Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2778e021-0621-3daa-8765-b47a345797d3.roa
File:                     2778e021-0621-3daa-8765-b47a345797d3.roa (raw, json)
Hash identifier:          E+Jfaen4lF4OYW4T3IgN9fq0m1s3jrjW42P4wujP600=
Subject key identifier:   C7:A7:9F:76:55:BA:EB:84:A3:8B:6C:AB:38:1A:05:91:38:FA:5E:77
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB3CBB9910DD5410CAEDC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2778e021-0621-3daa-8765-b47a345797d3.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     22677
IP address blocks:        128.92.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3c:bb:99:10:dd:54:10:ca:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=4fa30d2f-a88c-4a7f-8f5a-1f66a1ac93d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:4f:3b:79:40:82:60:b3:a8:fd:3a:c2:e2:
                    29:b7:b5:6d:95:b6:49:21:60:23:e3:57:d5:1f:d8:
                    51:47:bd:24:9d:78:bf:2f:e2:13:e6:a3:6f:4f:6c:
                    89:90:eb:ad:5d:78:66:5e:8a:c6:ec:83:01:e4:58:
                    04:cd:4f:81:5f:9b:54:e9:ba:b1:89:ec:6c:5d:46:
                    ae:5d:40:98:ec:5c:05:5c:9a:4e:fc:d8:eb:fe:23:
                    c6:f9:e4:1b:b4:72:04:e6:ca:01:03:dd:89:1e:84:
                    aa:12:cc:73:a7:04:46:aa:aa:2d:c7:95:5d:8f:39:
                    4c:07:84:1c:03:df:e6:d8:1c:53:d6:82:2d:26:9b:
                    41:d6:65:1b:6c:b5:cb:76:22:92:ec:4b:e9:8c:ee:
                    5a:69:ff:43:7e:fa:43:bf:f0:32:f7:45:b7:a4:32:
                    4b:c1:c3:de:e3:03:d2:7a:35:19:5c:0f:9d:92:5d:
                    82:fd:ff:6c:00:9d:bf:6a:7d:29:ef:64:c5:69:fb:
                    7e:40:99:ea:ff:fc:61:35:92:97:30:a1:a7:4f:5b:
                    3d:26:4b:44:48:fb:2b:69:6a:63:1d:e2:c3:23:41:
                    a4:b3:c0:0c:9f:78:2e:75:6c:63:69:da:1e:5f:f1:
                    3e:17:67:57:f8:d2:fa:8c:95:ae:ec:7f:1e:2e:dd:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A7:9F:76:55:BA:EB:84:A3:8B:6C:AB:38:1A:05:91:38:FA:5E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2778e021-0621-3daa-8765-b47a345797d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:28:94:6b:99:6c:c2:0d:e4:f0:fd:8a:72:91:17:c5:a4:10:
         b9:59:8d:75:25:05:00:c0:f7:db:db:d8:96:be:c9:16:16:24:
         80:8b:a0:37:a3:bb:f0:a0:21:43:b5:95:55:3e:22:25:ad:5d:
         48:7e:f4:6c:af:a8:8d:28:c5:d0:f7:fc:c5:61:cb:1d:3d:4c:
         06:a1:be:4d:c4:50:63:1b:cc:52:5b:44:ea:ee:d3:7a:ca:7d:
         e2:df:cb:01:9c:24:e9:a8:a8:a3:0e:e4:75:01:fe:f8:a2:35:
         9c:1d:85:9f:3b:9b:73:64:a2:3b:85:78:d5:78:c3:d0:0b:65:
         11:c7:60:2e:b4:95:b3:7b:19:1a:65:00:ad:3f:42:5f:ee:8d:
         69:4e:a3:4b:8b:01:3d:a9:d3:eb:c8:9e:7d:b5:cd:af:2b:55:
         76:90:f8:1d:f7:fc:5a:26:97:ee:6f:0d:97:a0:e8:53:bc:ac:
         fa:cb:be:96:e7:5b:64:b4:7a:c7:22:8b:b2:ae:b3:e9:64:b5:
         58:b5:1e:49:c9:06:c9:04:e9:a1:7f:87:f4:bb:f9:cb:4f:24:
         9c:a8:b5:c4:cd:66:77:ab:b6:bf:89:92:c9:cc:8e:b8:b8:c1:
         aa:61:85:b7:a5:62:ca:1a:54:58:90:f1:3b:dd:e2:82:8a:8f:
         f6:66:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:12:09 2026 by rpki-client