Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56868fde-0041-3429-846e-6c121a7d4844.roa
File:                     56868fde-0041-3429-846e-6c121a7d4844.roa (raw, json)
Hash identifier:          3yqtINtHb1pQ2OGxfsgy5miti6oHc/Hv2FPiFB38hOI=
Subject key identifier:   4C:41:6C:23:29:AA:47:FE:69:01:E3:A8:EB:D9:77:C7:5D:07:CC:32
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E48ABC23F653BF24EFF98
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56868fde-0041-3429-846e-6c121a7d4844.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        66.191.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:48:ab:c2:3f:65:3b:f2:4e:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=4ef49614-0b0a-41c4-a56a-6d510fc8ae12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:79:11:06:f2:06:d5:fb:55:37:c7:12:a5:
                    7a:a5:50:97:65:de:d9:c0:b4:34:d8:be:2a:15:31:
                    dd:08:9b:7c:ab:95:45:7c:15:f1:05:1a:2f:64:39:
                    3c:b3:89:7e:75:9f:d7:4a:d9:35:54:32:b2:33:c5:
                    f0:ce:05:3c:5c:4d:dc:f0:d4:26:9e:0e:60:1b:09:
                    6b:3d:43:32:ce:bd:53:74:26:ff:95:d2:2c:4b:8f:
                    b5:44:dc:ef:cf:3b:f7:11:11:26:53:13:46:1f:17:
                    cc:9b:a6:8b:73:64:b5:80:0a:0f:56:e5:c1:77:5b:
                    da:52:6c:2a:b4:95:3f:7f:d4:45:d2:9d:cc:0b:16:
                    6a:38:ec:74:98:dc:14:5a:3e:fd:04:e5:76:05:0c:
                    07:ad:d3:06:cb:ef:bd:55:5d:9d:b4:57:11:53:65:
                    54:2e:28:f6:11:51:02:1f:2a:ba:9b:fd:01:f6:77:
                    6f:34:88:40:d8:d5:23:c8:b0:65:f9:fe:45:b9:1e:
                    46:fc:8b:3e:47:80:2e:1b:16:31:b7:7b:f8:14:34:
                    36:bb:cd:ad:31:48:61:58:02:a3:1a:02:36:f5:7b:
                    b4:63:6c:e2:a6:9e:dd:df:fd:60:35:54:d5:40:d6:
                    7d:6f:42:cf:1c:38:26:a5:ab:07:84:1f:93:2c:4d:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:41:6C:23:29:AA:47:FE:69:01:E3:A8:EB:D9:77:C7:5D:07:CC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/56868fde-0041-3429-846e-6c121a7d4844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:4b:45:38:dc:70:52:79:f9:25:54:2d:6a:a0:79:7a:7b:
         bc:b5:0a:ef:ab:ff:a7:b5:9d:3f:01:05:57:83:b7:00:d6:3c:
         7d:18:27:d1:97:2f:30:30:d4:b5:82:28:9d:33:8e:d1:53:69:
         fd:c4:ee:cd:82:7d:a6:26:1c:66:e0:9e:d2:bf:73:fc:cf:5f:
         c4:b7:36:46:ed:6e:06:8f:25:75:d0:d3:9f:d7:a3:46:73:ae:
         28:f5:40:bb:a9:cc:7d:5a:86:5a:99:76:9d:3b:e5:e4:84:02:
         7b:3b:e6:13:67:31:fd:76:07:64:58:b3:b5:f1:0c:68:36:52:
         d7:3a:f9:46:47:79:a3:21:e7:94:ef:09:39:01:fc:1f:ce:b8:
         8e:77:1e:b2:c0:0b:99:38:96:6d:86:60:67:b9:8b:9d:2b:8d:
         6d:3f:a8:00:59:f9:5e:e2:96:51:00:07:eb:d4:fe:35:c5:25:
         dd:03:53:75:83:54:c6:35:63:22:bc:a6:f0:8a:11:89:c3:62:
         bc:a2:7c:cf:0e:48:67:75:c1:7f:72:89:de:6a:ba:34:2a:04:
         72:cf:a6:a0:85:c1:5c:4e:2f:bb:0a:e3:1b:45:ed:20:f8:aa:
         e3:36:6a:aa:a3:59:23:e2:13:50:0e:c6:49:f9:0f:f6:a6:b0:
         34:89:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:07:37 2026 by rpki-client