Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/15ec36fd-c91f-30e4-acb9-c85e12d6bbf2.roa
File:                     15ec36fd-c91f-30e4-acb9-c85e12d6bbf2.roa (raw, json)
Hash identifier:          X519Vr4KFAyzLlTkcqxiBkPYP6icCCSx9CfmS7CcvBk=
Subject key identifier:   A9:70:1C:01:84:2B:16:86:35:95:8B:AE:BB:88:F2:2F:D7:80:4C:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E6436597FEA33B667E740
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/15ec36fd-c91f-30e4-acb9-c85e12d6bbf2.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     23132
IP address blocks:        159.56.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:64:36:59:7f:ea:33:b6:67:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=056387d9-e779-424a-863a-740530bef71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:d6:c3:19:97:70:d4:3c:42:d6:1b:94:84:
                    86:e6:bd:6a:4d:24:34:57:dc:2d:f2:e5:9a:00:7c:
                    11:46:41:e1:66:13:9e:98:a4:6a:4b:7f:e0:49:6f:
                    37:f8:60:dc:43:5c:c1:23:13:4d:d3:ae:8e:e0:b4:
                    d9:2b:51:04:31:b0:9c:eb:23:62:19:a4:a1:70:38:
                    0b:4d:e3:92:43:4f:36:33:f2:76:f6:e1:e5:b4:17:
                    d4:d9:88:43:32:30:97:7e:9b:b8:cb:8c:bf:96:19:
                    82:72:ba:a4:28:c0:b5:f1:e2:56:7b:89:18:1a:60:
                    aa:c0:18:60:10:96:99:71:fa:47:e4:dc:73:6b:2a:
                    e8:09:9f:51:46:9d:de:1b:ff:72:c9:15:e6:1e:23:
                    ae:40:42:12:c0:23:24:b6:2d:b9:e6:ca:c8:7d:8c:
                    6e:ae:b2:6a:c0:ef:23:8c:8a:aa:f4:8b:9e:1a:d6:
                    47:d9:c7:a4:81:48:10:d4:cb:0b:53:ed:32:79:a4:
                    78:3d:13:c0:f0:87:65:17:6a:fb:ae:94:2b:8c:92:
                    f0:e0:86:37:5e:5c:f2:da:85:a9:ab:e0:6e:de:de:
                    37:a7:0e:fe:42:f3:d9:7f:7f:8a:29:5a:03:12:6b:
                    c7:b6:ba:39:da:f1:ba:0b:4e:1e:98:95:a5:e5:1b:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:1C:01:84:2B:16:86:35:95:8B:AE:BB:88:F2:2F:D7:80:4C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/15ec36fd-c91f-30e4-acb9-c85e12d6bbf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.56.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:13:95:14:c5:fc:52:c4:b3:2c:c6:5e:e4:4e:fa:46:89:33:
         2b:f1:22:32:ab:d8:23:73:5b:07:47:78:25:8d:ab:ac:bc:13:
         4a:f8:a0:da:f4:c0:0b:ce:bf:6f:25:3d:44:3f:ba:be:04:b9:
         60:11:43:b2:0d:84:cc:1a:5a:e6:40:73:e7:e7:c1:d7:b1:41:
         79:8a:0f:52:37:65:f5:ff:c4:92:bc:77:83:d9:6e:1b:fd:23:
         45:25:21:f3:59:23:21:47:3a:eb:54:33:9c:b3:b3:a7:7a:ce:
         c4:e1:b4:b2:b8:f3:81:df:c8:cc:ed:58:d4:af:32:4c:4f:2b:
         de:9b:2b:3a:8b:f7:0a:90:72:95:c9:b1:77:89:bb:7d:5c:51:
         32:e8:2f:1c:03:58:5d:14:28:80:d8:64:a0:73:44:e8:32:5c:
         ed:e7:74:3c:d1:5b:17:6c:ea:f6:18:2e:4c:e8:23:8c:b7:e3:
         91:0e:13:2f:c4:4d:60:a4:eb:a6:da:ed:1c:73:da:5c:37:b1:
         28:5a:59:f3:de:51:f4:c9:90:71:d6:f9:68:46:b4:04:e6:63:
         e1:e8:58:15:fc:46:10:99:12:97:9d:fc:fb:ad:0a:16:22:db:
         71:65:ca:ca:cc:c0:f6:47:14:9c:36:38:a2:57:5b:c1:9f:52:
         4a:60:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:28:06 2026 by rpki-client