Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa
File:                     2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa (raw, json)
Hash identifier:          HbI9FvP6OhkDIiOO4m+YPmZv7Dn8Q1/pKtwc/PhCYAY=
Subject key identifier:   1E:D5:27:9C:EB:AF:E7:10:82:10:9E:1F:EE:08:2C:A2:32:2E:24:D6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DF7A03408368C3676E900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.115.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:f7:a0:34:08:36:8c:36:76:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=21c1b58f-f96a-4fb4-b35a-9dd5ba296be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:bd:15:4c:5b:37:a2:8d:43:15:5b:03:c4:
                    bc:f0:a5:9b:60:62:dd:2e:b5:42:4f:72:0a:76:f3:
                    8f:4c:5f:d0:cc:7e:cf:dc:af:35:f8:ef:14:c6:a6:
                    89:21:75:dd:d2:37:45:77:38:ac:e8:07:6d:68:e5:
                    45:fb:c7:33:47:e3:dc:47:a6:cc:e7:cd:16:f7:69:
                    1f:b1:db:ce:86:62:c3:f9:27:0d:96:4e:a7:b1:b2:
                    60:39:29:84:4b:52:9f:76:89:b9:ad:41:72:a5:f2:
                    24:bf:a6:40:d9:48:77:16:ed:ca:72:5e:89:68:95:
                    be:83:33:b0:77:58:59:76:0c:4d:0b:1d:5e:20:63:
                    5a:90:c5:8c:3c:a7:47:0f:35:10:26:6a:b9:b3:c5:
                    c0:65:38:9d:3d:fa:c3:75:8a:8c:ed:7f:05:09:fe:
                    c8:7d:d0:4f:f8:6b:c1:7b:8f:c7:68:80:7c:6e:a5:
                    28:cf:cc:34:c2:d0:ad:cd:14:1b:8c:82:41:05:f1:
                    91:a0:76:c9:b1:b1:7a:34:22:6e:4f:fe:ba:5e:c3:
                    b6:25:05:df:88:19:c2:db:dd:42:8c:35:fe:1e:47:
                    f9:f9:83:d0:bc:73:d5:6d:55:b5:a0:84:ec:68:76:
                    64:71:cf:92:8e:92:af:79:79:57:5a:f1:7f:88:39:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D5:27:9C:EB:AF:E7:10:82:10:9E:1F:EE:08:2C:A2:32:2E:24:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2df9d1cf-2745-38a1-b4f2-8f3ae2e3071e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.115.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:60:41:c7:8d:d9:d8:ab:b4:d2:87:be:25:16:96:24:83:
         47:7d:2b:f3:ac:39:e6:2e:b2:b5:f9:4d:e8:10:b8:ed:98:de:
         48:3e:d0:e2:b9:7e:d3:57:62:b1:cb:9f:7e:7f:b6:fc:94:7f:
         ee:3a:80:6d:38:41:67:01:1e:2b:87:47:7e:ac:6d:08:23:24:
         63:4d:61:c6:79:ed:fa:cf:ac:1e:30:b5:b8:db:b6:22:13:6f:
         63:0b:f8:c3:54:8a:9c:73:96:89:1f:3e:87:97:5d:87:04:61:
         80:3f:76:3f:6f:9d:cb:08:63:5e:fa:1d:02:bd:8e:bb:f2:92:
         77:4f:f8:57:4a:2b:46:21:05:83:d3:80:0a:dc:e3:f3:07:31:
         ca:71:33:27:e2:7e:23:e4:df:9c:9c:29:84:da:de:0a:ad:2b:
         1f:05:69:16:f4:f5:4a:15:c2:23:b0:4a:83:21:10:7e:1a:48:
         f3:91:b8:25:ef:dc:89:14:47:d1:ff:c5:a3:1a:43:93:41:25:
         6b:5a:41:d8:32:27:53:48:e2:d9:3c:90:39:49:4d:4d:29:ab:
         34:f5:8f:c9:2f:0e:2f:ef:4c:7e:58:9e:78:34:69:e7:a7:77:
         df:f7:7e:46:44:e6:f5:83:c7:20:b3:7d:ba:b7:3f:ba:3d:86:
         3c:da:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:30:53 2025 by rpki-client