Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cdbf1d79-e844-3770-9d4e-c0c5433b784e.roa
File:                     cdbf1d79-e844-3770-9d4e-c0c5433b784e.roa (raw, json)
Hash identifier:          cG0Qt3k1jCjBGNFwb+EWsmcxP90c4i5dYNP6ubIsfJA=
Subject key identifier:   29:76:EB:E1:B4:27:22:C3:D5:6C:19:17:48:F7:3F:83:D5:CC:78:E8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E4D68791D739D0C38BE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cdbf1d79-e844-3770-9d4e-c0c5433b784e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.8.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:4d:68:79:1d:73:9d:0c:38:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=40c3d0a8-f3b5-41ad-8265-659d2a64f7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:59:28:4c:08:8d:5b:3e:98:37:77:02:a8:
                    d8:70:12:99:98:2c:db:4c:e0:6f:43:c9:86:8c:c2:
                    9a:f8:22:87:10:20:37:88:8e:f5:5e:c4:97:19:b2:
                    82:8a:5a:12:a6:0b:d2:d3:13:f0:94:62:9d:24:29:
                    59:48:86:78:23:8f:bf:6a:37:67:0e:6c:03:2d:9d:
                    3d:89:12:9f:80:5a:f7:61:c6:f3:7a:26:44:e5:45:
                    8b:6e:c8:bb:c0:c3:5b:ba:47:90:6a:39:e6:d9:56:
                    d7:69:86:4e:3d:d5:08:82:24:00:66:2e:8e:91:16:
                    70:40:5d:fb:d6:b2:22:c9:a0:c1:4a:6d:52:3f:c2:
                    8a:3c:1d:ed:b8:6b:a4:37:4b:90:5a:13:f7:51:ae:
                    23:89:f0:96:f3:c1:bc:ed:a8:10:1c:13:46:36:d2:
                    8f:ae:55:ff:ac:99:12:8e:ec:b2:b8:ba:06:bf:fe:
                    d7:02:39:6e:7a:41:ad:fa:f7:9c:6b:02:29:05:60:
                    94:86:00:74:fc:c0:63:cf:24:a7:45:05:54:b9:bc:
                    09:0d:7a:31:44:6b:67:61:dc:c9:3f:76:27:14:55:
                    a9:74:d4:80:c5:d1:4c:cf:79:aa:34:54:7d:ad:ba:
                    6a:92:6c:27:74:8c:d8:64:59:67:42:46:25:78:22:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:EB:E1:B4:27:22:C3:D5:6C:19:17:48:F7:3F:83:D5:CC:78:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cdbf1d79-e844-3770-9d4e-c0c5433b784e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e9:12:8b:43:df:01:20:2f:2f:b5:f5:17:bb:59:7c:ef:6f:
         43:3e:4a:40:63:04:79:a9:d7:1b:24:8d:c3:42:cc:fc:90:90:
         19:04:5d:f2:28:2c:f9:b8:12:4a:48:66:e8:50:83:c8:ae:b5:
         96:0f:cb:f9:82:4b:ae:fb:1a:da:76:11:0e:db:9c:58:18:26:
         54:9a:47:6c:77:02:88:de:0d:42:e1:c8:21:1e:49:9a:d6:61:
         d7:41:2e:f3:8d:2f:ff:1a:2b:c4:02:70:00:db:ab:f9:cd:0e:
         8d:1c:76:c6:a8:76:fa:af:31:af:9f:25:c5:67:e9:95:d6:f0:
         5d:d4:45:3e:51:cd:4c:62:4a:9d:7a:0f:6a:39:fa:e0:15:23:
         50:79:0a:00:6d:5d:90:09:74:9c:a2:96:1e:53:5c:34:60:43:
         ca:9d:63:e4:9d:e7:bd:3b:6d:5b:59:ff:9f:41:84:65:57:84:
         cc:da:19:2f:55:04:e5:0f:8c:d2:a6:50:44:62:84:d7:97:76:
         b0:9b:bd:37:61:5a:d0:1c:69:82:4e:72:85:75:b8:f0:57:d9:
         55:e7:79:3e:77:89:69:01:21:70:1f:7e:1b:14:b5:76:08:db:
         cc:3b:5e:66:ce:9b:c5:25:27:64:e4:40:c2:e2:2d:96:aa:70:
         54:23:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:46:41 2026 by rpki-client