Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56747028-6c94-37b2-aecd-08c9d0d992cf.roa
File:                     56747028-6c94-37b2-aecd-08c9d0d992cf.roa (raw, json)
Hash identifier:          CTjwMgAlG/muwp6wW/GP8lmQkoqiF/AYy1vve2ieKf8=
Subject key identifier:   40:39:E9:89:A2:FF:7D:B0:D7:6C:97:BF:52:E4:0C:15:CC:CB:72:93
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E51A5BBD77E9D3E6E4FE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56747028-6c94-37b2-aecd-08c9d0d992cf.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.9.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:51:a5:bb:d7:7e:9d:3e:6e:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=12c91bd3-5d08-4812-acf3-34ff0eb19458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:14:0b:e4:e1:d1:d9:b2:2d:79:03:87:b2:
                    e8:7f:18:34:18:65:43:f4:83:5c:1a:03:18:c6:ae:
                    e0:84:6f:5c:eb:b2:be:f2:88:19:4a:81:35:5d:1d:
                    58:7b:27:2e:40:cf:06:82:3e:33:0c:0a:7d:fa:12:
                    f6:81:f8:9c:2e:d2:8b:72:81:2b:c0:71:22:31:35:
                    ea:ab:9c:e9:39:1a:4a:e8:71:4d:08:e1:c0:8c:99:
                    a2:50:d1:4b:f3:4c:12:3a:ee:7c:9f:17:1f:6d:16:
                    aa:df:06:74:af:73:3c:b6:3b:b9:94:95:c7:93:94:
                    b7:f2:d6:c3:04:9b:89:66:ab:ab:d9:5b:ef:20:b8:
                    07:f8:23:6a:43:78:8d:a5:56:6e:ef:eb:81:05:a8:
                    26:db:34:69:48:a7:1a:95:2c:8e:d1:39:3e:f9:e7:
                    45:17:ae:e2:aa:9c:eb:ba:36:12:58:d7:0a:4c:c2:
                    47:f4:b0:1a:4a:a0:3e:d2:c4:33:48:cb:e8:5a:e6:
                    e7:8b:ef:85:6a:38:d3:c0:ff:4d:a6:3c:1f:dc:b3:
                    68:b5:e7:9e:9d:67:2c:30:34:f6:f9:a5:3e:d4:f7:
                    8e:f8:ec:3a:b3:5f:e6:8a:0f:20:eb:8a:8c:54:3e:
                    b2:f1:8f:76:df:06:e6:bc:6c:5c:33:91:36:84:6d:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:E9:89:A2:FF:7D:B0:D7:6C:97:BF:52:E4:0C:15:CC:CB:72:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56747028-6c94-37b2-aecd-08c9d0d992cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:81:aa:9b:10:df:30:8f:4b:bc:8c:71:fc:f3:86:08:46:3b:
         74:b0:b1:e4:c9:96:61:57:46:5c:1c:a3:21:25:72:50:01:fa:
         71:80:92:5a:b3:72:14:c0:aa:cc:a5:49:4b:84:10:bb:d0:5d:
         cb:de:c8:ee:8f:30:aa:99:60:6b:a0:91:be:20:c7:09:ea:2f:
         0a:44:f2:3a:7e:92:36:e4:b2:34:df:73:38:48:c0:3c:8f:30:
         9b:61:79:4b:01:e8:37:38:65:2d:bf:e1:fb:8f:ef:cc:06:3b:
         ec:ea:df:a8:47:3f:70:8c:f0:2b:76:8c:75:77:5f:ad:bd:b6:
         05:13:a4:0c:ca:0b:80:34:16:99:7b:db:c2:34:d6:62:12:2b:
         ca:46:bc:dc:81:00:32:25:a7:92:77:50:72:a7:cb:b9:7d:cd:
         b3:37:8b:2f:54:01:0c:20:1a:33:57:04:64:83:dc:b5:bb:01:
         68:d5:6e:98:f4:b0:b6:1a:7a:2c:a0:58:87:7f:5a:b2:27:0b:
         e4:53:49:a3:f6:36:af:35:1b:cd:4e:67:56:34:f9:49:87:23:
         55:d9:7c:96:b1:de:95:95:00:66:cf:12:c2:b9:69:3f:53:9d:
         27:a6:bb:bf:85:21:8d:0e:19:1a:ab:c9:37:89:e5:3d:37:e0:
         f5:bf:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:38:57 2026 by rpki-client