Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2109be6c-7ffb-39dd-a71b-0f90e388778e.roa
File:                     2109be6c-7ffb-39dd-a71b-0f90e388778e.roa (raw, json)
Hash identifier:          SDXp1D709XO7fYsIgsMZUMnx1GcplQEN/ItVyaL0oV4=
Subject key identifier:   52:51:8D:01:B5:B8:3B:12:00:D3:F4:A3:04:E4:A8:50:46:CC:12:09
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F1FCB0C96CD87DA2E200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2109be6c-7ffb-39dd-a71b-0f90e388778e.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        68.119.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f1:fc:b0:c9:6c:d8:7d:a2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=2aad38d1-2d15-4f38-8482-e225e4ae6b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3a:7b:cb:fb:ce:d8:3d:d2:c5:7d:80:f7:2c:
                    57:79:c0:2f:99:2a:2c:1c:53:f1:0e:e3:8c:b0:5c:
                    66:2e:12:eb:10:9e:16:02:60:00:e5:33:06:d4:c2:
                    d0:3e:ca:a8:13:85:d9:33:f0:42:76:d8:3a:8a:c8:
                    bf:8b:a0:9f:99:dc:a2:41:f1:c7:5b:a1:73:2e:94:
                    dc:82:55:57:24:b1:68:6e:82:67:c5:be:d3:56:53:
                    26:d2:1d:4c:f3:a7:c4:f2:cf:f1:7f:cb:a5:84:24:
                    86:cc:ab:2d:89:fb:40:bf:6c:6c:0d:54:0d:15:76:
                    e0:f1:13:3f:2f:8b:7c:ec:b5:6b:da:4d:09:92:98:
                    28:b9:f5:e1:85:dc:7b:28:39:dc:9f:71:cc:89:54:
                    ee:96:1b:ea:b5:86:e1:f7:df:e1:89:19:78:c9:b2:
                    3c:fa:a4:89:03:d5:6c:61:fb:56:bc:f7:00:11:c3:
                    b6:ca:d2:12:3b:3c:2e:57:a1:c8:39:0c:6d:62:86:
                    d5:ff:d9:f5:7d:a6:64:d3:9c:f1:86:18:d2:ef:89:
                    fc:d5:77:7d:99:8c:73:c2:e6:99:ca:42:54:d7:03:
                    e8:91:18:57:24:f9:4b:28:93:36:55:b2:10:50:0d:
                    ca:df:f6:fd:2e:4f:d3:31:d0:6d:fc:b7:29:a4:8d:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:8D:01:B5:B8:3B:12:00:D3:F4:A3:04:E4:A8:50:46:CC:12:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2109be6c-7ffb-39dd-a71b-0f90e388778e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:fc:68:c7:15:2a:29:58:be:54:f8:a8:ca:58:96:bd:45:
         92:fc:6d:04:8a:1b:32:75:d3:fd:89:aa:b4:bb:59:92:3c:99:
         ad:4f:7f:c5:bc:0d:bb:91:5e:03:98:9c:71:f0:21:3b:7f:d1:
         ea:4b:36:d6:8e:f7:f4:a8:6c:92:42:99:47:ad:c5:8d:d7:3c:
         cf:0a:36:5a:02:6a:cd:25:12:bc:2a:49:8e:85:e4:fa:4c:61:
         29:f2:72:ba:33:6e:98:db:c4:17:b2:05:cc:e5:07:98:7b:cf:
         bb:dc:1b:da:d4:c5:fc:d1:87:db:d4:75:36:4b:7a:f9:74:29:
         8d:f9:73:50:f4:19:51:7f:60:15:f1:76:82:16:fd:95:99:e5:
         34:35:83:81:70:14:5f:51:6f:de:5a:66:b7:82:89:d1:54:7b:
         c7:0d:3c:c8:b1:f1:ba:17:7b:df:7f:be:1c:04:78:d2:31:4e:
         4a:0d:c1:5b:af:15:ea:99:ca:87:f4:72:bb:19:64:b8:70:30:
         ca:31:24:68:cd:7b:10:af:e7:2f:3e:8e:79:81:25:19:80:ea:
         e7:3b:44:4b:88:7b:dc:f0:f9:4d:53:45:4e:61:d2:0c:7d:04:
         fe:df:7c:b1:86:5d:ad:9d:58:c1:3c:15:7b:e3:28:06:e2:d0:
         4c:47:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:58:37 2026 by rpki-client