Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/521d6971-2f1f-324d-b793-8db5d92baafb.roa
File:                     521d6971-2f1f-324d-b793-8db5d92baafb.roa (raw, json)
Hash identifier:          JQ1EegY4X/n2LJUzmY47Tq+zFDlHZyJZHy9lEBIJ3zM=
Subject key identifier:   27:35:F2:79:23:18:D3:4C:C9:CD:6E:32:E5:9E:62:0C:EC:77:BD:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F3B04F5129A6B89E625C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/521d6971-2f1f-324d-b793-8db5d92baafb.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.196.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:3b:04:f5:12:9a:6b:89:e6:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=14605208-5d50-47b0-8817-bc0026a80bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:a7:a4:04:ed:8b:23:d8:f4:33:88:18:dc:
                    ab:46:1f:49:2c:80:a2:a0:81:c1:10:f6:41:87:d1:
                    c8:34:55:07:dd:c3:33:41:7b:bb:5f:49:e1:d0:ae:
                    c7:29:bd:04:b4:e3:3d:b7:cc:f8:02:fb:1e:91:1e:
                    15:3f:f2:f2:69:63:2a:2f:25:36:6a:3a:83:cb:2b:
                    63:8b:a3:3a:e5:94:a0:e3:bf:d6:7f:fb:67:a8:e8:
                    3e:e7:31:7c:f5:e4:2d:25:71:82:82:ae:09:8e:32:
                    e3:4b:b5:5c:b7:bd:5e:72:1d:62:c0:75:8e:c8:c6:
                    5f:6d:87:3c:01:ec:5f:92:ba:16:3a:65:c4:fe:cb:
                    f0:2a:46:a1:99:4c:c5:c5:cd:fa:a8:0f:23:42:7c:
                    ff:18:b2:44:20:f4:2f:9d:3e:b4:bf:3d:38:6d:f6:
                    12:b0:40:2f:39:60:b6:48:7f:b3:ce:f0:98:9d:aa:
                    9e:c9:b3:97:24:a8:bd:17:01:7c:f4:fe:30:82:f7:
                    fb:6f:42:88:b1:19:25:f9:99:29:1e:8d:ad:4c:a2:
                    b3:83:50:7e:78:e4:80:a7:48:72:54:c2:46:a8:6a:
                    97:ae:6f:2d:e2:36:e1:17:5a:66:18:71:f6:96:8c:
                    05:86:e7:18:eb:89:2b:48:04:e0:0c:c3:30:98:05:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:F2:79:23:18:D3:4C:C9:CD:6E:32:E5:9E:62:0C:EC:77:BD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/521d6971-2f1f-324d-b793-8db5d92baafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.196.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:70:bd:41:82:ee:c9:bb:bd:73:21:3b:b1:21:91:da:12:
         65:e8:9e:d6:fd:4d:7e:dc:81:78:55:2e:77:28:3f:dc:cc:3c:
         57:1c:89:58:db:54:93:1b:60:bf:40:34:de:d8:bc:f3:65:7b:
         d0:e3:b5:9f:d2:dc:53:2f:89:f4:5d:c6:90:57:74:ab:7c:43:
         dd:2f:d2:4c:a8:a9:68:b9:4c:c7:d3:46:9d:a9:f0:ff:83:5f:
         25:17:44:54:69:ab:e9:b6:d5:13:6d:32:95:de:74:a5:99:51:
         c7:07:ef:7b:03:7e:bf:ae:5c:a9:03:19:9f:7d:62:e2:70:72:
         7d:20:ca:93:9a:d3:a4:16:c0:a3:82:aa:cf:8e:80:33:d6:db:
         9a:4c:8f:7c:08:df:43:13:c4:dd:43:50:cf:57:2e:23:86:f9:
         b8:27:11:3c:bd:35:04:b5:5c:3f:32:b7:cb:fd:c6:73:8e:f9:
         3b:6e:e8:1a:a9:83:93:61:66:68:c9:a6:9d:11:16:43:82:01:
         0a:a9:3c:55:f5:2c:32:29:43:53:d1:8f:4d:11:76:9f:4b:91:
         e6:99:6c:46:f6:e6:85:2e:88:d8:df:63:7f:6b:9d:c2:30:95:
         26:09:6c:36:22:3b:4d:60:78:df:65:f6:7e:12:da:32:13:0d:
         46:c4:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:46:32 2026 by rpki-client