Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ffc95ab-a946-3219-990d-a164b3031e56.roa
File:                     9ffc95ab-a946-3219-990d-a164b3031e56.roa (raw, json)
Hash identifier:          kOFLvUEsByNfxbSZZwOf57+JWhvkzOw/qADHRAWEjAA=
Subject key identifier:   C3:51:BA:16:97:52:37:FB:65:16:8E:BB:6E:B9:FC:4D:7F:06:4E:DA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDE2629CB47AFF3DFB940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ffc95ab-a946-3219-990d-a164b3031e56.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.88.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:de:26:29:cb:47:af:f3:df:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2cb7a729-5f3c-442b-a94e-330fcffe3721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:11:b5:33:67:d6:ed:62:3f:41:ff:cb:48:
                    e0:87:26:5a:f1:b2:ff:2e:f9:4f:6a:4e:18:98:7d:
                    82:89:77:7d:9a:7b:47:8c:5d:44:01:b7:e3:19:4d:
                    ea:c9:a7:69:bd:43:fc:b2:8d:92:4a:55:a6:18:26:
                    c1:19:89:0f:33:da:b6:cc:44:3e:b8:be:79:c2:53:
                    44:a3:00:8f:e3:d0:3f:f4:25:19:40:e2:8b:e4:15:
                    cc:33:31:fd:a9:b6:c1:c2:2e:09:98:aa:6c:56:c2:
                    d5:69:28:c7:e4:45:1e:78:6c:d0:65:5a:17:c5:ab:
                    5f:25:e5:ae:42:86:03:36:9e:75:c3:b1:a9:06:9e:
                    83:da:97:bd:13:6e:c5:8a:57:48:98:85:f8:a3:d7:
                    88:55:49:21:bc:d2:8b:17:9e:d0:f5:a2:00:9c:e4:
                    63:24:7d:e6:a4:0a:79:e2:68:5b:be:e5:23:7c:03:
                    b5:c3:b5:c6:0d:ec:d3:8f:89:37:bf:0f:26:1e:fd:
                    28:b3:ff:fb:7f:50:0f:3b:68:18:42:59:4a:fe:8f:
                    3d:06:fc:ff:28:51:ac:b8:2f:3f:bf:9f:23:0d:c4:
                    e5:f5:c3:87:49:93:22:08:52:4f:85:f5:a1:7c:84:
                    0d:4f:67:2a:69:5d:51:3b:57:54:8a:a3:41:d0:33:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:BA:16:97:52:37:FB:65:16:8E:BB:6E:B9:FC:4D:7F:06:4E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ffc95ab-a946-3219-990d-a164b3031e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.88.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:de:94:5c:1e:1a:7f:d2:59:b4:f4:a9:c8:25:65:b0:b6:
         08:da:3b:93:31:da:83:83:35:00:29:51:93:bb:7b:a8:e2:37:
         56:6a:c0:f4:34:73:0a:ba:71:c6:97:2d:db:2e:7a:61:8a:d5:
         b9:77:90:3f:e2:2a:77:dd:d5:82:79:b2:28:4d:63:8e:98:bd:
         14:bf:e7:ec:aa:ca:9f:df:e7:3b:91:27:41:f2:d0:9b:ff:25:
         be:f6:d0:03:2f:f9:af:e8:b8:1b:f6:51:c0:1d:81:13:15:11:
         91:0d:9d:a0:6c:9a:1e:b1:a3:a8:9c:6f:1e:1a:ad:a2:10:16:
         bf:84:20:75:e6:9d:d1:f6:e6:03:03:d6:d5:43:fd:da:72:e3:
         e3:09:81:8f:ba:19:03:e0:6f:e5:86:64:a3:39:db:49:ed:04:
         70:5c:20:00:11:17:a0:1b:a0:bc:b1:c8:16:51:9c:40:3d:11:
         c9:92:20:86:90:66:a4:ed:47:5f:e0:df:de:6b:64:b8:ca:85:
         31:9d:88:a4:bf:0d:c4:58:68:49:1c:32:ec:2c:9a:19:3c:2f:
         cf:53:19:63:cc:5f:a1:5d:38:de:dc:6f:9f:f0:67:e7:92:50:
         38:65:cf:e5:20:57:b8:14:38:8e:a3:50:91:20:87:da:9f:b3:
         57:38:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:25 2025 by rpki-client