Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa
File:                     f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa (raw, json)
Hash identifier:          HfIDBDarKytRXzu5xO8IlCT41ArFpnKEb62EXZ/aN3M=
Subject key identifier:   BA:7B:3C:B5:63:BA:35:03:C6:F8:6A:91:23:AF:84:61:93:ED:7F:F4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F4991C307FB06B7142100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        24.183.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:49:91:c3:07:fb:06:b7:14:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=3b5c8ddc-e358-423f-b95d-79ebaa0e79ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:30:cc:b4:1d:50:21:5d:b9:8e:74:a1:b2:
                    6a:7e:e4:73:89:90:14:8a:26:58:a7:73:dd:c1:a3:
                    69:68:ef:f1:c9:00:6f:dd:e4:3c:5d:50:a4:0f:61:
                    3c:2f:23:19:f2:9f:24:a7:12:20:10:40:80:18:6f:
                    82:59:de:6f:f6:e6:3e:76:8a:c9:8b:e1:bc:40:b8:
                    ba:49:83:d9:59:30:53:6b:73:7e:5a:03:8b:a3:a8:
                    2d:af:ee:26:fa:c4:ea:32:d6:58:db:7f:f7:14:78:
                    4d:8e:ba:24:67:72:81:92:80:ab:2a:1a:93:04:37:
                    96:a2:4b:da:69:35:15:ee:d1:33:c5:92:7c:35:0d:
                    53:b7:57:39:f1:cc:62:e7:6f:71:e4:dd:97:f3:72:
                    af:11:7e:84:cb:c0:ad:12:9b:c5:90:c7:6c:86:ad:
                    59:d9:b6:11:4d:e0:59:67:49:9c:85:76:0d:0c:df:
                    b6:5d:4f:aa:12:79:23:c8:2f:b1:31:23:1f:9d:75:
                    bc:05:2b:b9:c6:4e:82:0c:47:8b:74:d0:f7:80:26:
                    1d:ca:e0:12:d3:20:9b:53:0b:a3:41:74:f8:1b:dd:
                    c7:af:dc:24:4d:f6:53:00:b8:d2:1a:53:cf:03:79:
                    87:10:d0:cf:1a:54:e9:97:4d:2e:46:6a:53:6e:aa:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7B:3C:B5:63:BA:35:03:C6:F8:6A:91:23:AF:84:61:93:ED:7F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f867e0ab-e643-3b5a-81fa-2455c35c3dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.183.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:35:6a:2b:ca:92:21:7f:dc:9d:af:98:27:49:64:42:62:4e:
         66:70:01:ff:07:6a:e1:20:f7:a6:c5:88:52:a0:de:47:9c:14:
         f9:9d:c4:3c:12:9e:5a:23:30:9b:d1:e9:81:b0:45:12:d3:61:
         d4:ce:e9:dd:36:fd:1b:c8:01:3c:77:38:71:b3:b3:06:f0:08:
         a5:e3:25:87:d9:b7:98:6b:a0:f7:66:78:b5:0b:c6:c4:4a:24:
         34:97:45:e2:f4:7c:dc:07:ac:4b:78:76:95:70:6b:e2:c7:83:
         cb:22:9e:93:5c:d6:f7:6e:c9:86:e6:69:a1:e1:9a:ab:64:00:
         26:65:ec:7b:a1:ed:cb:3e:f4:8e:fb:88:f7:31:dd:18:d9:55:
         f8:9e:cf:ec:69:77:5e:a6:62:cb:b3:4d:f0:af:64:ec:c0:f3:
         be:0b:c3:27:f1:94:03:71:d1:74:29:1b:fb:21:88:2a:29:64:
         88:b3:dd:3d:94:cd:24:b3:a6:fc:fb:61:54:ca:99:65:fc:05:
         b9:82:5e:c1:6c:c5:52:2c:78:b6:54:d2:9c:81:ca:4c:2a:48:
         3b:ec:75:31:16:6f:19:a9:aa:9c:84:b6:b4:56:39:57:3e:4e:
         41:eb:6d:dc:85:69:df:0f:b9:6c:8f:e7:08:82:a3:67:0d:77:
         4b:f1:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:09 2026 by rpki-client