Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1066750-d3f9-326a-8a6f-3e275d47c0fb.roa
File:                     a1066750-d3f9-326a-8a6f-3e275d47c0fb.roa (raw, json)
Hash identifier:          mAiED2buE7Nyy9buFn3afVG5poV3hJIBJKZayVWNKgA=
Subject key identifier:   2E:F1:0C:5F:CA:B1:29:8A:A0:2A:E1:B1:C0:D4:96:03:D5:6B:7F:BD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E39B18155C53A387A4140
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1066750-d3f9-326a-8a6f-3e275d47c0fb.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.86.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:39:b1:81:55:c5:3a:38:7a:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=958f831d-73e3-4175-8035-580b2f55b8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:40:b7:b7:c6:b5:9b:54:23:f6:07:7f:bd:
                    97:0b:67:81:bd:70:ea:96:67:84:ef:7f:0d:20:f8:
                    90:a6:d6:8c:1a:08:80:8e:e1:75:03:b5:d9:af:4b:
                    3f:dd:2c:42:bf:11:15:b7:be:69:47:6a:91:ff:1a:
                    ee:90:24:27:ed:c6:3c:41:da:38:a9:c9:03:27:53:
                    f7:0e:eb:02:c4:a4:5b:4d:39:f2:8a:52:df:b4:96:
                    da:55:83:fa:cc:8a:c0:4c:ad:d7:4e:70:d1:50:cb:
                    f3:53:17:76:74:8d:2a:11:25:db:bc:1d:15:d2:aa:
                    43:e7:66:4e:73:89:1e:7f:89:6a:e1:99:85:59:7f:
                    42:6f:d2:89:63:b7:17:18:88:3f:6d:53:1a:a8:b1:
                    ac:f2:2d:ad:b8:f3:7f:b2:ae:45:61:6a:7a:23:2f:
                    53:58:af:e8:cf:a0:0f:af:c6:64:bd:2e:94:3d:ee:
                    89:f6:15:39:bc:15:d6:52:1f:08:8b:a9:9a:4b:8c:
                    19:06:37:2f:77:aa:bb:e3:98:5f:56:5a:b8:9d:b4:
                    af:73:ae:65:86:fa:1b:64:3c:67:04:0d:09:e5:2e:
                    ec:50:b0:f6:69:e9:5f:42:46:a3:b8:05:4b:29:d5:
                    36:39:08:2a:24:00:b4:26:f0:fa:d7:f8:13:60:72:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:0C:5F:CA:B1:29:8A:A0:2A:E1:B1:C0:D4:96:03:D5:6B:7F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1066750-d3f9-326a-8a6f-3e275d47c0fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:c5:d3:b4:e6:82:6d:9b:56:10:f2:f7:5d:d6:2f:79:8c:
         29:fd:cd:ff:a5:3a:03:cb:f5:0b:08:d0:17:c0:1f:6c:4d:41:
         bd:95:62:b1:ef:67:f5:1d:4f:02:ad:8b:fe:69:27:76:4b:39:
         a0:81:32:ff:f4:80:c9:3c:dd:de:67:19:87:76:51:d7:7f:43:
         22:0d:a6:ba:ad:db:54:aa:c9:db:e1:1a:7a:7c:4f:d0:fd:0f:
         a4:7a:99:bf:2a:98:08:83:28:2e:d1:61:d8:f4:c1:cd:dd:21:
         a0:dc:14:fe:60:c4:94:b4:01:d4:de:24:90:2e:50:9e:f7:ca:
         bf:f3:40:9a:c1:9f:0c:f5:e4:6d:06:50:f6:05:a7:ef:81:65:
         43:00:b4:6b:6e:61:20:76:4c:35:97:36:a3:63:a7:8b:b4:15:
         69:2b:39:34:40:d3:4c:08:db:b3:7f:6c:3b:e5:28:0e:e4:88:
         b9:cf:e4:5a:53:45:b4:12:c6:b7:f1:4d:97:b0:b9:45:3e:09:
         e7:1e:84:8e:11:db:3a:1e:26:ee:fd:0b:6a:88:91:09:ec:1c:
         6c:a4:0c:3b:86:32:f6:bd:94:21:56:4f:e9:de:f3:8c:5c:39:
         c5:df:94:6d:0f:b6:4e:2f:86:fa:4e:e3:41:97:ec:59:fe:a5:
         36:47:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:44:30 2026 by rpki-client