Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa
File:                     b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa (raw, json)
Hash identifier:          DwyQBjIu6Ndw7dJkNYof4bQr0kFHmS7LXHbeEdUSVKU=
Subject key identifier:   A6:AF:72:5F:5E:C6:57:05:B6:7B:57:78:56:78:0D:03:CC:5E:0A:FB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD051724D64E1EF41BB90
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.191.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d0:51:72:4d:64:e1:ef:41:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=803c0cc6-c6c5-4397-ab68-ae96f5cc31b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:cb:ed:8d:d9:d1:6c:2d:5d:d0:2e:a2:b5:
                    32:67:ae:2f:a1:d0:3f:75:fb:20:36:e9:50:f5:9b:
                    a8:8a:bd:4b:92:7a:2b:69:fd:de:ef:2d:b5:f2:fc:
                    e1:59:e4:76:fc:14:d5:77:04:c5:d6:9a:18:f8:12:
                    ee:5c:df:df:2a:38:65:b7:db:1a:02:e5:89:bb:85:
                    b6:7b:b0:05:6e:fc:c9:73:50:4f:db:67:b7:a7:ad:
                    2f:61:ad:f8:f0:64:18:ae:d8:54:00:21:66:e0:3f:
                    87:5b:69:e3:19:1d:92:d4:6b:e6:50:1b:8e:3e:57:
                    22:71:8b:72:e7:bd:c9:7a:b2:72:4d:ff:d5:c0:42:
                    97:68:ee:6a:95:ea:b5:e9:9f:6c:0a:93:96:8a:aa:
                    73:2e:86:36:e4:43:50:ce:a1:29:d6:2d:57:e0:0d:
                    8f:60:e8:79:cc:60:d6:6e:33:41:64:4b:a9:cc:82:
                    15:91:f1:c0:f2:9e:90:30:35:54:9b:76:30:ae:89:
                    b6:b1:17:54:4e:77:b3:6b:65:bf:72:49:c2:8e:6f:
                    47:cf:9d:33:f2:5d:69:42:a9:e9:7d:38:18:04:b9:
                    49:6a:f1:6e:af:e7:80:04:42:c9:b6:3b:2a:8e:53:
                    37:66:13:a6:f3:8c:b6:6e:35:9e:ae:8a:09:95:bf:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AF:72:5F:5E:C6:57:05:B6:7B:57:78:56:78:0D:03:CC:5E:0A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b77a3965-9f05-3f7e-85a3-ac4afb8ad4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9a:79:97:05:68:b7:f0:cb:2b:75:b4:1b:5f:d9:d5:4f:11:
         e8:5c:bd:2f:f8:83:5a:ee:f1:53:70:93:fd:a5:9c:1f:93:d6:
         c6:e8:1e:28:2b:a3:04:55:ee:82:dc:2f:1b:76:13:ad:91:41:
         16:6b:86:24:94:43:25:c4:8b:de:db:98:39:82:ad:9e:6e:8b:
         26:c1:6a:f0:bd:00:7d:a8:12:7d:96:a6:ef:39:a0:18:98:c4:
         10:15:86:2e:47:c5:17:f0:88:7c:05:14:04:a7:41:9b:73:66:
         5c:9e:9a:26:5e:73:6c:9d:63:52:55:9a:4a:fd:5d:ad:2a:1d:
         99:f4:e3:6b:c7:c4:01:55:b9:b7:57:39:55:f2:5c:00:37:8a:
         82:48:7c:44:bd:e6:82:2e:ab:eb:01:56:15:17:76:1d:8a:f1:
         51:bd:cd:02:0e:4f:73:55:93:9a:11:69:98:e9:47:ec:86:05:
         8b:32:b2:ce:7a:5e:60:c4:bf:a1:68:cc:b3:47:10:6c:b1:f5:
         98:93:99:8f:5f:12:2c:83:2a:a1:3d:0b:18:94:ce:91:b3:bf:
         51:b2:76:c9:04:c2:8d:2f:d4:22:ae:6e:50:64:bd:93:af:6a:
         77:29:90:29:ed:5c:82:12:fa:05:2f:40:0a:3d:84:d7:b6:0f:
         7d:fa:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:13:38 2026 by rpki-client