Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b573e23e-125c-3c88-ab8d-46ac646e1947.roa
File:                     b573e23e-125c-3c88-ab8d-46ac646e1947.roa (raw, json)
Hash identifier:          3oP6EQVG7lUdtlsgEmKREdowJO0ToUdBBgbCXpT1f9k=
Subject key identifier:   4B:53:F5:27:96:74:0C:FE:44:B4:BF:5C:32:2D:32:6F:22:DB:CE:C6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDF876652A7B72CB62180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b573e23e-125c-3c88-ab8d-46ac646e1947.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.10.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:df:87:66:52:a7:b7:2c:b6:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=fcd30e66-66ec-4a9d-a02e-2fc2a11de19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:14:c7:2d:27:37:d4:9a:cc:a0:f9:58:ec:
                    0b:d3:73:6e:11:fa:67:b2:85:b1:ea:0f:01:3a:b5:
                    9a:2e:f6:49:27:f8:89:5a:0c:86:b7:a8:ba:1b:6f:
                    9c:8a:04:27:24:e8:57:c0:dc:0a:85:29:7e:50:7f:
                    d1:ca:bf:d9:93:58:bb:4e:e5:93:56:fb:4c:cd:84:
                    21:70:96:4b:1a:ef:07:0d:1b:c4:04:68:21:ca:72:
                    ba:3e:de:c5:1e:3c:c8:e8:b2:1c:58:d6:d8:b1:c8:
                    65:62:52:56:24:75:12:35:0e:da:aa:ed:a5:33:4a:
                    9d:55:06:0a:41:c6:a5:07:6b:5d:8a:fe:3f:39:31:
                    da:98:f6:2e:67:13:ba:5c:e3:f0:6f:eb:47:6c:b2:
                    50:04:a2:ff:23:e8:8c:74:93:21:16:6d:b6:c7:cc:
                    68:44:73:25:36:cc:bb:6b:80:fb:e3:0e:15:73:01:
                    06:81:3a:3c:08:9d:cb:99:8f:8d:5c:92:2e:4d:df:
                    e6:0e:98:8c:f5:d1:97:0d:ab:f6:43:82:3c:34:10:
                    57:57:02:35:3c:e6:62:6c:db:05:20:c8:5c:6e:b6:
                    20:bf:ec:83:a2:ec:e6:b3:88:2f:a6:af:cc:3a:12:
                    56:6c:49:6b:18:70:84:5c:82:29:9a:d6:e2:d9:07:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:53:F5:27:96:74:0C:FE:44:B4:BF:5C:32:2D:32:6F:22:DB:CE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b573e23e-125c-3c88-ab8d-46ac646e1947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.10.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:3a:41:ef:7f:d6:bd:37:3c:c4:5e:d2:55:64:c6:7d:d9:
         3b:70:63:4c:c6:d7:5f:f8:a8:bd:5e:5c:75:ab:01:c1:ad:c2:
         6c:23:cd:15:21:d9:bd:0a:49:40:67:19:34:a0:87:3d:10:8f:
         ac:51:81:6a:0c:fc:4d:7e:1c:7d:7e:e9:e3:7a:ad:d5:d9:c8:
         61:4b:95:25:a1:b2:ff:c3:a9:bd:b3:44:b3:b2:0e:e9:bc:37:
         81:b0:63:ac:d4:82:db:43:b2:fb:d4:16:49:30:d5:17:fe:13:
         ce:f0:65:46:eb:0b:50:3b:25:33:45:c9:3f:7f:9f:0f:1c:8a:
         8a:2f:7e:e8:df:80:8d:69:6d:0e:65:9c:b5:3f:32:0c:c6:da:
         a6:f6:ea:e0:bb:9d:61:e2:ea:93:47:5c:cf:be:3d:32:0c:74:
         53:f5:54:e0:cc:e5:f0:d0:71:26:ba:a9:6f:21:24:1d:f4:2c:
         67:1b:48:03:99:0f:c9:f6:2c:99:09:ba:e8:fa:ca:5e:96:7d:
         8c:64:9e:ab:42:02:29:5f:d8:62:b4:f2:9a:12:a5:62:4d:c6:
         50:23:9a:e7:3e:85:ce:42:83:0b:bf:b6:6d:41:b8:ba:62:1d:
         77:1d:8d:44:ec:af:5d:0d:b3:41:2f:1e:09:e3:95:e8:ae:02:
         04:70:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:42:09 2026 by rpki-client