Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/724890b2-3406-3541-9554-6fbb1a3c4021.roa
File:                     724890b2-3406-3541-9554-6fbb1a3c4021.roa (raw, json)
Hash identifier:          KxnGkg2ByTvGWkArCWWEwB6qgJ/gpyV1bi0rL8zvhFM=
Subject key identifier:   DC:EF:22:CA:6A:04:1E:B5:24:DB:F3:DC:C0:75:CF:67:AB:AA:A7:A3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E51760F2A080BED23FD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/724890b2-3406-3541-9554-6fbb1a3c4021.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        71.9.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:51:76:0f:2a:08:0b:ed:23:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=98f2e35c-7082-44fc-ac13-c217b13bf074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:87:af:59:99:bf:e8:9e:90:30:6f:63:23:
                    5a:e9:c8:4c:0a:43:84:28:cb:22:f1:6e:02:c1:e2:
                    8e:a2:5d:92:01:36:3b:f6:af:88:83:cb:7b:91:db:
                    7e:27:da:94:9f:1d:42:7f:ad:95:ed:aa:e7:64:b9:
                    d8:69:3c:c6:28:af:62:d3:a7:b2:3a:b7:04:a9:06:
                    d8:8f:0f:ad:cb:7f:d9:e6:20:06:31:c6:77:8d:48:
                    91:09:d1:e3:b9:89:5d:f7:45:1a:0f:52:1c:fe:10:
                    6c:33:e9:58:b7:a5:5c:93:68:8a:69:e6:8d:19:70:
                    e2:b4:a3:16:de:cd:38:00:51:7c:a0:e2:3c:3c:4f:
                    79:33:ab:ae:eb:53:88:cb:07:ab:eb:d0:99:e2:61:
                    89:8a:e2:d9:a7:54:11:82:9c:ad:d1:ef:e7:a3:50:
                    1a:42:bb:bb:fd:a1:f9:10:48:79:09:46:ca:34:ed:
                    ea:9d:68:a7:f7:4a:23:c0:b2:63:c4:92:12:a7:b9:
                    45:c4:ca:53:a3:68:48:f9:0f:02:d4:c9:34:3a:cf:
                    0d:ff:f1:3c:b5:01:db:97:08:4b:b9:6c:4b:34:94:
                    8a:a9:2f:2a:e3:ff:e9:b7:04:9e:df:f2:c9:09:94:
                    1d:ef:71:a2:b5:fa:0d:72:32:2c:99:13:95:26:d9:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:22:CA:6A:04:1E:B5:24:DB:F3:DC:C0:75:CF:67:AB:AA:A7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/724890b2-3406-3541-9554-6fbb1a3c4021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:80:f0:e0:b5:8b:f5:25:18:b0:12:eb:d9:81:72:c2:26:
         1b:d7:f2:5f:81:13:c9:f5:eb:29:2f:ee:6a:66:95:95:f3:b5:
         9d:18:11:b5:aa:1e:34:b1:38:c0:e7:da:f6:1f:c1:9f:e5:13:
         10:68:36:ac:a3:51:e6:ce:a2:d7:f6:ef:3c:7c:9e:9b:6f:7e:
         68:50:de:3c:ef:55:c2:ae:ef:3c:fe:c9:17:3d:32:23:06:51:
         5e:03:b6:ec:94:a1:c2:39:11:ef:2d:0e:02:92:ce:dd:dd:62:
         1c:1d:68:58:bd:b5:06:95:87:44:b7:18:1d:fd:08:e7:38:f3:
         c0:5d:9c:e5:22:b2:46:fd:9d:56:b1:cc:b3:22:50:07:3b:6e:
         77:f1:f8:dc:f0:79:ac:90:9a:bd:f0:2a:72:52:d6:10:97:38:
         6c:32:14:09:e3:99:c7:a1:80:ae:ed:95:c3:22:36:22:fd:06:
         a8:7f:e9:21:c9:6e:a6:13:f1:8e:09:67:fa:8b:26:14:e2:f5:
         85:d4:3c:c3:17:cb:ce:c4:70:c3:25:70:ac:b7:d8:eb:76:bb:
         c2:48:9f:67:5e:03:ca:67:45:75:13:72:29:e1:33:9f:2a:da:
         8e:07:ad:60:a7:50:b5:b4:3e:1f:9f:5d:66:44:9e:e6:28:33:
         19:aa:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:12:46 2026 by rpki-client