Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ead7def-2777-3449-8ec0-f8bd38e061d6.roa
File:                     8ead7def-2777-3449-8ec0-f8bd38e061d6.roa (raw, json)
Hash identifier:          X9QxKZUU+h+oA43hgHyjbEIU1QPVHKbGAGn+KShHayo=
Subject key identifier:   3F:69:84:AD:5E:AE:E0:D8:FD:97:45:CF:A9:52:04:56:1D:D7:69:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDAE35B9E24327CFC9980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ead7def-2777-3449-8ec0-f8bd38e061d6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        156.19.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:da:e3:5b:9e:24:32:7c:fc:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2fbe730c-00de-4fef-a9dc-14eba360329d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:f5:f0:61:5d:05:d0:66:96:d1:ca:b4:bf:
                    32:4e:2e:fa:81:c3:0b:c9:eb:7a:0a:3c:d5:f7:5d:
                    3c:51:b7:7b:59:f5:96:6f:e0:f7:43:9a:03:90:d7:
                    8e:4f:64:b5:91:e8:84:46:85:f3:62:ff:4d:4d:01:
                    38:02:be:39:12:f1:0c:f0:9f:75:57:0b:f6:c0:dc:
                    ff:50:81:17:ec:d8:2c:af:b1:5e:3c:62:57:8a:35:
                    92:17:00:59:65:d9:f3:ff:28:25:37:77:0f:69:80:
                    b9:f7:d0:c7:fe:79:1c:bb:f9:4d:0d:81:02:d8:27:
                    1d:30:a8:5a:ac:32:7c:a1:5c:de:7f:e2:c7:36:b4:
                    b7:fa:38:f4:c7:57:43:54:95:ec:bd:84:a0:3f:95:
                    f0:31:bd:b8:97:60:ce:b0:8a:f9:51:8b:c3:d8:22:
                    1f:25:bb:d7:95:6f:14:b7:1f:87:af:5b:24:86:cc:
                    f9:c8:5e:4f:87:07:88:f1:2f:5d:38:f7:f9:44:b0:
                    9e:d2:32:a9:16:15:67:09:f7:c1:a3:ac:d6:ca:a1:
                    8c:1d:1e:1d:56:9b:09:49:52:94:92:0b:69:f3:f8:
                    84:51:49:99:ba:5d:49:fd:22:4b:98:ce:04:f3:02:
                    2c:57:2b:79:a5:0f:08:a9:06:d7:96:b3:59:de:ed:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:84:AD:5E:AE:E0:D8:FD:97:45:CF:A9:52:04:56:1D:D7:69:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ead7def-2777-3449-8ec0-f8bd38e061d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:82:85:49:b1:a1:3a:2b:ba:e8:a8:0c:cf:66:02:9d:5b:94:
         1b:4b:0f:fc:aa:ff:ba:c7:92:ab:76:48:bb:e0:de:a1:c3:fd:
         d3:0f:ce:bc:f8:36:3f:a4:bf:47:6e:3e:f2:c4:eb:72:fc:5d:
         4e:da:60:4e:77:bd:2b:f0:3b:b9:54:ef:38:4b:30:46:d6:3f:
         2e:1f:57:c7:d9:74:63:41:b3:fb:19:c8:15:48:2b:30:5e:8f:
         2b:dd:e1:6b:05:e5:ab:72:16:d6:41:29:7d:d3:71:ac:53:8b:
         aa:ee:e6:09:ca:33:c8:1f:ba:5c:81:a7:f6:54:43:61:30:f1:
         28:4a:99:27:03:09:c9:f4:62:e9:d6:9d:72:5a:1d:49:c2:9d:
         32:86:22:cc:e0:e2:6f:54:cf:df:eb:88:b8:f8:06:e0:96:0b:
         44:23:17:b0:c4:28:bd:b5:34:21:16:dd:db:9a:41:71:f2:7d:
         4e:68:52:40:c6:9e:4e:e9:6c:ff:a7:9a:06:1f:65:a2:f8:c0:
         c9:68:56:77:c9:92:63:6b:04:9b:ea:5b:57:49:08:d2:27:7e:
         c9:21:d3:39:09:03:de:94:62:df:f7:4e:63:82:f1:23:fd:75:
         47:94:68:8c:9c:8e:1b:d5:3b:5a:09:f5:4a:95:a2:e6:90:79:
         65:1e:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:57 2025 by rpki-client