Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce285755-063b-32dc-9beb-0b581268ac23.roa
File:                     ce285755-063b-32dc-9beb-0b581268ac23.roa (raw, json)
Hash identifier:          5SyxZVlMvRnwM2QrCDiqUaSDZCzAnpo88y/e8VdXp8c=
Subject key identifier:   E5:98:A7:FD:26:4B:64:B3:BA:84:BD:90:FF:0D:B2:87:D7:E3:F5:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CABC85CB4FCA693FDB9680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce285755-063b-32dc-9beb-0b581268ac23.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        47.40.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:bc:85:cb:4f:ca:69:3f:db:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=6c418588-a009-4872-a553-612d215cf555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:b2:97:05:cd:bf:ac:25:5b:c6:3c:a5:12:
                    85:d0:3a:1b:37:41:bc:f0:0b:23:2d:4f:19:d9:80:
                    42:5d:c8:8a:e8:91:cd:cd:46:72:22:73:ce:6d:a5:
                    50:fc:dc:0d:38:a4:c8:67:99:4e:9e:af:1a:49:b3:
                    a8:b3:5a:b3:b1:a6:27:4a:67:5c:42:22:e0:c4:a2:
                    94:fa:75:06:76:20:5d:05:0e:c1:c0:b1:20:1c:c3:
                    5e:c0:aa:f6:b0:8f:db:b3:9d:c4:6b:45:ba:ad:63:
                    c0:de:a6:a7:7c:85:2c:5f:e3:ed:70:3b:65:04:d0:
                    38:f1:9c:93:c7:08:82:8b:d5:3f:3c:0f:84:a7:ad:
                    16:09:2e:be:67:96:57:0d:d4:a4:40:b0:2f:92:0b:
                    c3:51:63:e0:ea:74:6f:4c:3d:58:0d:9c:1e:ac:c8:
                    ad:84:61:c3:41:cb:55:4d:5e:a8:30:0b:3c:c6:6c:
                    47:dd:de:4d:df:4d:8d:8c:92:9e:2c:11:4d:3f:e8:
                    71:8f:59:7c:ef:e4:ea:6b:fe:c6:3b:97:46:b1:29:
                    e6:2f:da:90:ed:30:de:0c:76:0e:2c:8f:3f:ad:fd:
                    3f:62:73:6e:e4:a4:f5:50:1e:ab:5d:01:3e:25:43:
                    45:5d:93:64:c0:46:3f:79:3a:12:2e:22:c8:0c:c0:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:98:A7:FD:26:4B:64:B3:BA:84:BD:90:FF:0D:B2:87:D7:E3:F5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce285755-063b-32dc-9beb-0b581268ac23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:fe:89:d1:47:ae:56:94:fd:d3:a6:77:d7:31:96:70:ab:36:
         9c:12:26:75:f2:2a:38:de:d0:f6:31:c3:91:70:2c:f5:53:a4:
         25:3a:ff:b0:d9:b9:a9:e0:8b:6a:bb:be:62:58:ef:2b:f3:73:
         30:36:a6:36:a3:b0:81:90:7b:dc:d5:87:d7:1f:e8:a6:bd:d1:
         35:a5:c0:a1:06:46:ac:6e:98:fc:0f:7d:55:63:e3:19:a7:d9:
         41:fb:2a:1f:19:f9:fa:6e:34:ed:55:6a:87:66:46:83:11:e7:
         c2:02:9a:94:38:d6:ef:71:2d:fd:55:19:ca:22:60:19:a7:9e:
         0c:89:80:6f:50:95:6c:30:58:23:68:21:45:e4:35:75:84:fe:
         1f:36:b7:14:7b:49:72:b2:e6:4e:cf:53:57:91:dc:8e:a0:34:
         1e:44:42:da:e7:8c:a7:42:97:41:64:29:34:0b:d4:89:a6:69:
         6c:8e:1f:1c:da:e2:6b:aa:cb:3c:a5:15:79:d2:0d:c5:3d:82:
         a8:09:92:99:5b:54:54:59:8c:14:14:85:f7:66:81:9b:f5:52:
         91:cc:ff:6b:9f:39:be:bb:8e:be:d9:52:7b:b3:2a:32:25:e1:
         b2:9b:e1:db:71:96:31:e6:5e:a5:75:c5:ad:e5:82:98:b0:63:
         85:8d:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:10 2026 by rpki-client