Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2316228b-f3ea-3c5a-8231-ab02bf713e70.roa
File:                     2316228b-f3ea-3c5a-8231-ab02bf713e70.roa (raw, json)
Hash identifier:          cxQniy6NPfBIgL1z0nNQuHx5HB69JjlWI0dKrZ4eMNw=
Subject key identifier:   E8:C9:3A:B0:43:E9:B5:B5:BC:E5:A6:16:F8:02:10:B4:D5:03:79:EA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DFAA2840C848B3629D100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2316228b-f3ea-3c5a-8231-ab02bf713e70.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.190.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:fa:a2:84:0c:84:8b:36:29:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=789a177b-7d69-4114-9300-8bcce780a0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:32:ff:c7:88:53:e9:24:76:8b:f4:ee:02:
                    c7:61:0b:07:be:2c:a8:7b:50:72:17:a5:ed:2e:c2:
                    67:fe:ff:4a:67:8b:ce:77:e8:40:17:c1:40:f5:3f:
                    c2:bc:f5:8c:cc:a6:6a:f8:a6:86:ab:be:7f:2d:ab:
                    b4:c7:6d:6a:12:f6:2f:01:67:95:55:8f:56:da:a4:
                    dc:f7:40:5a:b4:a7:d4:96:bd:77:f8:6b:b4:ac:46:
                    29:53:de:86:52:1d:97:59:87:e2:56:53:cc:3f:ec:
                    95:bc:37:36:02:3f:e1:3a:90:79:14:19:2d:9f:63:
                    7b:8b:0a:f2:78:ed:1f:fe:fe:7b:bd:b0:40:25:3a:
                    bc:18:83:31:44:cb:c3:7a:20:fc:ab:e3:e1:b7:0a:
                    33:ac:53:e8:4d:7e:24:f6:df:d7:df:9d:1b:e1:f8:
                    61:a2:be:30:6c:bc:79:e0:22:c9:ea:4f:75:c1:d9:
                    47:f2:3c:3a:32:60:6b:68:53:fb:72:40:c2:89:a4:
                    c9:8b:66:66:5e:3c:75:64:82:07:5f:e2:6d:0a:a7:
                    c6:59:ff:08:75:6f:59:a3:4c:e1:a5:ae:3e:cc:88:
                    f1:ac:ff:8e:6e:9a:0d:73:2b:f6:b9:78:59:79:5a:
                    87:dd:6f:bd:cb:7f:a8:2f:c0:3a:f9:ff:32:e1:06:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:3A:B0:43:E9:B5:B5:BC:E5:A6:16:F8:02:10:B4:D5:03:79:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2316228b-f3ea-3c5a-8231-ab02bf713e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:81:7b:40:37:bf:42:63:65:9b:1d:2d:67:76:d9:7e:04:a6:
         07:33:0d:9f:f6:01:50:90:4a:64:15:53:a0:76:d7:8a:bb:31:
         bf:13:6f:ce:ef:08:08:ac:b0:21:de:7c:4b:84:b0:b9:3c:21:
         41:fe:a8:cf:6d:63:2d:7d:f3:ec:2e:87:85:d1:13:3c:77:8e:
         53:4f:5d:b0:72:e1:f2:63:bb:72:8f:57:15:9b:4d:b6:18:0a:
         43:a9:0d:14:aa:cd:56:53:ac:86:e9:96:c9:e5:d0:78:27:68:
         f6:95:77:39:cc:cc:32:f5:f1:f1:a4:ad:b2:a3:fa:d2:cb:c8:
         86:e7:17:e6:e0:89:9b:ec:ca:65:53:f8:d8:ac:27:32:c6:67:
         e2:7a:a5:7e:6d:fc:b4:bd:53:17:20:e7:75:a1:80:30:b3:d3:
         85:23:37:a2:88:13:7e:64:95:61:53:46:fd:47:c4:8f:e3:12:
         02:2b:aa:4d:34:e3:65:d5:81:bc:50:c9:4a:46:02:71:db:16:
         64:7e:bc:e1:a9:6c:39:df:ce:11:a2:99:26:34:93:21:99:b6:
         8c:6e:fb:74:a3:c5:c3:46:ae:0e:e9:1b:88:44:25:3e:1b:5e:
         12:4d:38:1d:f9:3a:b3:57:92:db:26:8f:e7:45:3a:d0:3f:fe:
         9d:72:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:33 2025 by rpki-client