Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fa7e649b-cfcf-33c9-bccf-cf470469f82e.roa
File:                     fa7e649b-cfcf-33c9-bccf-cf470469f82e.roa (raw, json)
Hash identifier:          BKbZi/723kI4cUCUkwbBejZuWVzJQLx7Ws0Zvo9Uyqs=
Subject key identifier:   56:F3:3A:69:FB:FF:59:7F:A3:09:A0:6C:62:5E:64:29:2C:13:FA:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FACCC96DFE4D4CC387300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fa7e649b-cfcf-33c9-bccf-cf470469f82e.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        71.81.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:ac:cc:96:df:e4:d4:cc:38:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=dce77d5b-3efc-45c5-a1f5-03be7f19f2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:8b:e2:51:fe:78:2b:79:95:5c:eb:85:04:
                    34:e5:e2:a7:fd:08:0c:6b:3e:ec:41:76:4e:99:b8:
                    ba:7c:f7:32:2f:77:fd:d6:ac:ca:29:f6:d4:af:71:
                    d2:e4:72:34:c5:79:fa:e0:35:1f:8c:31:8c:ce:8d:
                    82:83:b1:cf:3d:8c:59:f4:86:4b:88:c8:36:17:da:
                    64:45:67:a5:74:44:ae:94:31:a9:23:57:46:61:c4:
                    88:9d:28:a2:d0:c1:70:6c:99:f5:23:3b:49:d3:19:
                    30:df:f4:aa:63:cc:99:9d:67:cd:3b:44:5d:06:e2:
                    6a:23:52:d2:5f:e1:81:9f:1d:c9:ee:d8:78:87:c9:
                    a3:a8:23:33:db:18:10:7e:9b:59:ef:ba:03:06:57:
                    f9:96:0d:03:ad:d8:16:10:f9:d6:6c:10:6b:77:40:
                    2c:bb:5d:ce:34:6e:70:4e:4d:bf:f4:ad:20:e1:53:
                    24:35:10:be:c0:18:f2:68:f8:4e:84:10:f9:7f:e3:
                    1c:39:d5:47:37:db:94:1d:ff:6e:91:fa:3d:67:a2:
                    a0:c5:af:cd:c2:90:14:92:61:c6:4b:17:d1:e6:c0:
                    4f:ef:37:67:8b:03:5b:14:ef:e8:f8:e1:d0:3d:3d:
                    55:df:d7:54:f1:76:cf:bc:6f:99:64:1e:13:a1:d4:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:3A:69:FB:FF:59:7F:A3:09:A0:6C:62:5E:64:29:2C:13:FA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fa7e649b-cfcf-33c9-bccf-cf470469f82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:19:e8:81:6a:40:03:82:03:13:d2:f0:4f:f5:17:31:6a:
         df:38:de:55:74:d8:d4:3f:c1:06:b0:7b:1b:da:91:3d:d9:67:
         6b:17:31:05:78:70:ff:d9:14:82:ca:d4:53:31:7c:40:b3:b4:
         7d:d4:25:21:03:38:43:47:bf:cb:6e:09:bc:be:f0:69:42:10:
         6f:66:11:ee:41:8f:31:69:9a:53:99:4a:d0:67:4a:41:58:8f:
         02:df:ee:5c:53:bb:bb:37:07:1e:67:7b:b3:7a:c2:8e:20:54:
         ca:cc:3a:02:00:75:4b:d7:28:33:be:e1:fe:06:6d:1f:10:fb:
         a2:ae:42:19:ca:6f:29:73:82:7d:6c:74:79:f5:b9:ea:64:48:
         9d:f2:7e:9e:8b:0a:f4:27:66:f7:86:18:de:d7:d3:74:66:de:
         cc:4c:29:2e:70:35:68:8f:8b:51:b3:c4:7d:1f:d8:62:8d:83:
         31:9e:c1:c9:ef:4d:a2:c4:6b:7e:f1:ad:9c:3f:20:d3:6b:0a:
         c5:4d:5f:8b:ea:e5:d0:35:67:5f:48:44:5e:a8:c1:74:32:2f:
         21:6c:29:38:15:80:03:3d:b9:91:bf:dd:4c:73:f6:a6:e9:dd:
         33:f2:2a:45:95:9a:92:64:3f:1d:40:a5:90:11:51:2f:26:3a:
         3a:d3:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:32 2026 by rpki-client