Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc8d709e-2007-3791-a72a-d1db522d4f12.roa
File:                     cc8d709e-2007-3791-a72a-d1db522d4f12.roa (raw, json)
Hash identifier:          aNeNt09bjxyBfJmXG1fdgSU1QqD2GlRKnUZUxbB7iTg=
Subject key identifier:   0F:E9:FA:B1:0F:7B:D3:D1:E7:E9:1B:45:2C:2D:D7:C2:A4:79:24:77
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAD7555133859D0C052B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc8d709e-2007-3791-a72a-d1db522d4f12.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        71.15.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:d7:55:51:33:85:9d:0c:05:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=61b3e74f-16e7-4835-8a11-91bf3064f132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:59:c5:28:b4:b5:11:06:dc:74:f6:f6:f8:
                    05:5d:89:44:90:62:3f:be:b2:16:b2:40:11:da:0c:
                    68:53:42:e3:54:5c:0a:e0:f7:99:40:14:a1:c1:34:
                    f3:32:0b:86:ab:b6:ea:4e:94:f1:34:db:ef:f5:d8:
                    55:38:73:ef:44:8f:2a:27:a7:9b:a0:a4:55:a3:c9:
                    11:dd:86:61:25:02:d3:62:74:36:4d:ae:da:a5:5e:
                    f1:87:dd:1b:0a:5f:ef:3a:2f:aa:6a:47:dd:c9:2d:
                    ee:44:57:28:5f:57:37:69:12:84:d9:ff:ad:20:ca:
                    1d:98:e2:e8:3e:ab:db:37:42:db:78:5a:74:e0:20:
                    73:33:66:72:09:07:8f:73:91:c7:b9:bf:bf:77:1d:
                    b2:92:6f:b7:f2:ef:2b:3a:55:2a:1f:42:7b:43:65:
                    64:8a:b2:e9:76:05:4b:2a:6f:82:8c:c6:d1:18:52:
                    32:0f:cd:d8:ef:6c:f1:ee:85:c8:fb:54:67:96:2b:
                    53:90:e9:e2:65:93:1e:8a:cc:18:57:70:a8:e2:79:
                    42:3b:33:9f:c5:34:65:e5:75:62:4b:5f:7b:08:e6:
                    f1:e5:23:19:a5:f7:ef:fc:09:77:d3:b0:3e:9d:d3:
                    c8:c0:0a:94:08:4a:e3:4b:10:c6:4c:b2:28:5a:6d:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:FA:B1:0F:7B:D3:D1:E7:E9:1B:45:2C:2D:D7:C2:A4:79:24:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc8d709e-2007-3791-a72a-d1db522d4f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:73:d7:2c:99:d4:8a:e2:16:6f:b2:b5:85:32:1d:85:81:
         49:97:68:e6:71:5c:c1:32:1a:9d:1f:82:3c:36:72:17:85:e4:
         eb:bc:21:33:5f:18:a8:59:8f:32:42:98:fd:f1:fd:a9:5d:a3:
         07:e0:7c:ef:57:c0:e2:04:43:20:50:33:fa:fc:85:e8:e2:f0:
         d6:c0:6a:13:3a:f2:4d:dd:91:e8:88:36:b5:98:79:be:04:4c:
         06:fa:6c:de:b5:c1:09:1a:22:83:47:1e:ff:82:70:ce:e4:89:
         95:8e:14:03:01:5d:87:78:d1:29:a2:d7:b7:a2:e5:14:43:e7:
         e5:65:44:bd:18:0b:94:7d:29:da:9d:31:7c:a8:4e:05:1d:ee:
         e7:60:a0:c9:8d:4c:b7:94:8d:f9:c2:27:e4:18:5a:02:dd:f3:
         81:aa:27:54:19:df:3b:8d:6c:de:5a:bb:6c:77:d7:f9:21:a4:
         fc:61:12:fb:74:3c:e4:7b:3c:a7:a2:c1:e5:8e:7a:4f:8c:23:
         89:40:80:06:7f:96:27:38:f5:a5:af:66:14:0a:4b:21:89:bf:
         2f:4b:dd:41:aa:75:36:67:5f:1e:15:74:d8:f8:c8:a7:58:11:
         51:80:b4:d2:0c:70:cb:f6:96:33:00:bd:13:70:9c:15:e7:e6:
         a9:e3:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:51 2026 by rpki-client