Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6bff50bd-5fb1-373e-8a82-692be8dfed91.roa
File:                     6bff50bd-5fb1-373e-8a82-692be8dfed91.roa (raw, json)
Hash identifier:          WcMI4MUD0z0LpDNAoHzbkwmxKymsT4uF87CaLilyBPo=
Subject key identifier:   98:C1:88:B3:F5:FA:06:A8:2C:B1:D1:E9:F2:17:C7:0B:58:10:68:BC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EEEB75991C61C94279FE5E060
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6bff50bd-5fb1-373e-8a82-692be8dfed91.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     33588
IP address blocks:        69.145.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:59:91:c6:1c:94:27:9f:e5:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=5b3ad0e4-13cc-49fd-8501-bbf260621534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:4f:d3:78:93:a4:f5:48:ed:00:13:4b:e4:
                    5c:94:17:b3:a5:0f:bd:81:23:b5:eb:2b:de:ef:b9:
                    b8:7b:0c:ee:d6:3f:da:ec:48:ea:54:42:16:20:5b:
                    88:87:3d:e2:e4:d5:fe:c3:2d:63:b1:a4:4f:47:54:
                    84:f8:91:07:ed:fa:06:57:87:7c:ae:a3:7a:41:21:
                    11:a6:89:29:86:1a:08:62:8f:dd:2f:91:03:d5:d1:
                    fd:6c:b1:84:c4:58:25:c8:dc:9c:b4:6e:fb:49:e9:
                    53:58:9b:b3:a5:de:56:e8:f7:cf:50:37:82:4f:bc:
                    18:13:5f:3f:de:d6:6e:b8:06:74:55:7d:d8:88:e0:
                    db:72:52:80:88:53:71:60:44:f8:e2:3c:9e:e3:cf:
                    12:1f:b1:1a:19:31:34:53:27:6d:87:e6:97:fc:21:
                    1e:44:8b:1f:2a:09:cb:f9:fb:e8:56:2d:07:4d:71:
                    1c:aa:af:bc:cc:70:6e:0c:1f:fe:7b:69:fc:17:19:
                    97:55:90:42:89:09:a3:a0:a8:1a:24:e6:e3:65:ac:
                    fa:88:0d:62:92:1c:10:94:01:02:73:a3:92:d3:88:
                    73:3b:3a:17:35:2d:2f:34:55:e9:d6:02:5e:22:a2:
                    78:38:d1:96:c6:40:73:eb:45:5f:03:e5:ba:ff:01:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:88:B3:F5:FA:06:A8:2C:B1:D1:E9:F2:17:C7:0B:58:10:68:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6bff50bd-5fb1-373e-8a82-692be8dfed91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.145.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:4d:e5:d7:b2:8f:9a:77:94:96:fd:3a:87:0c:27:b4:4f:
         f1:ed:45:d2:23:21:84:05:aa:de:f6:20:cc:61:9f:20:17:e7:
         b9:7e:23:6c:a3:05:62:45:c4:ea:20:2f:ca:22:23:02:e5:0f:
         ed:26:0a:a1:4a:2f:c3:7e:fe:78:41:a3:b5:b1:df:ea:dc:5c:
         08:27:78:27:22:d6:04:41:c3:64:47:90:56:7e:ca:f7:aa:81:
         24:11:68:55:2c:e6:f7:98:64:9d:27:74:f0:59:85:24:76:0b:
         bd:b3:cd:8e:ab:21:36:bd:e0:9f:7e:78:65:5a:a4:df:59:b2:
         02:19:ad:05:1f:c2:15:43:16:83:ec:b9:2f:49:fb:e2:1c:60:
         47:38:bb:0f:82:c1:2e:30:f5:a7:d7:18:f0:7a:84:5e:b7:a2:
         64:98:5b:fc:66:4b:0d:fc:23:01:e7:db:69:a1:9e:46:2e:65:
         22:6e:72:b1:94:47:c3:db:9d:e8:ea:3d:8a:d4:07:e6:fe:50:
         85:e8:d6:86:04:48:62:d3:f5:27:e6:88:df:0a:86:9e:9f:5e:
         a9:34:7e:44:a8:e8:20:bb:f3:51:68:ec:b0:15:cd:89:4a:ad:
         89:da:c2:15:e5:1c:7e:09:d7:e4:c2:74:b9:9c:89:0f:00:63:
         51:9f:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:20:14 2026 by rpki-client