Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa
File:                     d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa (raw, json)
Hash identifier:          dD20b3mqEB8131NlNKUGc75ss45C3VAJzOI7PeRYo40=
Subject key identifier:   E0:5B:54:B8:01:63:57:BA:C0:32:FD:A3:F3:F5:3B:57:C4:5D:53:5B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAB3725924E29FD46DAA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        66.168.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:b3:72:59:24:e2:9f:d4:6d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1f031a31-d85d-4a38-91f8-4aca298fb5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:3b:9c:e8:f5:bf:8a:d4:79:43:bd:3e:ae:
                    41:7c:e3:0c:2a:01:28:1d:87:dd:b2:06:70:6e:4f:
                    eb:b6:b2:b1:42:fa:28:ca:51:a8:98:4a:70:e2:44:
                    e7:aa:4f:fe:1b:70:92:f0:55:40:be:2f:b2:4e:6d:
                    f8:63:04:40:9c:93:a9:ae:a6:d2:13:5e:2c:32:fe:
                    0d:22:83:00:e4:f6:a9:08:0b:11:8a:95:00:05:db:
                    08:0c:b7:f7:b6:3f:bf:0b:07:90:e8:85:82:1f:b2:
                    47:5b:0d:c4:6f:ff:70:e3:a8:c0:38:3b:9f:96:28:
                    56:59:e0:bf:49:df:59:b1:6f:2d:86:da:46:38:20:
                    9b:67:f1:bb:ee:53:4b:42:38:4c:27:a7:39:13:fe:
                    40:e3:c6:85:b2:f6:35:e3:e5:ec:4d:65:7e:9b:66:
                    3c:7b:41:49:5f:98:33:ff:31:b0:c2:db:61:33:ca:
                    40:e0:75:9c:1e:1a:f0:eb:51:af:3b:4a:ac:2d:72:
                    38:91:77:94:b2:28:bf:7f:82:cb:52:7a:11:d8:48:
                    cb:be:c3:2f:b7:01:23:f8:e7:13:98:77:af:37:66:
                    8a:aa:47:38:84:0f:40:11:01:72:19:fa:9c:1b:f5:
                    5f:a4:44:0e:41:e6:85:dd:dc:cd:44:d1:d7:42:e5:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:54:B8:01:63:57:BA:C0:32:FD:A3:F3:F5:3B:57:C4:5D:53:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9b3cf48-ebf6-3a34-ba36-70b7e8c62812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:81:18:ce:11:12:93:c9:15:69:f7:03:97:98:12:15:73:
         a8:92:36:f5:46:4b:d3:a0:2c:62:9d:39:78:5a:79:e7:e7:44:
         a2:b2:27:2c:e8:60:1e:ac:1e:eb:cb:62:d1:52:f7:80:59:96:
         0f:2d:c4:a2:3e:f1:8f:38:8e:05:b1:81:33:60:33:ca:ad:3a:
         3c:bd:cf:0e:92:dc:9d:32:2f:8b:a1:91:57:45:18:68:7e:90:
         6a:76:af:2f:2f:34:29:e4:5e:b0:c4:e9:5e:36:f6:f5:5d:04:
         48:08:f7:14:c0:be:4d:09:61:20:e4:e0:f3:9c:15:8d:76:cd:
         fb:1d:84:e8:57:17:c9:24:8f:8d:d5:44:00:e6:51:19:90:2c:
         2f:fd:92:be:3d:34:7c:08:c8:a7:4c:02:d7:d1:36:7c:bb:3c:
         10:2d:ca:b0:4e:5d:1b:44:99:bf:ff:6a:f5:a9:b9:3d:59:fa:
         11:6d:1f:a8:ec:39:1e:e4:57:29:68:82:5d:a0:51:57:5d:6e:
         75:12:7c:c2:da:a2:5e:30:2c:05:0e:f7:18:09:ae:e9:7b:fd:
         9f:ef:0c:12:07:f3:be:b0:ca:c1:8b:b6:20:58:88:d8:30:49:
         17:92:c5:1d:70:aa:8e:9d:da:2b:91:44:b4:d4:d2:74:b4:56:
         9d:da:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:52 2026 by rpki-client