Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7af07f6-75b7-315a-bb7f-10c549853846.roa
File:                     e7af07f6-75b7-315a-bb7f-10c549853846.roa (raw, json)
Hash identifier:          EwBQk2BysfsCbv4MHbOCFaqGZsg+nzJV8Bc7d0PqNkQ=
Subject key identifier:   51:CA:D0:B1:06:BE:E8:DB:15:C1:C5:E0:08:A4:7B:B3:EE:36:7B:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DFEE6D86654AB53BE8760
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7af07f6-75b7-315a-bb7f-10c549853846.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.9.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:fe:e6:d8:66:54:ab:53:be:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=23a5dc4c-be69-495d-a905-55435e26d492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:39:cb:59:ab:91:e2:ab:a4:a4:d8:4f:96:
                    cf:9b:e4:84:18:87:2e:38:7d:c9:6b:ae:08:ab:f5:
                    5c:41:cf:8a:46:27:a5:f6:39:a6:c9:ab:c3:bb:6d:
                    2b:bb:a9:6e:16:27:71:34:f5:91:49:fe:67:7d:1e:
                    9b:a5:b7:5e:32:f9:b9:69:70:83:e2:dc:b1:71:9c:
                    95:f7:3e:a2:29:a6:bb:d3:f1:8a:f4:68:80:a9:f1:
                    77:6c:56:a8:46:5d:88:f3:31:2d:fe:ff:8f:91:e0:
                    5f:ab:a2:c9:6f:6f:e7:04:cb:2d:cd:50:25:d4:b2:
                    e9:6c:a8:a3:b2:62:c9:fd:dd:42:c2:dc:eb:d0:84:
                    c8:f2:ca:0f:9e:67:20:a3:55:03:cf:93:9f:76:6f:
                    25:6a:b2:d2:1b:01:6a:e0:59:8e:19:d6:e6:f8:57:
                    55:32:62:50:19:f4:e6:cc:8f:f4:2b:4b:05:4a:15:
                    5b:37:fc:4b:14:39:38:a1:88:88:65:39:02:ed:7c:
                    49:a1:1e:5d:3a:46:0c:ca:af:93:a4:4e:6f:2d:2a:
                    f9:7b:90:ce:33:b1:6f:4a:4d:1c:4a:90:f5:84:ef:
                    40:e6:e6:19:22:45:a4:eb:fd:18:0f:3a:f0:ca:b0:
                    8d:8a:30:6e:8c:2f:c9:30:da:3e:89:65:98:c2:05:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CA:D0:B1:06:BE:E8:DB:15:C1:C5:E0:08:A4:7B:B3:EE:36:7B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e7af07f6-75b7-315a-bb7f-10c549853846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:51:9e:34:7f:9f:2e:8c:41:1c:6c:ad:d0:f4:34:56:f0:62:
         dc:b4:92:2e:f2:58:5f:9c:4f:6e:84:71:fa:cf:b9:85:e2:10:
         68:af:84:71:b8:26:23:f1:c7:72:f7:d9:19:5f:2d:fe:10:aa:
         a3:52:f0:c8:29:71:91:b0:74:44:52:94:49:01:76:4a:95:f9:
         13:85:1f:85:77:26:9d:f4:65:64:15:36:8a:7a:2c:aa:c4:bb:
         9f:45:4b:72:02:0f:e9:1e:aa:67:1e:cc:f4:39:4b:4f:f5:86:
         f8:cb:e4:b1:f2:0c:8b:a1:ac:54:a2:40:88:3b:9e:ae:27:c0:
         fd:9e:ce:a6:2f:b2:d3:1e:36:4d:b4:7e:53:ee:41:dc:aa:15:
         14:de:f8:17:e3:34:1a:a1:9d:a0:e7:78:0d:8c:2b:2e:dd:cb:
         bd:2f:1f:de:37:54:12:6b:70:a1:aa:0a:6e:4a:2d:e6:9d:92:
         2a:ad:a8:fc:d3:51:31:ec:7b:a1:30:50:03:f2:99:3b:a1:49:
         96:85:64:45:d4:6d:73:d4:3a:18:82:8d:18:b3:70:8a:db:96:
         a0:08:61:b7:94:48:67:ca:25:a9:58:33:fc:b9:a7:79:e5:0a:
         0c:81:5b:05:eb:08:33:ae:31:d7:80:e0:cb:32:22:2c:23:e7:
         84:b5:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:22 2025 by rpki-client