Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f13250b3-1f86-309b-8441-5020dc4395ba.roa
File:                     f13250b3-1f86-309b-8441-5020dc4395ba.roa (raw, json)
Hash identifier:          0tpXT99e9Xjc/WTWdv3zKW/e/MIBtubDvPXGRqQDAAA=
Subject key identifier:   B0:71:80:9D:4E:0B:21:AA:8B:9D:B0:A0:52:61:C4:78:8F:7D:B8:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E294B7471E054B25435A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f13250b3-1f86-309b-8441-5020dc4395ba.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11426
IP address blocks:        192.60.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:29:4b:74:71:e0:54:b2:54:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=59c3c557-f696-421d-9db5-f23d17f4f786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:cf:ee:f4:7d:80:3c:51:a1:2d:82:27:61:
                    52:37:05:f2:fd:13:c1:35:37:87:e0:44:47:cf:06:
                    06:a2:7e:f6:97:f1:e3:18:d3:59:4d:dd:16:c8:3e:
                    db:57:64:e6:e3:c5:e0:7a:81:29:d1:fb:a2:fa:9d:
                    9e:c1:0c:56:92:f6:87:9a:d4:21:77:29:a6:a4:63:
                    37:99:5e:1f:3a:30:1c:88:f5:c5:39:ff:1f:ff:3e:
                    35:4c:8c:21:61:2b:fb:5d:a8:8a:d3:34:47:c5:69:
                    88:ba:ec:37:7f:ae:69:4b:bc:11:41:68:ee:14:07:
                    e1:5e:aa:92:7c:ca:71:6f:ac:8a:ae:96:a9:a4:77:
                    a6:c6:28:63:d9:65:35:cc:c7:6e:76:a8:ad:b3:13:
                    6d:9d:11:19:37:33:e3:50:d9:90:19:70:51:9b:ea:
                    b3:5c:ba:b4:74:75:f3:34:69:ab:06:26:b0:bd:67:
                    0e:7e:23:4c:9d:2f:61:e1:90:d0:f2:45:61:6b:0b:
                    7b:7f:a5:fc:02:77:6f:ee:2c:f4:4d:57:94:12:3a:
                    7d:97:50:7c:0b:8e:b8:a9:67:2f:e2:f8:b1:77:99:
                    84:c3:e4:c0:c1:20:c3:cb:ce:3a:4e:9d:08:2b:2e:
                    92:82:47:7d:0e:77:84:70:f6:b1:13:d2:c7:f3:94:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:71:80:9D:4E:0B:21:AA:8B:9D:B0:A0:52:61:C4:78:8F:7D:B8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f13250b3-1f86-309b-8441-5020dc4395ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.60.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:45:b9:81:94:de:c8:81:db:b6:d0:aa:23:c0:38:dc:4b:
         e3:7a:b2:4c:2e:9e:e7:4d:0e:86:55:20:c4:a3:25:19:62:6f:
         08:91:00:ec:a3:0a:b0:dc:03:2e:92:d0:49:49:a6:f1:6d:6a:
         3b:c3:a0:c8:cc:72:8e:49:d4:6e:38:39:60:cd:4c:3f:2f:6e:
         41:ad:3e:8d:c3:e2:cc:a3:fe:f8:c6:6e:5d:ca:8a:c6:60:4c:
         a7:e1:64:d8:f9:46:74:82:2f:1e:25:78:3a:14:39:44:1d:a5:
         9c:6e:d0:10:f7:b9:b5:80:ff:a2:d7:96:66:3b:fc:ba:37:6d:
         f0:cf:b8:0d:36:b5:e7:7c:93:4a:51:8a:04:d6:a0:8c:96:5f:
         23:c5:5b:e9:c6:87:9f:24:07:5b:8d:14:9e:35:7b:bc:cb:13:
         4e:80:fb:83:d3:bc:1f:aa:7e:7a:6e:0a:d4:1a:b9:6c:fe:98:
         5b:b5:86:7d:9a:dd:71:7f:8a:4f:e3:2d:7d:b3:d6:da:1b:c3:
         49:31:f5:b5:ad:9f:65:63:0f:cb:a3:9a:cc:6d:a7:5a:d7:83:
         c7:93:ac:d5:43:c8:e4:21:b0:06:01:7b:5d:2a:da:d5:ad:76:
         ce:98:ec:f3:0b:9c:0d:68:74:71:52:0f:2f:9f:91:4c:48:73:
         5f:1b:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:16:30 2026 by rpki-client