Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ae6827b-7929-32a4-9d63-faba8c1d8d84.roa
File:                     8ae6827b-7929-32a4-9d63-faba8c1d8d84.roa (raw, json)
Hash identifier:          rdEli0eYxVKjZ59HFBSlPy0PcPlLDM94E8C4g7MePCM=
Subject key identifier:   8A:54:13:3E:D5:80:10:4A:33:54:18:DF:3D:73:62:8D:BA:3B:FC:63
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDC98D105B75E3509DCC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ae6827b-7929-32a4-9d63-faba8c1d8d84.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.82.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:dc:98:d1:05:b7:5e:35:09:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=165f71f2-05e9-44f7-94c6-fac74764b3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:e2:e6:a4:57:41:eb:21:ed:05:a6:2a:a1:
                    d2:66:61:f9:e0:d0:84:5e:f9:97:93:02:28:26:72:
                    15:9f:80:2b:0d:96:e1:30:99:3e:7c:d8:e2:b9:a6:
                    b9:a6:92:54:31:80:74:fb:4c:db:54:0f:93:a9:92:
                    01:5c:be:d7:3e:5d:18:5b:94:d4:0f:1f:08:85:60:
                    73:df:2b:30:79:69:24:0a:42:27:f8:d1:5c:21:4d:
                    e5:77:a7:95:b6:8b:3f:26:d8:12:66:2d:ed:e2:53:
                    85:e9:73:8e:7c:21:81:30:e9:84:bc:7e:22:bd:22:
                    92:eb:5a:70:bf:03:3a:30:3a:70:31:74:a3:67:27:
                    05:cc:38:d6:40:85:cf:8c:86:23:68:13:be:fa:aa:
                    d3:26:07:c1:cb:37:92:8f:a0:38:f8:d4:0b:3b:dd:
                    26:52:58:e5:d0:3b:d3:a5:60:e0:df:cb:2a:3c:88:
                    b6:b9:53:f2:df:65:a1:ad:6e:79:b8:95:7b:98:b4:
                    75:07:ab:00:fb:89:57:86:c6:16:5d:60:97:a3:01:
                    81:01:a0:d1:42:0d:5c:da:c0:60:35:ed:a6:04:86:
                    2f:40:a3:1b:6c:cf:ae:98:d8:64:45:75:ba:fb:11:
                    db:3d:bb:a9:4a:8c:38:8c:61:09:66:b4:01:f4:61:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:13:3E:D5:80:10:4A:33:54:18:DF:3D:73:62:8D:BA:3B:FC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ae6827b-7929-32a4-9d63-faba8c1d8d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.82.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:96:39:80:a7:7f:9f:ce:6d:99:99:73:88:41:80:c0:98:fb:
         88:0e:43:d0:92:06:46:c3:34:d5:4c:f1:3a:2c:d0:ed:9a:fd:
         97:44:00:0c:15:a9:7e:7e:de:41:99:99:f1:52:f5:a0:61:6b:
         65:1a:ea:51:7b:0e:26:51:4b:c5:fa:7b:32:d4:26:0b:86:80:
         17:70:d6:bd:19:0f:0c:06:06:97:23:7d:05:c2:40:b0:f6:12:
         0e:a2:a0:e7:17:8d:cd:42:30:a1:54:90:34:b2:35:6d:02:27:
         f0:b9:fd:a0:84:f9:16:7c:1a:bd:2f:c7:87:fb:de:a9:de:b4:
         c3:76:3d:be:4f:1c:ab:7e:fc:fb:b0:d5:be:87:a3:4e:1f:a0:
         10:3a:f0:78:dc:52:99:60:97:62:15:94:e4:22:6b:5c:66:38:
         92:6b:93:ae:cf:8e:3a:fc:07:c6:c2:ad:82:b7:a1:0a:a1:25:
         11:b2:0c:cf:85:b4:48:b5:bc:a1:e2:71:b4:ab:22:ba:78:f8:
         7d:15:56:1a:48:33:fe:e2:c2:b6:b2:f2:33:b2:20:76:cd:42:
         41:e5:cc:bb:ed:3f:db:6f:62:a7:e0:57:64:a1:46:03:21:13:
         7f:a0:fa:77:34:3e:fe:27:ed:24:73:92:b0:41:fd:d8:84:19:
         6e:81:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:57 2025 by rpki-client