Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/924c7cef-503b-399b-b9d7-08e6b515abbf.roa
File:                     924c7cef-503b-399b-b9d7-08e6b515abbf.roa (raw, json)
Hash identifier:          qiybe7qjiNqKXP+9n4G26qplTQp88C4XOIx0MKwty1Q=
Subject key identifier:   17:87:70:7B:82:E7:BF:C0:BF:6B:FC:E9:E0:43:E8:BF:DE:75:8F:52
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E45086DA37EC86A5DCEA8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/924c7cef-503b-399b-b9d7-08e6b515abbf.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.188.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:45:08:6d:a3:7e:c8:6a:5d:ce:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=448cdbf3-fba7-4fd7-bcc5-67a1b03e9347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:97:0f:18:ab:6e:b1:24:0e:82:4e:a2:fc:
                    76:a9:6f:cd:45:67:4b:1e:d5:ae:16:39:63:29:e0:
                    a7:f1:e3:73:15:1f:f5:2b:5f:20:db:58:ec:13:a7:
                    e8:26:76:d8:c2:1a:f8:d5:3b:74:47:d5:d6:32:c7:
                    82:1b:4e:0f:2e:e5:66:71:18:6c:30:67:e4:10:92:
                    af:2b:2c:b9:63:4e:c0:e9:ac:6a:81:39:28:b6:94:
                    51:e3:74:d9:a1:79:e5:1e:36:0d:0f:41:b9:d8:82:
                    f4:79:09:bd:1d:9f:31:84:be:29:a7:76:e0:b8:5a:
                    30:78:ba:ed:cf:8a:a7:2a:4b:ac:ca:5b:ba:54:0d:
                    8b:f3:1a:e5:eb:92:58:dc:cb:e4:c0:21:29:7d:b1:
                    b0:01:34:06:7f:2c:0c:c3:23:d6:04:75:c6:9d:c9:
                    f7:79:4d:88:97:39:33:75:22:37:d8:b5:7b:77:a7:
                    63:6a:70:a8:f7:4a:07:c3:4c:aa:8a:49:b1:e3:e0:
                    03:1f:c8:b9:ab:ea:20:68:d6:e2:ec:83:1f:5f:78:
                    43:27:93:ae:86:49:8a:1e:1d:b0:9c:e4:ff:5a:4a:
                    ab:3d:4e:0d:97:89:1c:c6:b7:19:12:a6:8f:33:89:
                    db:27:6d:41:84:0f:df:56:b8:ca:4c:77:ef:52:c8:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:87:70:7B:82:E7:BF:C0:BF:6B:FC:E9:E0:43:E8:BF:DE:75:8F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/924c7cef-503b-399b-b9d7-08e6b515abbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.188.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:2e:3d:fc:35:1f:ae:63:a7:dc:06:ac:41:03:18:f4:df:e6:
         46:35:1a:4a:09:0f:77:68:31:78:8b:75:f5:eb:88:40:b6:86:
         4f:89:b7:eb:22:a9:e3:ac:1d:5d:52:35:b5:9c:77:85:fe:bb:
         5c:99:77:6d:24:d4:f2:80:40:84:e2:2c:48:fd:11:d3:87:fb:
         61:83:35:11:1e:01:68:09:ed:56:25:dd:14:83:74:f4:fe:95:
         24:84:30:49:8c:6a:50:32:81:ed:9f:ef:03:a7:c2:27:1f:93:
         87:d1:6e:6e:a8:fa:38:f7:e6:c5:de:e8:de:50:25:07:84:2e:
         9f:44:4c:1b:75:82:c5:87:1f:3b:3f:d8:42:2a:54:56:72:2d:
         31:f8:4a:4d:9a:71:b0:08:15:7b:51:5e:a2:26:09:ea:a0:ce:
         28:3f:11:a2:75:42:37:f8:d2:f3:a8:00:f0:8b:56:d0:59:84:
         5b:69:26:5b:74:e6:28:1d:13:90:91:b6:1b:f5:e2:85:8b:25:
         62:a6:f1:69:ba:d8:be:11:de:2a:d2:39:97:28:b1:14:33:0e:
         f2:ba:2b:53:06:32:c5:52:0e:45:53:5f:70:f7:71:d8:28:c4:
         7d:1f:9d:e8:58:ac:d7:5d:d1:b9:c4:04:bf:66:51:7f:bb:40:
         a3:4c:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:17:55 2026 by rpki-client