Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc2d0924-53d1-34de-ab42-23d32759d0a2.roa
File:                     cc2d0924-53d1-34de-ab42-23d32759d0a2.roa (raw, json)
Hash identifier:          eq2Dpn1T5c5eYPUUXRL3wWwTyBCoPtxeoS9rGnSVZmY=
Subject key identifier:   5B:DC:5E:5D:4B:16:89:2A:DD:95:BF:75:B0:8C:6E:1A:38:8F:73:9A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E28B91F20A178E83CC380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc2d0924-53d1-34de-ab42-23d32759d0a2.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10838
IP address blocks:        47.231.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:28:b9:1f:20:a1:78:e8:3c:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=cbf69ac6-affb-460c-9f39-b752eb3ad3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:b5:24:cb:0e:94:f0:9e:5f:5e:ee:ec:ec:
                    c4:c7:29:f0:62:65:7c:4f:bf:6b:62:4c:51:23:a9:
                    6a:53:57:64:de:9c:d9:5b:16:3e:2d:7f:f0:8c:26:
                    57:f3:0c:46:9c:1e:7b:6b:52:84:f9:c9:47:c3:df:
                    63:b9:ec:d2:93:3f:f0:2c:2c:85:4f:86:43:57:96:
                    f1:59:94:3c:59:9f:ae:da:8a:de:72:1c:8b:4f:62:
                    88:e1:d0:62:e5:f2:35:5b:b1:b5:c7:e8:9b:f2:7b:
                    75:5c:3e:b4:a1:64:02:b7:27:93:36:89:58:c5:49:
                    38:76:91:e3:17:52:9e:f3:40:80:cb:57:50:09:c6:
                    fe:ef:c3:0a:1e:a6:a9:61:b4:06:da:4b:7f:73:e1:
                    bd:57:0d:6f:ea:0e:2f:31:14:9c:0f:8e:13:5d:ea:
                    0a:45:c0:2c:c3:ae:66:e2:31:b7:8a:b3:55:a5:50:
                    47:23:e9:16:6c:b6:ea:8e:06:ec:db:d2:f3:f8:62:
                    48:54:c0:bf:06:09:f7:e5:42:9b:32:54:fd:67:5e:
                    96:20:cc:f8:0f:74:2c:a9:ef:65:60:b9:08:bc:08:
                    e5:79:4d:2e:53:5d:e2:27:a6:9c:27:f8:bd:98:cf:
                    ff:be:b8:4f:96:fd:47:db:9a:36:e3:c8:c8:94:97:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:5E:5D:4B:16:89:2A:DD:95:BF:75:B0:8C:6E:1A:38:8F:73:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc2d0924-53d1-34de-ab42-23d32759d0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:54:34:3d:58:3a:1b:ee:6f:ec:3c:d9:aa:4d:a0:91:7f:0f:
         59:fa:e0:4c:81:19:b8:04:c5:d7:3b:a3:3c:8c:c8:d4:a9:51:
         b7:27:9e:17:5e:82:85:4b:c4:4a:1b:ae:82:7d:d4:01:bf:63:
         64:e2:b8:34:0a:44:5f:53:1d:a0:14:27:11:e4:92:59:ed:1c:
         e5:ee:5b:7e:c2:b1:77:7c:77:85:4d:26:21:9f:a4:2c:27:35:
         4a:ec:f8:39:f1:bc:f3:5d:f0:5e:87:96:ac:7c:34:fe:8d:d1:
         2b:ff:01:89:b3:3e:7a:67:17:89:e6:6a:82:02:10:e2:89:ef:
         9c:b8:98:d7:b6:83:dd:3d:d5:96:d0:43:6e:94:46:17:7f:5d:
         a1:d6:39:94:ff:cb:18:79:e6:1b:9d:7a:20:4c:2e:a0:d5:f7:
         69:93:5c:90:aa:4d:af:05:e1:ef:5c:ca:ac:bd:c9:3a:d2:a1:
         88:86:33:a9:36:f4:2a:5a:75:ec:65:15:1a:2e:fa:1e:32:bc:
         5c:26:34:39:75:15:68:b9:ec:f8:1e:7f:d1:d1:7a:98:ac:57:
         2d:0a:3b:c2:ba:37:2c:4c:d9:d2:72:48:6c:27:06:04:e7:87:
         5e:0a:0c:53:68:95:70:ac:7a:a4:61:99:c8:be:d6:08:b0:aa:
         c4:47:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:16:22 2026 by rpki-client