Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/daca2695-32d5-3b54-b280-c569c1b5cf15.roa
File:                     daca2695-32d5-3b54-b280-c569c1b5cf15.roa (raw, json)
Hash identifier:          zF1eIiOSR54R1UBCqXs4QK5ba76g6PYibBmxc+cE7jc=
Subject key identifier:   BD:29:6E:5C:62:F1:AB:C9:D4:C9:7D:71:03:63:DB:2A:18:41:30:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB5F95BCAE2A1563AAC500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/daca2695-32d5-3b54-b280-c569c1b5cf15.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        47.51.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:5f:95:bc:ae:2a:15:63:aa:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=59c05946-df68-42c6-a4ef-4a63dc5a9869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:1b:6f:77:b0:68:16:6e:cf:a5:41:dc:67:
                    7e:2d:fa:dc:98:5d:28:da:b1:f3:58:a6:43:01:f3:
                    b3:73:46:6d:5b:69:86:c7:93:2b:8a:f0:a2:3d:78:
                    37:73:86:16:18:64:4e:08:d3:f7:58:de:5c:ff:bd:
                    1a:50:ac:d2:4d:2a:88:f9:77:d4:fc:10:14:70:15:
                    e8:52:60:da:69:06:36:42:74:8e:4b:e5:8c:22:77:
                    74:1f:9e:41:72:8b:f5:b0:e3:0a:91:e5:e3:6e:7b:
                    b0:25:4b:69:e3:d8:71:b4:2e:3b:bf:05:21:81:ed:
                    71:99:c7:5d:e1:dd:6e:98:00:08:f1:66:0e:dd:6b:
                    33:5a:12:bd:28:06:59:76:08:66:cd:dc:6e:c3:62:
                    c8:ea:3e:ef:31:78:a7:d2:26:b7:02:d4:07:59:99:
                    29:3f:89:6f:c9:79:49:0f:44:32:11:f8:75:02:90:
                    25:d9:98:25:7d:e0:c3:55:24:d9:fe:57:ce:4e:c9:
                    78:06:a5:5d:75:a6:10:4a:0a:47:cb:0c:ff:aa:db:
                    aa:f5:da:ca:25:de:0c:62:b1:e7:09:15:c4:f2:36:
                    25:bd:f9:9c:f6:d8:af:36:08:cc:33:07:79:ac:92:
                    38:ed:94:a2:f8:8a:9b:1d:c0:c1:53:1c:3f:af:84:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:6E:5C:62:F1:AB:C9:D4:C9:7D:71:03:63:DB:2A:18:41:30:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/daca2695-32d5-3b54-b280-c569c1b5cf15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.51.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:4f:86:80:bb:f3:19:ae:c7:c0:18:5d:7b:d9:fc:b0:ed:
         ee:8f:3f:fc:51:2e:a3:cd:00:08:68:ce:0c:56:fb:fa:ff:9d:
         d7:2d:af:3a:11:8c:63:5d:e0:95:fb:93:0a:9c:1b:64:e4:ba:
         ec:de:01:8a:2a:29:fc:c9:7d:10:d0:12:56:ec:c3:9b:42:55:
         ba:47:4a:df:60:c8:78:19:d4:44:a7:cb:df:72:1f:25:20:ac:
         72:d8:1e:6b:5a:07:2b:b0:c9:e8:44:35:d1:57:23:4d:7a:d4:
         35:81:8f:b5:fb:4d:6e:65:41:34:c9:68:07:4c:be:e4:ba:f5:
         bc:9d:70:b5:e6:c1:44:5d:0a:6b:d8:77:14:63:2b:2d:95:7c:
         b8:d0:19:5b:a2:17:80:c2:4e:88:ee:54:df:6e:e7:bb:d3:8e:
         f2:bb:34:3b:49:46:dc:60:72:57:0b:4b:cc:03:5e:23:0f:f2:
         de:59:16:03:31:38:6f:fc:e8:f0:99:ab:74:58:55:e3:a4:ae:
         1d:44:eb:d5:e5:fa:d8:2b:2f:d3:a9:bb:d5:0a:d4:dd:12:88:
         20:c0:cc:8b:ee:aa:ad:77:2a:0a:72:1f:9e:b8:a2:ab:a3:aa:
         e7:fc:ef:a4:6a:1d:8e:07:a7:55:e7:55:94:c2:33:03:e5:b0:
         0c:c1:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:12 2026 by rpki-client