Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a55bbce8-e700-3e6b-b940-4ecacc5121f2.roa
File:                     a55bbce8-e700-3e6b-b940-4ecacc5121f2.roa (raw, json)
Hash identifier:          TzOopTy9IEgWXBJWeZF2CztIeJDswulnZJjRw+baPo4=
Subject key identifier:   23:89:45:7D:25:2D:AA:7F:2A:66:99:86:9B:42:62:D9:3B:7A:2D:03
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB509693567E21EC6F5780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a55bbce8-e700-3e6b-b940-4ecacc5121f2.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        47.7.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:50:96:93:56:7e:21:ec:6f:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d2727407-9aaa-4773-b023-45c9d0f327e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:58:ac:4a:f3:9f:8c:fc:b0:34:0e:70:29:
                    56:af:bb:45:e9:80:0c:f6:1e:6a:28:eb:09:1b:11:
                    28:d5:7e:17:a8:05:a4:52:4f:0e:ef:c6:24:37:40:
                    a9:1a:d3:00:ab:4c:1d:2f:9a:2b:f1:f4:60:5a:e6:
                    3a:6f:0f:95:73:67:20:b2:90:87:a1:bc:32:76:f5:
                    7c:55:0f:bf:39:c8:14:d4:51:11:0d:27:2c:25:a7:
                    da:8c:ae:5b:6d:31:46:c2:a1:54:a4:48:58:5d:83:
                    ed:a7:cc:b7:7b:ae:32:2f:7f:f0:44:61:39:58:33:
                    bc:f4:47:b5:7d:65:a9:8a:04:c6:cb:eb:06:ed:ac:
                    64:b4:77:51:9e:ba:5a:83:63:d8:46:ff:26:f0:11:
                    9e:20:44:d3:b8:b1:56:b3:7b:a9:ce:13:b9:07:0d:
                    1b:44:94:04:6c:99:0b:2d:1f:f7:ec:77:1c:1e:aa:
                    d2:77:d2:e9:bb:5b:74:35:8d:41:36:92:b2:d2:4f:
                    84:0b:2b:f6:43:53:81:58:b8:96:43:44:ee:61:37:
                    09:9b:df:ef:d4:97:af:6d:3e:ca:7a:8e:73:6f:c0:
                    e5:a5:26:c8:fd:61:a6:63:31:37:cb:9d:47:19:93:
                    82:c4:a1:74:bb:88:34:c8:42:dd:fd:5c:80:61:b6:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:89:45:7D:25:2D:AA:7F:2A:66:99:86:9B:42:62:D9:3B:7A:2D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a55bbce8-e700-3e6b-b940-4ecacc5121f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.7.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:87:da:4f:d2:b0:a9:7a:17:2f:0c:f2:ff:50:d0:10:90:41:
         36:5f:db:65:a6:dc:32:40:ff:85:fd:28:11:ad:85:b8:71:29:
         83:b1:f8:62:32:8f:92:2e:65:f6:05:83:0a:6f:96:f8:44:20:
         72:68:fb:d3:c2:ac:92:fc:77:bd:ef:95:cd:9f:ae:45:46:05:
         b9:59:e2:1a:8c:a8:a6:5d:23:7f:bf:3b:6e:6b:fe:13:1c:c0:
         78:43:a0:e3:e6:c7:76:28:7a:b2:13:3c:c5:92:06:e8:33:5d:
         e4:9d:ce:05:ff:ea:2a:aa:8d:87:c1:eb:9c:28:86:24:a1:8b:
         4f:03:ef:59:66:d9:fc:4b:ab:9b:68:74:d9:f1:79:7d:b5:f4:
         e2:62:b3:1b:1a:a4:08:87:fc:38:89:4d:4f:4a:d0:ee:d0:a7:
         13:d8:68:8a:4a:c3:dd:7b:52:d8:c6:07:61:ce:de:76:cd:6b:
         1e:7e:2f:14:31:eb:41:b4:9e:ec:6a:8f:3a:e0:80:b9:57:0f:
         df:b5:2a:72:f1:76:83:30:f7:33:22:de:c2:6f:07:8e:95:47:
         81:3c:5f:8b:f3:dd:d5:cc:b8:d4:ad:54:77:7a:d0:20:39:f8:
         31:39:75:d2:10:e0:8d:c5:d0:4f:73:2f:09:a7:10:b2:dc:00:
         d1:ce:94:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay1CWk1Z+IexvV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZDI3Mjc0MDctOWFhYS00NzczLWIwMjMtNDVjOWQwZjMyN2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWtYrErzn4z8sDQOcClWr7tF6YAM9h5qKOsJ
GxEo1X4XqAWkUk8O78YkN0CpGtMAq0wdL5or8fRgWuY6bw+Vc2cgspCHobwydvV8
VQ+/OcgU1FERDScsJafajK5bbTFGwqFUpEhYXYPtp8y3e64yL3/wRGE5WDO89Ee1
fWWpigTGy+sG7axktHdRnrpag2PYRv8m8BGeIETTuLFWs3upzhO5Bw0bRJQEbJkL
LR/37HccHqrSd9Lpu1t0NY1BNpKy0k+ECyv2Q1OBWLiWQ0TuYTcJm9/v1JevbT7K
eo5zb8DlpSbI/WGmYzE3y51HGZOCxKF0u4g0yELd/VyAYbbYlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOJRX0lLap/KmaZhptCYtk7ei0DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTU1YmJjZTgtZTcwMC0z
ZTZiLWI5NDAtNGVjYWNjNTEyMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLwcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOH2k/SsKl6Fy8M8v9Q0BCQQTZf22Wm3DJA/4X9KBGthbhxKYOx+GIy
j5IuZfYFgwpvlvhEIHJo+9PCrJL8d73vlc2frkVGBblZ4hqMqKZdI3+/O25r/hMc
wHhDoOPmx3YoerITPMWSBugzXeSdzgX/6iqqjYfB65wohiShi08D71lm2fxLq5to
dNnxeX219OJisxsapAiH/DiJTU9K0O7QpxPYaIpKw917UtjGB2HO3nbNax5+LxQx
60G0nuxqjzrggLlXD9+1KnLxdoMw9zMi3sJvB46VR4E8X4vz3dXMuNStVHd60CA5
+DE5ddIQ4I3F0E9zLwmnELLcANHOlOY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:56 2026 by rpki-client