Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8cb2566e-be06-3b55-af2b-e1582c846579.roa
File:                     8cb2566e-be06-3b55-af2b-e1582c846579.roa (raw, json)
Hash identifier:          LsJdidr1OgVaYR8oVmrZGhKZg4TUSVbtra9ec+uHnGM=
Subject key identifier:   2F:FF:79:CB:21:EF:B7:B6:F7:38:0C:74:23:A7:19:5E:F6:F8:45:C5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FD47DBF18C2C7AC94EF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8cb2566e-be06-3b55-af2b-e1582c846579.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        16.203.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:d4:7d:bf:18:c2:c7:ac:94:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=38e35426-05f6-4d8b-a1e7-9870d0ef5a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:84:12:66:28:8a:48:51:53:07:16:eb:8f:
                    fb:83:ba:da:1e:ae:66:1a:34:e2:ed:7f:3c:54:4b:
                    11:52:a3:19:6b:49:71:2f:e5:94:6a:c1:49:5f:9a:
                    c0:f4:47:ca:0f:6c:a5:31:73:69:4d:90:71:9e:02:
                    73:9a:9b:e1:8b:71:48:9b:35:ac:bb:fc:c7:90:85:
                    4d:20:17:11:96:51:95:99:e7:a4:32:27:8e:49:1f:
                    4a:84:f1:cd:0c:cf:2f:19:b8:75:4c:a5:d3:a0:57:
                    8d:d4:f5:5d:b7:97:08:79:a5:e5:55:0b:64:4b:78:
                    b3:2a:29:66:f4:38:29:47:c4:af:35:68:58:50:8c:
                    39:91:2e:15:75:c7:0a:bb:07:01:d4:bd:cf:43:d9:
                    ff:19:38:7b:c3:c3:ad:0a:82:e7:e4:19:7d:eb:1e:
                    e4:0f:8b:85:d5:ce:92:17:a5:1d:f9:38:30:61:f1:
                    86:22:63:d0:60:0a:7c:f0:98:28:f9:61:e2:06:83:
                    10:42:64:ca:54:da:cc:6d:f7:35:95:e6:df:eb:c7:
                    70:30:01:2e:5a:b2:1f:96:e1:4b:e1:a7:a5:57:f8:
                    e5:f5:63:1e:f2:7c:22:b6:f1:6a:a5:d9:53:56:f5:
                    12:f9:23:27:ac:3b:27:b6:c5:33:d1:19:ba:42:01:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FF:79:CB:21:EF:B7:B6:F7:38:0C:74:23:A7:19:5E:F6:F8:45:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8cb2566e-be06-3b55-af2b-e1582c846579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.203.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:c1:15:7d:51:d5:5a:a6:59:69:5d:1f:ef:d9:80:ec:69:
         dd:3e:91:1c:a8:4a:95:75:46:26:3c:d9:6c:62:68:7b:9c:90:
         9c:00:da:50:9e:c9:57:36:c7:f2:dd:43:45:6a:7a:a4:61:be:
         07:d6:85:93:ec:fc:ae:0a:03:38:e7:52:d7:40:67:6d:b2:29:
         0c:c8:33:3f:a4:f0:e6:d6:63:18:ea:3e:6f:50:20:ac:69:42:
         44:cc:2d:f1:d3:0e:ad:8b:c4:c0:dd:15:90:a1:60:dc:ae:d3:
         a7:bd:73:3a:e8:fd:52:56:67:ab:15:55:81:c7:5b:4e:23:cb:
         99:62:5a:d3:05:22:02:73:58:71:7b:3b:c0:b2:35:dd:44:f0:
         c4:c0:55:ef:1d:e3:b8:1d:88:dc:fe:c8:7d:64:17:82:c0:24:
         23:54:8f:5d:f2:cb:3e:d7:88:d6:07:64:25:a2:65:d1:83:84:
         49:c4:84:36:85:27:3b:d1:21:0c:c8:50:48:04:a8:dc:72:85:
         25:df:18:bd:3a:51:bf:66:16:fb:06:b0:59:fe:b6:48:3f:26:
         15:74:60:ca:64:48:db:52:6e:49:66:61:85:cb:ce:a3:a5:2b:
         b1:ee:b6:83:c2:e8:1e:5f:1e:00:7c:9a:93:b5:19:d4:36:a2:
         91:51:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:12 2026 by rpki-client