Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02258029-dbca-37b3-8d81-300d8e4726a0.roa
File:                     02258029-dbca-37b3-8d81-300d8e4726a0.roa (raw, json)
Hash identifier:          X5hNo8EsWd8uE7MpVld67z3rZvOOCDjz9fOKp7+ysLo=
Subject key identifier:   5B:95:8D:B1:F1:9C:D4:BD:2A:09:E2:0D:B8:F4:8B:8D:88:9B:D8:AA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DCFD4C573B38A571524C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02258029-dbca-37b3-8d81-300d8e4726a0.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.189.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:cf:d4:c5:73:b3:8a:57:15:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=93c372fb-0e4f-483e-8d7f-a57acaa64a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:d0:de:f0:c3:c3:80:27:c8:b2:b3:a0:cb:
                    bb:ea:17:53:50:37:b1:6a:ab:85:9b:35:8c:5e:3b:
                    ba:42:85:f5:9e:26:75:8d:89:33:41:cf:55:2b:12:
                    d0:53:4b:87:5a:87:9a:68:2d:df:8e:da:1a:37:50:
                    2a:8b:d3:e9:35:e5:6c:66:7b:70:0d:8f:ee:77:66:
                    3a:af:92:46:55:ff:8a:51:3a:72:9d:10:ff:c3:c3:
                    e6:3e:fe:6b:9a:88:48:96:a5:11:fd:03:f2:ce:68:
                    97:50:11:d9:cf:1b:a4:40:4b:2d:32:4b:65:e4:dc:
                    0c:8a:7d:77:f0:95:b3:ff:c3:d6:88:28:8f:5b:08:
                    d8:75:89:5f:c8:10:df:ac:81:d8:a8:84:75:32:ee:
                    e0:22:22:8e:ee:a9:6d:1b:5d:58:22:13:4b:1d:ed:
                    2b:68:60:75:06:4b:ef:10:ee:ce:bb:a2:cc:a2:b3:
                    e0:5d:11:69:34:c7:05:23:4b:59:30:bf:ae:ea:66:
                    6d:d7:b7:b4:d9:69:29:3f:45:b4:6f:ec:49:c9:d7:
                    2a:43:e9:42:b2:39:1e:13:28:36:b1:79:a6:ac:ca:
                    a7:98:1c:8a:94:2c:45:23:f7:87:0f:ee:f4:59:86:
                    99:31:cd:33:62:db:60:53:76:b2:89:c3:ef:3e:b7:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:8D:B1:F1:9C:D4:BD:2A:09:E2:0D:B8:F4:8B:8D:88:9B:D8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02258029-dbca-37b3-8d81-300d8e4726a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:20:a2:5f:11:5a:c2:69:98:0d:13:e3:f5:3b:de:db:e2:
         00:cd:e9:84:45:d5:e3:a9:b0:5e:e1:b0:be:cf:db:06:83:4a:
         e0:9f:ca:b1:a8:d5:84:da:e8:5a:4d:d3:74:10:1f:dc:68:96:
         b8:a0:a0:6b:39:31:de:46:ef:14:a2:07:cc:15:dd:ff:10:61:
         41:d5:09:a2:0e:92:ad:f8:2f:c5:62:d4:7f:49:85:7e:78:75:
         71:8d:eb:ab:14:7e:3f:55:e5:bf:fe:cc:8a:45:4c:11:ae:7f:
         5d:5a:18:f3:69:ff:64:6f:db:1c:f5:39:d4:d6:28:36:ac:c2:
         c4:bd:61:47:64:11:d2:96:ef:be:f9:03:2f:53:dc:bf:5d:d6:
         f6:2a:17:fd:6d:8e:90:c3:b4:c4:6b:f5:75:a8:5c:a9:ef:23:
         b6:3a:93:fb:eb:df:57:48:77:0d:2a:ec:73:ea:fe:fb:52:6c:
         2b:62:63:23:8a:1d:66:8c:ad:a1:ed:27:b8:29:21:1a:15:ec:
         a0:36:71:6f:98:01:b9:d9:b4:59:6f:3e:d5:75:90:7c:f8:6e:
         81:bf:ef:1f:25:c2:6e:39:92:6b:df:b0:28:14:ad:60:b0:bf:
         c8:9f:1a:c4:06:0e:77:8a:83:cb:08:d3:eb:63:01:9c:ee:4f:
         75:4c:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:44:25 2026 by rpki-client