Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/00d642e6-8939-3d28-90ef-153eb29f6d12.roa
File:                     00d642e6-8939-3d28-90ef-153eb29f6d12.roa (raw, json)
Hash identifier:          6lnoRy8kEXgXWwnEiooi3vo7vJUgloM+EDxPmi8UiN0=
Subject key identifier:   D7:7F:DA:DB:AC:8B:6F:11:E0:53:FC:64:F1:1E:59:D9:01:8E:B4:63
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB3B6476563D9524738200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/00d642e6-8939-3d28-90ef-153eb29f6d12.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     22677
IP address blocks:        71.15.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3b:64:76:56:3d:95:24:73:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=7eda7aef-1373-44ad-ad26-127ae45a83ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:dd:47:0d:39:64:77:c2:8d:ea:5b:42:18:
                    36:8d:51:a9:57:d9:a8:a3:67:27:90:6f:5e:b5:f7:
                    f9:56:28:44:db:45:ac:8b:66:72:e3:92:2d:d3:cc:
                    a9:2d:b7:0a:e1:1d:93:31:e3:22:ac:a5:e5:79:a7:
                    91:48:00:bf:89:28:24:a8:7d:cb:dc:6e:98:6b:3d:
                    10:f9:f7:b9:1c:e7:82:a2:dd:13:a7:05:cb:d0:aa:
                    b9:48:99:c9:3d:01:e9:c3:0c:8c:e3:8b:83:b0:8a:
                    c0:81:45:5b:b4:1d:e9:da:89:ad:bd:67:09:53:0c:
                    c7:ec:86:4d:4d:60:29:f5:ca:f5:28:7e:42:4f:cd:
                    7b:f0:37:63:e8:e2:4d:a5:d4:5a:23:47:85:30:1d:
                    7d:0d:80:17:72:0e:54:e2:26:1e:8c:e2:02:8c:b6:
                    24:db:cd:f9:8d:51:26:75:88:4b:e7:fa:11:55:50:
                    56:ee:a0:73:9c:26:03:e4:91:73:5c:4e:e1:ba:7e:
                    aa:bc:6f:5b:74:61:9b:4a:86:76:66:2b:40:a4:1c:
                    e1:f3:1a:52:68:bb:03:28:d3:19:89:f1:56:c3:90:
                    5b:91:0f:09:66:e5:c1:57:c3:fb:98:91:57:2d:c1:
                    18:64:f7:66:11:55:fc:2a:1c:f3:4f:4b:1f:2f:d4:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7F:DA:DB:AC:8B:6F:11:E0:53:FC:64:F1:1E:59:D9:01:8E:B4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/00d642e6-8939-3d28-90ef-153eb29f6d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6c:a1:84:09:36:c7:c0:91:68:a2:51:34:7d:a9:7f:90:0f:
         dd:7f:bd:1c:38:1d:f3:d2:98:e1:8b:26:5f:6a:d2:19:0a:48:
         41:8a:0b:21:d7:50:c3:5a:61:e4:f7:1c:9c:0c:c0:74:3f:c6:
         1c:4e:f2:3c:6d:a4:9f:f3:61:f0:96:e9:f0:0e:49:c6:42:6e:
         f0:5f:b4:d3:78:7e:0d:e1:7c:76:37:2c:16:fc:bf:b5:87:df:
         e1:00:a7:6b:15:8d:a9:60:d1:9f:5d:87:37:8c:f8:78:29:39:
         c6:70:07:a9:61:39:2c:68:ee:1c:a9:2b:41:0e:85:21:66:76:
         3e:34:b5:39:6e:83:1c:43:4a:bf:65:13:cb:b3:38:39:5b:60:
         de:cc:3f:58:8d:7b:a9:ee:7e:aa:76:03:4c:d0:67:8b:14:64:
         3c:1c:c7:38:80:4a:83:26:56:1f:66:ff:fa:8c:86:be:14:57:
         c0:10:3e:a7:c9:97:f2:2c:85:ab:b6:1a:bf:b3:aa:32:2b:7e:
         c9:58:66:d6:01:67:f3:0b:a8:94:58:7d:aa:1e:e4:a4:55:d0:
         2b:a3:1b:23:28:ab:0a:2e:78:a6:1b:3b:a5:90:ee:6b:c6:70:
         bc:0e:df:90:e5:98:81:a4:0f:7f:62:7f:eb:54:60:c0:c8:9e:
         98:65:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:12:10 2026 by rpki-client