Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa
File:                     e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa (raw, json)
Hash identifier:          cednnjlPwMKPK3sHK1pdFK5oJRd3LMW4VnjJ46sRanA=
Subject key identifier:   B8:14:0C:95:AD:C8:EE:48:74:4A:64:16:9B:DB:77:FC:C4:6A:B1:CD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DC6AA96FEE3637E6AFE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        47.224.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:c6:aa:96:fe:e3:63:7e:6a:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=bfe5669d-8d5a-4fd4-91dc-2700468839c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:b1:26:01:9b:b0:f7:86:2d:72:ef:15:38:
                    7a:fd:bc:a6:84:fd:44:1c:c5:8e:5d:82:ea:17:70:
                    49:8a:bf:a2:05:95:08:c3:1a:4f:9a:93:fe:eb:b7:
                    e7:38:72:cb:00:85:1d:a8:13:6e:01:80:e5:b3:17:
                    67:ee:ac:72:12:c3:91:9e:92:3a:f0:91:c7:b0:f4:
                    6e:e8:7a:6a:09:1a:7a:6d:24:fb:f1:2b:e4:c4:8c:
                    70:e4:cd:59:0c:af:b9:0b:26:7d:58:03:cf:16:55:
                    b1:bd:8f:b6:51:55:e9:55:0f:b2:60:97:7f:c0:4f:
                    dd:73:ae:7a:6d:1e:e3:7b:f4:34:6c:a0:37:a0:3f:
                    c6:bd:b4:10:1f:af:09:b7:00:a2:3c:f4:72:51:cf:
                    e8:09:33:9d:c1:bb:86:7b:d0:89:8a:6a:67:c0:61:
                    50:76:b3:66:94:db:00:c8:8a:d5:d1:49:e4:d8:b5:
                    c9:57:82:13:e0:c4:31:8d:c3:93:40:21:1e:99:03:
                    3b:df:97:56:c5:d9:5c:04:95:17:e0:4c:05:7d:aa:
                    f1:b9:37:2f:6a:e7:1b:8d:4e:3b:af:a7:21:62:53:
                    ef:fe:6b:47:93:c3:9a:25:00:8b:a1:f6:92:4e:96:
                    41:2d:a9:bc:f6:9b:cc:1f:89:b2:53:57:55:ea:f4:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:14:0C:95:AD:C8:EE:48:74:4A:64:16:9B:DB:77:FC:C4:6A:B1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e81231dc-d420-3b6c-95af-db7fa80b9b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.224.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:22:91:74:b0:7c:73:1c:8f:c3:31:49:f4:11:ad:f3:5d:7b:
         da:31:8c:f3:59:93:a7:31:19:b8:b3:e2:5e:cb:2b:e9:bd:07:
         ef:6d:81:72:6b:3f:62:f5:9a:40:7a:b2:a0:31:c4:c5:7c:ba:
         0d:88:ab:fd:16:77:60:a8:cf:18:00:f4:2d:3c:dc:9e:80:74:
         75:8b:e9:d3:9c:db:2d:51:a1:32:e4:1d:27:5f:7c:58:8a:86:
         51:03:a0:25:06:c7:d8:7a:96:08:e5:77:cd:74:4c:74:9d:d8:
         78:f9:38:b7:49:99:f0:bd:e4:01:03:03:ce:25:78:58:dc:e9:
         d1:0e:30:1b:ba:e8:dd:a5:95:04:25:97:6f:16:92:cb:45:d4:
         15:a1:71:90:8f:4d:c4:e9:9d:7c:31:e2:85:a3:c2:0d:cf:89:
         48:e9:8a:f3:45:3e:67:3f:af:02:75:c6:89:4b:53:a7:f7:f5:
         fb:8b:05:c2:c4:91:a6:0b:71:b2:c4:dd:cd:09:ac:72:6d:75:
         7f:c6:76:c3:bc:02:de:44:1f:db:dd:ef:48:c8:12:0f:bd:8a:
         5e:3d:8b:22:0d:dd:fc:e2:90:b4:97:18:e7:c6:6e:22:ef:da:
         82:d2:48:87:e1:2a:56:47:fa:d4:5e:e6:3e:69:cb:25:d4:2c:
         75:d4:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:05:11 2026 by rpki-client