Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20a0ed1f-d762-3a47-a210-cd840d14d142.roa
File:                     20a0ed1f-d762-3a47-a210-cd840d14d142.roa (raw, json)
Hash identifier:          AQwN6uGjp060aipbSNzaHKwFmafPizsUUGnr4a6mYOA=
Subject key identifier:   D1:18:5A:CB:91:C3:E6:E1:8D:A1:28:7E:9D:10:6B:A7:53:0F:B9:26
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3721ABE6B8D85F49BC1F900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20a0ed1f-d762-3a47-a210-cd840d14d142.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        66.168.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:1a:be:6b:8d:85:f4:9b:c1:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=cdd3db9d-22ad-478e-9bdc-6978a6170718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:56:15:cc:43:c6:a3:b4:a1:25:56:a7:78:
                    34:25:90:08:5f:0b:e7:f2:98:94:a3:35:ce:e3:9b:
                    73:91:e9:d8:04:5d:33:9a:42:f2:85:67:2e:e6:88:
                    b7:8f:ed:05:5b:6a:dc:4c:03:59:da:61:69:92:7d:
                    1c:93:5f:b9:d6:2e:9d:e0:cf:ce:24:48:7e:59:8f:
                    f6:49:d4:a7:4a:ce:95:4f:4b:17:e1:ad:cb:b3:5c:
                    6e:6a:84:19:06:8d:e7:89:8b:8d:1d:59:c6:80:1c:
                    32:38:42:70:83:b8:d5:cc:10:f8:3c:72:6a:14:81:
                    1e:b3:87:38:64:99:2c:bc:86:3d:d9:16:6c:22:56:
                    ad:56:3b:8d:8c:f5:9b:01:b3:98:f3:1c:34:69:47:
                    b3:d7:25:d9:16:70:d2:59:92:3f:a6:a4:b9:64:94:
                    a6:79:bf:f4:e6:4e:ed:64:f1:d7:29:54:0a:19:d6:
                    21:56:c7:cf:f1:60:e3:51:02:24:7b:a1:55:23:05:
                    96:34:23:f7:57:0e:7e:da:4f:a5:20:1c:84:ac:8b:
                    84:5c:09:2a:d1:3e:0f:41:48:34:84:8f:35:24:5a:
                    86:61:aa:67:d4:c6:22:16:2b:f3:2d:42:c7:a7:9e:
                    59:70:01:19:3d:77:9a:77:cd:f3:24:28:29:3b:b2:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:18:5A:CB:91:C3:E6:E1:8D:A1:28:7E:9D:10:6B:A7:53:0F:B9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20a0ed1f-d762-3a47-a210-cd840d14d142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:1e:99:52:a8:f0:16:36:f1:02:87:38:51:89:53:7b:8e:
         60:4c:7e:71:f1:2c:e4:92:fd:2f:5b:9b:09:59:b8:c5:f4:48:
         39:b2:28:19:4e:b9:4f:65:f5:03:0a:12:60:0d:53:93:90:80:
         52:a2:62:94:8a:16:2f:11:8c:d1:61:01:35:c1:47:7f:bc:03:
         18:c0:52:6e:ca:19:c9:e6:57:11:aa:8e:d5:a1:07:8a:d2:46:
         b4:67:6b:f9:cf:6d:7f:be:20:43:cb:11:f8:6e:63:85:a2:a1:
         fe:c9:90:ae:9e:55:ba:a4:e8:e3:5f:d9:81:c0:18:4b:48:f1:
         60:6e:ea:41:0e:b0:10:4a:a5:52:43:53:f5:b8:78:e1:9b:f0:
         dc:96:10:0b:97:f9:41:d5:1c:6c:72:10:9f:92:6d:e7:07:42:
         3a:c7:6a:4a:9b:0f:71:6c:15:9f:aa:e2:e7:47:6c:d2:4b:04:
         f5:9c:d7:47:1f:85:39:74:b4:c0:50:04:22:52:3a:95:d8:39:
         d5:70:c3:d3:d6:74:3a:4d:e5:87:6d:d8:82:24:16:32:f6:cf:
         05:ba:ab:8f:6f:19:92:e1:e3:19:8e:a2:a1:0d:de:bf:8f:76:
         b1:14:58:f9:d5:64:f2:15:2e:f9:be:6c:26:97:aa:55:21:9e:
         fb:62:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:45 2026 by rpki-client