Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa
File:                     26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa (raw, json)
Hash identifier:          OLiZIJQkgG3PYIbCB8R9CAXZfechVQkR5WwLogKEyAs=
Subject key identifier:   BD:DC:F2:70:02:F4:6A:D3:39:92:A6:CD:FD:59:1A:32:3D:C5:21:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CACE6491EC6019BDBD4A40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.112.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:ce:64:91:ec:60:19:bd:bd:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=7fdba144-2743-4d80-89f8-910631c55520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:e1:4f:0c:8a:f1:a6:5b:ed:69:4d:98:96:
                    48:13:d2:84:33:b3:ab:a4:4b:ea:13:da:c4:7b:a4:
                    da:1b:6c:b3:82:f1:6f:f2:fb:1a:d3:2f:dd:57:98:
                    1f:7a:54:b1:09:98:b4:35:5f:e5:c2:74:74:18:01:
                    ad:62:b9:34:ce:49:5c:35:b2:dd:2e:2f:1c:60:cd:
                    0b:ae:4a:2e:a4:04:e9:28:a7:9b:07:47:e1:d4:00:
                    28:fa:05:87:c6:b8:c5:1a:5a:d1:df:a3:20:84:29:
                    9d:05:60:a1:37:fe:af:8a:4c:ab:43:22:bc:21:89:
                    b1:50:dd:53:0b:35:cf:d3:cf:6d:25:f1:4b:ef:37:
                    bf:bd:11:05:0f:49:76:02:65:bb:11:59:8e:a8:8c:
                    9d:9c:8b:61:87:c7:9d:15:82:74:43:67:79:15:05:
                    db:6f:80:19:f0:6e:45:7d:b7:c0:8f:fe:26:52:c9:
                    91:73:6b:3a:f5:9a:fd:59:0d:99:b5:48:f6:3c:45:
                    db:b3:f0:5e:ef:85:d4:1a:15:8c:df:33:58:26:76:
                    64:bf:70:d5:2c:84:c3:f8:cd:52:59:f6:83:bf:02:
                    c8:f8:86:1c:13:1b:a8:2f:37:d9:56:b6:a8:72:9a:
                    6d:b5:1c:35:37:f7:53:93:ef:99:3d:76:ae:cc:0e:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DC:F2:70:02:F4:6A:D3:39:92:A6:CD:FD:59:1A:32:3D:C5:21:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26cf2c27-d4fc-32d0-869d-c84301cfb1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:d3:8b:9e:ee:38:40:2a:b3:9c:ca:90:e3:20:ff:dc:4d:
         0d:b4:3b:3f:12:73:81:dc:96:f1:81:02:f5:2d:5f:56:af:3a:
         68:7d:05:26:0b:4b:db:8e:00:2e:4a:9c:3d:2a:2d:96:16:72:
         e6:23:50:eb:cb:e6:8e:8a:36:4f:60:ab:af:40:76:b3:76:10:
         cf:c0:43:ff:4e:c5:25:07:3e:73:6c:d8:64:1a:3d:9c:a7:a0:
         ae:5b:b3:21:03:89:ae:1a:49:2b:b5:c3:fc:bd:78:dd:9a:ab:
         5e:c0:bc:00:3c:5d:e0:21:a2:5c:d5:9b:77:6a:a6:27:06:84:
         6a:ba:41:95:d8:72:a1:6d:8a:4c:43:64:6d:03:84:64:b2:67:
         23:b3:e9:80:98:cc:cc:cf:18:06:9c:d6:89:c7:41:eb:ef:64:
         86:1e:0d:8e:8d:43:f0:f7:de:87:32:9c:68:15:9c:3c:7d:5e:
         96:d8:71:9e:ce:b3:89:bb:ac:82:dc:89:3d:73:16:d3:f2:44:
         42:68:87:d7:61:ae:7c:17:75:ba:b9:60:d5:f9:80:a2:85:dc:
         5f:b3:e7:8a:ec:c6:50:4f:50:59:87:74:b0:25:58:c9:c2:70:
         99:79:8b:2a:5a:e7:f2:5e:3a:4a:94:59:2e:d4:37:67:0e:a4:
         6c:67:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:25 2026 by rpki-client