:4f:1b:c7:8c:88:53:11:ab:a3:f5:49:1c:4b:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:68:E8:D9:9A:1B:53:06:05:EE:81:B5:86:79:35:C8:07:72:50:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/854c3c84-4733-32ed-b584-eccd6291c23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:15:02:66:b6:89:43:73:e3:6b:6b:e3:fe:db:b6:ae:cf:
         93:e6:30:03:d6:f1:3d:27:6c:89:d0:a8:37:f1:d5:f4:e3:9f:
         72:78:7a:fb:70:96:54:34:8a:f8:ed:89:dd:ea:c1:fc:1f:4b:
         45:f8:46:ac:56:4b:97:92:0c:b3:a3:d8:cc:b5:73:8a:d4:67:
         be:12:06:30:41:50:aa:09:86:3d:5e:6c:2c:54:67:16:ae:44:
         e4:79:eb:d3:f7:4a:32:f0:71:ff:d4:2d:47:d0:b8:07:e8:fb:
         7f:fc:7f:9d:0c:0d:24:63:42:6b:f9:a6:1a:0a:af:91:2f:ed:
         4a:d6:83:33:fc:54:74:4e:ff:7f:b9:60:6f:d4:1e:53:49:d7:
         3a:f2:74:2c:2f:c0:a2:e7:f4:c6:0f:02:a1:47:68:a2:21:35:
         de:0e:f3:d4:76:4b:a7:39:9e:42:9f:a8:6b:5e:dd:cb:4d:41:
         75:9e:81:70:69:22:d0:18:fe:c9:4c:7c:d8:57:c5:63:77:68:
         2c:48:d7:e9:6b:73:00:27:6d:fa:99:03:ba:4a:a9:a7:b6:50:
         4d:14:28:de:14:02:e8:3d:8a:1b:74:ee:23:17:55:82:07:4b:
         8d:22:4b:d3:fb:0b:3e:48:0f:95:fd:6a:80:62:c3:48:63:f2:
         d6:60:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:30 2026 by rpki-client