Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa
File:                     b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa (raw, json)
Hash identifier:          T1XAEg9HrHcmMpdkSlvgLOqUp0304ktXYpjXjkRF1D4=
Subject key identifier:   D5:CA:25:0D:D3:E3:13:5F:CB:67:23:99:07:1D:8D:E6:C8:6A:55:CE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CACC2AD2B23D53DA4A9000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.191.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:cc:2a:d2:b2:3d:53:da:4a:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=2a625310-3ab5-4cfc-a07d-38cfa3413b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:67:f4:8f:7c:08:71:ee:88:94:c4:ac:1a:
                    3b:f0:17:30:55:95:5e:dd:0c:01:bf:3b:68:d9:c1:
                    0b:4a:3b:43:27:c0:6b:f7:63:f9:e4:ad:d7:e0:73:
                    ba:55:55:14:d6:db:80:e2:9b:c8:4f:2e:d2:b7:75:
                    c6:31:70:0c:c6:a3:e3:fb:05:36:56:74:3e:56:3c:
                    bc:1c:90:84:d3:e3:92:20:01:5d:20:06:4e:f6:8d:
                    8e:d3:58:5f:51:01:a3:ad:de:b7:2d:e0:52:4e:21:
                    42:06:32:cf:4c:c8:73:4a:cb:0f:cc:ed:11:7c:2a:
                    88:e6:5b:4c:be:81:28:6c:48:eb:c1:f4:0b:44:7f:
                    ba:32:c9:5c:89:4f:66:cb:8c:eb:8d:65:e6:a8:b7:
                    a3:e4:fe:45:07:b7:c2:4f:75:72:1a:a4:34:f0:88:
                    13:f1:34:af:8a:c2:e1:f7:a7:27:4d:22:3e:fb:84:
                    14:a8:24:d7:4d:ee:ea:03:5d:47:c7:1c:0f:32:ac:
                    b3:ff:38:bb:1c:48:81:53:67:e1:3d:af:55:36:60:
                    08:99:aa:cc:b1:28:8d:37:22:03:9b:78:e2:09:3e:
                    56:9c:0d:44:85:73:2d:0a:0f:be:52:50:a3:9a:a6:
                    35:d6:b8:d4:28:8c:59:eb:82:0e:02:ba:85:fd:40:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CA:25:0D:D3:E3:13:5F:CB:67:23:99:07:1D:8D:E6:C8:6A:55:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:72:38:1b:7f:f2:0e:25:72:71:7e:3f:c8:ac:33:17:c0:
         9f:ba:93:fb:8a:ce:94:b6:fb:9b:92:86:0d:07:27:4c:32:d4:
         5f:81:83:bc:5b:0a:75:48:65:ee:0d:3d:20:6f:54:0b:5b:30:
         4a:1e:5c:49:d9:2f:cc:5e:a0:8c:11:c1:2d:4e:b8:87:a4:cf:
         eb:9a:42:fb:bf:fc:3b:31:3a:38:d4:90:88:2d:d5:0a:11:41:
         28:08:8d:f6:3c:fc:4f:a3:a8:69:cd:23:5b:3d:3c:93:e1:6d:
         3d:73:12:7e:75:40:be:19:7c:0d:dc:e2:9e:cf:18:18:1f:75:
         36:e2:df:df:d7:6f:ee:c0:1d:ba:58:42:3a:6d:bf:66:26:59:
         95:88:7c:d0:61:50:77:fc:b4:34:f6:8c:69:d7:1e:aa:5f:8d:
         b3:20:73:a5:d3:0d:ca:4c:7d:3c:05:22:dc:e6:0a:99:46:71:
         24:e4:32:38:15:f9:71:ad:30:2a:5b:cc:9d:60:55:df:f8:aa:
         cf:34:2e:98:d0:81:70:b7:7f:f1:76:88:28:d4:b1:a4:3b:8e:
         e9:7c:6a:6f:4b:ad:d3:bc:1c:5c:27:5f:8d:4d:8b:09:73:a2:
         03:f2:b1:b8:bb:c2:7a:b4:06:6b:fd:78:6e:e0:6a:33:2a:5d:
         70:8a:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:01 2026 by rpki-client