Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa
File:                     1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa (raw, json)
Hash identifier:          pasbT7Df5xvCTRzwma8RZoJcJnAoFaENxjzHtcUJdS8=
Subject key identifier:   58:39:A2:35:1C:D0:8F:E0:D5:9C:39:59:0F:2C:18:1C:77:B9:3C:87
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDD89C82DD192C0AC69A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.8.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:dd:89:c8:2d:d1:92:c0:ac:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=9c7c5914-cf4c-43fa-8415-9973753c5487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:1f:04:52:46:10:d8:a6:81:d1:42:64:a4:
                    b0:e4:b4:65:d0:a9:aa:56:e7:09:0e:ab:ed:f9:bf:
                    f1:c4:f3:13:ac:2e:75:8c:23:8f:59:09:72:f5:9a:
                    72:10:ce:2d:90:4e:c2:b5:2e:7d:e9:1d:fd:69:57:
                    7e:55:43:85:db:18:9d:44:cb:a8:a3:19:17:c3:6d:
                    84:f0:f4:bf:f5:0f:b8:83:42:07:75:b7:e8:4f:79:
                    52:d4:37:e5:34:bd:da:86:5e:27:86:e0:c0:a1:1e:
                    ba:06:1a:d6:f5:fc:ef:59:39:df:01:01:f1:cf:65:
                    1c:64:2f:53:22:d7:38:53:a1:fc:6a:5b:f2:e4:df:
                    e0:82:ba:9e:ea:40:57:8a:1e:79:99:c4:17:db:fb:
                    bb:09:0b:4b:cd:1b:1f:ef:76:1c:b9:a1:b1:f8:2b:
                    26:10:d0:91:b9:a8:85:18:76:5c:fe:a9:86:c7:f6:
                    05:c2:d2:e5:8e:9d:55:35:b4:79:4b:ab:63:a6:5e:
                    cd:3e:4f:cb:49:cc:ad:e9:a3:b8:87:ad:ca:b7:73:
                    94:4c:29:5c:6d:4c:2f:cd:cc:92:77:e9:01:6a:5c:
                    5e:c7:fd:4f:41:49:d2:b8:02:b9:ef:a6:15:03:b1:
                    7f:02:71:74:83:fe:ce:49:f6:5c:e2:b6:d7:a9:34:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:39:A2:35:1C:D0:8F:E0:D5:9C:39:59:0F:2C:18:1C:77:B9:3C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fac5526-5121-3630-8ee1-d5a6cfa9f120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:98:ef:86:5a:46:40:d7:61:3c:b4:79:fc:26:f5:c6:1c:
         18:44:ce:1e:ee:e0:5f:50:9e:56:a1:08:cc:2f:22:0e:15:30:
         6f:93:c7:82:58:4d:de:be:6d:d0:b4:0c:6c:78:9a:4a:22:91:
         09:df:cd:b8:46:52:12:12:72:a7:c5:fd:8d:6e:d6:e9:33:a9:
         ec:5d:96:03:59:a1:3b:d9:76:08:1c:4e:d3:18:02:a1:06:95:
         e2:af:32:2f:fd:43:40:14:6e:86:9d:61:75:8a:1f:bf:80:7a:
         af:75:b9:10:7c:7a:6e:8f:75:65:74:d6:1f:f0:b6:89:ff:ef:
         b4:dc:f3:10:3b:1e:ca:4d:f6:14:b3:28:25:b9:e4:ee:9a:26:
         d7:d7:31:ce:af:0c:6c:7f:d1:34:bc:6a:de:79:d5:67:c1:6d:
         e4:2f:fe:3b:17:a8:13:73:e1:be:d7:2f:97:28:47:d6:c5:02:
         30:59:4d:ac:5d:d9:05:ad:3d:bf:65:c7:26:09:67:a7:d8:88:
         d5:8f:27:c4:df:00:11:02:7c:8c:7f:b9:c5:49:9d:36:07:f4:
         74:93:c7:a3:16:7f:5f:2c:d2:ea:9d:5f:6e:b3:3b:bb:21:79:
         92:be:6e:60:5d:88:d8:fd:55:93:28:e5:2a:0c:a1:29:1a:cb:
         25:ab:42:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXd2JyC3RksCsaaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
OWM3YzU5MTQtY2Y0Yy00M2ZhLTg0MTUtOTk3Mzc1M2M1NDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsekfBFJGENimgdFCZKSw5LRl0KmqVucJDqvt
+b/xxPMTrC51jCOPWQly9ZpyEM4tkE7CtS596R39aVd+VUOF2xidRMuooxkXw22E
8PS/9Q+4g0IHdbfoT3lS1DflNL3ahl4nhuDAoR66BhrW9fzvWTnfAQHxz2UcZC9T
Itc4U6H8alvy5N/ggrqe6kBXih55mcQX2/u7CQtLzRsf73YcuaGx+CsmENCRuaiF
GHZc/qmGx/YFwtLljp1VNbR5S6tjpl7NPk/LScyt6aO4h63Kt3OUTClcbUwvzcyS
d+kBalxex/1PQUnSuAK576YVA7F/AnF0g/7OSfZc4rbXqTQXrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg5ojUc0I/g1Zw5WQ8sGBx3uTyHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWZhYzU1MjYtNTEyMS0z
NjMwLThlZTEtZDVhNmNmYTlmMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8NmO+GWkZA12E8tHn8JvXGHBhEzh7u4F9QnlahCMwvIg4VMG+Tx4JY
Td6+bdC0DGx4mkoikQnfzbhGUhIScqfF/Y1u1ukzqexdlgNZoTvZdggcTtMYAqEG
leKvMi/9Q0AUboadYXWKH7+Aeq91uRB8em6PdWV01h/wton/77Tc8xA7HspN9hSz
KCW55O6aJtfXMc6vDGx/0TS8at551WfBbeQv/jsXqBNz4b7XL5coR9bFAjBZTaxd
2QWtPb9lxyYJZ6fYiNWPJ8TfABECfIx/ucVJnTYH9HSTx6MWf18s0uqdX26zO7sh
eZK+bmBdiNj9VZMo5SoMoSkayyWrQos=
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:34:46 2026 by rpki-client