Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47e3ac6d-0a41-3341-84df-b3156426eafe.roa
File:                     47e3ac6d-0a41-3341-84df-b3156426eafe.roa (raw, json)
Hash identifier:          CZc765U1oIcvNe9mWoqc9mj12QkB0jC5Fdf1Gy7mdqc=
Subject key identifier:   8C:FA:73:63:FE:03:23:B8:7D:00:4E:46:72:33:20:46:40:31:86:C4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1614FF797FA6F5AE04EDE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47e3ac6d-0a41-3341-84df-b3156426eafe.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        128.92.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:4f:f7:97:fa:6f:5a:e0:4e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3caf67fa-4b5f-40ad-9acc-cb839a92b48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:99:8e:ce:25:ba:d1:d9:3e:3a:02:f7:f1:
                    ce:65:56:2b:32:70:59:86:e4:41:9a:f5:07:91:2a:
                    0f:4d:4d:67:56:dd:32:e1:8b:72:29:e9:5d:19:f6:
                    6c:79:1e:e4:b0:69:f4:05:2f:6e:96:eb:4e:9b:45:
                    33:a8:3e:9a:4e:12:6f:10:76:1f:0a:44:ab:46:f0:
                    1b:52:54:26:95:cd:97:48:40:aa:c5:55:0d:0d:20:
                    5d:19:5e:0c:49:d2:fd:dd:51:ed:f5:9f:4c:52:12:
                    18:2d:56:84:8a:28:6c:c4:1e:88:eb:da:54:2b:bf:
                    8f:ac:10:ae:fa:12:0b:f3:86:47:ed:53:c0:76:b4:
                    53:17:ae:10:31:11:04:30:2d:b9:6f:6e:61:b0:c5:
                    6c:13:b6:2a:66:e1:d1:1f:a4:39:9d:b2:6f:d3:58:
                    39:92:ce:7e:e2:4f:a2:cf:04:db:13:e1:41:38:9a:
                    53:a7:77:23:72:7e:a0:41:c9:56:27:06:21:0b:ef:
                    6f:53:41:b4:af:3c:91:d7:1b:d2:62:f1:9a:be:0b:
                    52:cd:f8:1a:b7:58:8d:59:ca:92:7e:1c:52:f5:2f:
                    53:99:0b:23:39:d6:60:a5:91:26:80:19:d5:c2:4c:
                    61:50:6c:a8:f7:19:39:1f:80:54:36:34:2b:fa:b4:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:73:63:FE:03:23:B8:7D:00:4E:46:72:33:20:46:40:31:86:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47e3ac6d-0a41-3341-84df-b3156426eafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:95:46:dd:fb:cf:39:97:9a:15:32:12:81:e3:28:33:b5:
         2d:d3:8c:bb:11:cf:eb:3b:47:ca:f7:88:f6:30:71:29:d8:ac:
         26:68:64:8b:1a:5e:c1:61:5c:c4:03:0a:0e:89:e5:53:2e:e9:
         16:f8:87:ee:e1:4f:2a:b6:29:21:32:a2:57:f7:e9:0a:ff:15:
         2b:54:44:8e:bc:9d:90:fc:34:d0:41:9d:9f:ae:59:f7:dc:98:
         08:da:03:a1:cd:1b:d8:9f:40:a2:d7:73:5d:3d:17:50:6a:94:
         da:de:c7:c2:57:a7:9f:d2:27:66:8b:98:4e:8e:e8:6a:41:66:
         05:45:fa:95:86:28:ba:ba:e9:35:b2:81:47:26:c9:5a:7c:cb:
         3c:c8:64:d6:c6:70:01:05:7c:16:f5:5e:5b:ee:cb:29:22:a7:
         97:e5:14:31:d6:06:c6:06:64:ab:49:6a:a6:7b:f2:b9:69:55:
         84:23:f6:4a:c9:19:19:89:8f:f3:a0:1e:58:65:01:c3:13:d5:
         6d:9f:ac:e5:54:c5:bc:4a:b2:06:e6:98:d9:09:05:1d:54:74:
         68:2b:af:b4:ac:41:17:31:f2:f1:f7:fd:32:83:42:75:da:d8:
         73:5f:cf:69:69:13:75:fa:6e:b7:17:7b:b8:69:f2:65:12:5a:
         c3:e4:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:33 2025 by rpki-client