Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d833db94-6778-3520-bebb-ba93b4c6ecf7.roa
File:                     d833db94-6778-3520-bebb-ba93b4c6ecf7.roa (raw, json)
Hash identifier:          lI3XAkI+pPFIQRGcwCuU4tkHalQEe4ZKukiBH6k2H8U=
Subject key identifier:   95:5F:41:A3:14:80:48:D9:EA:CA:00:7A:BE:5E:67:58:38:D3:C5:F4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F4623861203401D0DE280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d833db94-6778-3520-bebb-ba93b4c6ecf7.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        128.92.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:46:23:86:12:03:40:1d:0d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=472bd0e6-1530-4741-b2d3-072a62320268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:94:29:f6:87:b0:0a:f1:03:f7:09:13:4d:
                    98:06:96:7c:b6:e4:e8:2a:38:a7:71:5b:30:5e:0e:
                    2c:4e:d2:cf:cf:cf:51:a6:1a:1f:93:3d:d6:42:be:
                    d5:05:28:ff:3a:39:d4:1c:ed:a9:1f:fb:17:0d:e2:
                    49:d2:6c:a8:ec:90:78:67:45:91:82:ca:7a:0d:aa:
                    d9:ce:5d:e1:b6:31:7c:f5:ff:5d:18:ae:e7:53:9f:
                    a3:43:40:35:3d:96:87:2f:a7:3c:f6:59:3e:99:a5:
                    19:3c:e0:aa:b6:0a:fc:39:13:87:ce:e2:88:9b:57:
                    24:f3:37:38:f8:ad:93:7a:c5:72:cd:dc:34:ee:1a:
                    81:fd:b7:18:da:80:e2:11:f6:dd:b3:39:bf:74:bb:
                    98:68:d4:bc:fc:13:6b:ad:50:a8:c3:0e:cd:d4:26:
                    5d:1e:fe:e4:e9:f9:9e:74:39:a9:72:bb:89:ff:3f:
                    23:b1:b3:1e:65:24:49:d8:7c:0d:f2:6e:72:fa:71:
                    8e:27:bd:0a:40:ee:b9:7f:c7:a6:8e:b9:16:fc:83:
                    c0:5d:69:03:66:6c:9c:53:15:8a:8a:63:f3:13:0b:
                    91:7c:f8:f2:47:2f:54:42:f8:88:f7:0c:5f:09:99:
                    a1:f6:66:e9:ef:40:17:4d:b5:4d:a6:8e:62:84:3d:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:41:A3:14:80:48:D9:EA:CA:00:7A:BE:5E:67:58:38:D3:C5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d833db94-6778-3520-bebb-ba93b4c6ecf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:8d:f5:11:0c:16:5a:a9:bb:2c:e8:40:51:4e:9d:3a:08:
         a7:b9:a1:58:ef:c0:2d:ee:01:e3:c9:f8:0f:f3:e4:dc:91:fd:
         47:48:4e:e8:c7:5d:8f:e1:1f:f0:27:a7:92:ae:19:9d:f3:1f:
         be:6a:c9:62:cf:6a:61:3d:b2:04:f3:29:12:c3:76:bc:73:ef:
         fb:1f:a6:b9:db:78:62:ac:ca:1c:57:ff:ba:f2:8e:b6:f5:13:
         1f:e3:6a:3e:50:01:4e:ab:92:bd:15:73:3f:c8:a3:d5:ec:30:
         0d:c3:d7:6a:13:32:ce:3e:c0:2f:10:44:5a:d7:8a:4a:b7:4f:
         4a:4c:8f:fd:97:54:f0:df:5f:78:b5:ce:b8:fa:f4:2d:ad:eb:
         ea:23:35:3b:1b:18:49:91:f1:8c:05:ba:ae:fe:e6:54:ab:2c:
         d4:54:85:e2:31:73:33:26:5c:3f:e6:fa:51:2d:42:9f:90:85:
         fd:09:75:16:34:d3:fc:08:61:42:68:70:9c:3c:9f:20:87:dc:
         16:bb:20:b4:78:dd:86:c3:04:e5:84:0c:02:84:c9:1b:e7:c2:
         ba:96:ba:b0:50:79:71:aa:48:0c:10:66:39:76:37:a1:6c:69:
         9f:02:4f:30:37:49:66:39:f5:c9:65:b1:15:20:03:6b:02:f8:
         70:8d:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:07 2026 by rpki-client