Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9e806054-c1a8-39a9-b04e-4a0cea24fcd4.roa
File:                     9e806054-c1a8-39a9-b04e-4a0cea24fcd4.roa (raw, json)
Hash identifier:          62qg19sosOmKSAjF0FCjbUVsMD+fFKd/Y8gnEOZNmuk=
Subject key identifier:   8B:01:A0:2E:27:49:38:4A:47:F5:87:4F:53:83:5D:0D:BB:0D:D0:AB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DC62A191A94A316315D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9e806054-c1a8-39a9-b04e-4a0cea24fcd4.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        47.32.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:c6:2a:19:1a:94:a3:16:31:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e79f49cb-f82e-4e03-b909-ca7f6f1d998a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:73:c9:e9:61:1c:66:c1:85:4b:ae:b8:e8:
                    0d:27:c9:2c:39:be:b1:4d:c7:d6:2c:45:c3:d9:ac:
                    f0:94:e5:d6:f2:67:80:48:96:8e:bb:06:b0:3b:ef:
                    ee:6b:c0:4f:ae:68:39:f4:08:74:ea:33:66:08:ba:
                    6f:2d:1f:bb:3c:00:9e:3b:eb:e9:3c:a9:88:ca:dd:
                    12:4a:f1:1a:50:3a:cc:be:fa:0e:aa:5c:65:47:89:
                    39:78:d0:8a:6b:4c:b7:f3:ef:ee:b7:77:d7:8c:20:
                    a7:7d:ad:23:0b:1f:b9:59:0c:8c:8e:74:32:4a:aa:
                    5b:39:5a:1c:d1:a4:52:4c:d0:c3:87:a5:cd:37:7b:
                    fa:e7:04:ed:2b:4b:d2:06:dd:a5:2c:3e:67:e0:34:
                    d4:af:7f:03:af:de:07:12:6a:3e:8f:77:9b:d1:d7:
                    25:f9:82:5e:6b:27:d9:30:94:79:6d:d1:32:b4:4e:
                    ac:59:93:32:64:5b:22:09:5c:fc:d0:a0:a8:26:bd:
                    be:ea:d2:d5:55:b3:7d:05:ed:41:d2:af:93:db:a2:
                    43:51:58:2d:9b:f4:3b:e9:6a:c6:ff:0f:58:c3:22:
                    43:19:3a:9c:c5:8c:91:0f:bc:74:c4:14:2c:ac:ec:
                    52:77:c9:be:d0:c1:34:04:32:7f:81:4a:60:60:d4:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:A0:2E:27:49:38:4A:47:F5:87:4F:53:83:5D:0D:BB:0D:D0:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9e806054-c1a8-39a9-b04e-4a0cea24fcd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.32.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:69:8d:96:fa:13:53:91:b3:8c:c4:1f:39:56:97:06:38:d6:
         a9:ef:fe:e5:f9:1f:1d:0f:2b:0d:63:36:f5:01:d8:e9:b5:d7:
         40:0d:59:28:82:bb:b8:f8:46:fd:00:08:76:cd:eb:52:ce:30:
         7f:32:ee:53:70:43:03:13:98:6b:56:e6:fd:5e:65:a1:49:44:
         71:91:60:91:59:20:f6:ef:b7:4e:df:d4:31:d0:f6:cf:3e:b5:
         3a:75:c8:88:ca:5b:e9:af:d7:68:27:9c:5d:a9:80:93:34:70:
         2d:b9:84:f4:8a:e5:11:0c:86:6c:5d:29:df:57:2f:7e:3b:ab:
         16:c3:03:fe:4b:86:ef:7f:64:2e:88:45:17:75:09:18:1b:75:
         da:9e:91:ed:c6:fb:9a:9a:d4:fd:7e:66:cc:05:c9:01:dd:c6:
         02:f8:35:8a:51:fb:ac:58:04:1a:db:3c:99:e0:16:b0:36:ee:
         88:47:50:03:ef:26:30:70:c1:7b:30:9a:83:fb:1c:06:78:bc:
         7c:ae:a6:bb:e1:23:34:6b:b3:7b:55:2a:e7:7b:c3:a5:f5:9a:
         ec:b9:93:9a:95:f4:76:21:1b:bb:01:a0:fe:8a:ef:91:87:5a:
         1b:04:14:6b:1d:64:18:be:da:1a:dd:7c:29:6a:52:2b:cf:c2:
         21:3f:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:19:09 2026 by rpki-client