Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa
File:                     26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa (raw, json)
Hash identifier:          BLaDqA9s/NJvjmcMm1jeapDQdVoIUsktXxcTsWdlDb0=
Subject key identifier:   9A:CC:82:1B:E1:67:CA:9E:7C:B5:A4:1F:CE:EB:C1:23:1D:F5:49:AF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D4BAFBFD916BA574E8A20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.112.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:4b:af:bf:d9:16:ba:57:4e:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=21511218-b27f-4440-9a2b-6f8cfcc538f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:3f:e0:74:aa:8f:50:a5:2f:a7:f6:ca:28:
                    9d:8f:7e:b8:45:ff:22:6f:d2:92:2c:84:05:91:58:
                    ca:dd:34:7e:d7:0f:9a:d9:4e:85:ac:ed:96:95:0a:
                    8d:88:6b:e9:91:c7:76:69:b8:39:ab:6e:86:ba:2b:
                    d6:91:0c:3b:20:8e:f5:e1:a0:4b:ec:e8:ad:24:b4:
                    57:a1:c0:62:cd:9d:99:ad:7b:c3:77:92:0a:d4:9f:
                    29:c7:ff:36:ca:b1:83:f4:9c:b7:1f:49:ec:8f:66:
                    f5:41:51:58:d2:75:90:eb:3f:4e:a3:b5:01:14:fa:
                    6e:58:44:c9:ef:83:ae:0a:67:7a:82:d1:68:c1:c9:
                    55:7f:d2:6d:eb:dc:52:16:a7:d8:1f:74:7e:6d:ad:
                    88:78:ba:8e:b7:56:d0:40:0e:0e:c3:7c:73:d9:1e:
                    d6:bd:3e:bc:ce:42:77:48:a9:e5:18:ba:2f:4d:01:
                    aa:b8:ea:06:bc:ec:1d:81:ba:69:06:23:40:03:1d:
                    24:f9:65:c5:46:30:6f:0a:ac:b9:83:94:15:95:12:
                    3e:f2:a2:74:f2:b0:e8:06:a8:5d:4c:b1:fc:ce:51:
                    7f:bb:58:67:51:a5:95:6a:a9:6a:1e:32:11:c9:59:
                    11:d3:ab:d6:e6:63:ad:13:6d:49:e0:07:d9:04:ad:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CC:82:1B:E1:67:CA:9E:7C:B5:A4:1F:CE:EB:C1:23:1D:F5:49:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:82:45:ea:eb:c1:30:04:97:bd:c3:21:e4:cd:b0:20:9c:
         74:b9:96:d7:2d:44:5c:c4:9a:66:22:57:e4:20:84:8a:8b:d4:
         5d:3c:c2:49:64:d6:62:db:99:b0:a5:5f:da:11:c3:b4:89:c4:
         c7:64:b6:2e:a5:5b:d8:64:b1:98:f0:9a:3f:67:7d:44:b3:04:
         44:38:53:36:d8:83:96:a1:42:fe:40:b0:35:f7:87:fe:46:c9:
         1c:5c:dd:89:fe:2c:05:2f:ab:af:4b:3f:02:e6:20:a8:15:16:
         3c:aa:09:35:66:71:da:bc:d4:68:5c:73:86:be:91:e1:37:3f:
         d3:d7:b0:4d:94:ed:a6:c4:23:9e:90:c8:b1:71:8b:e0:39:b7:
         c2:f9:22:9f:ef:ed:65:26:b9:9d:bd:38:f2:e1:79:37:ce:00:
         1a:f6:ac:56:8e:de:99:58:5c:7f:a7:f1:c3:05:c1:6f:c4:ba:
         01:e4:4a:7b:bb:ce:80:3d:10:44:33:3c:3c:25:e4:5f:a3:73:
         b2:bc:c7:b8:71:91:9c:6e:e5:ba:b9:a4:11:30:0b:cc:74:dc:
         08:e7:cc:16:2d:da:d3:b4:72:ac:5e:be:c4:62:ce:d0:f3:10:
         ee:14:e9:a5:51:20:f5:be:f4:5f:bc:6a:61:1d:58:db:16:9b:
         69:37:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:07 2025 by rpki-client