Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/48299775-fb00-318d-9c04-34eaf5d3043b.roa
File:                     48299775-fb00-318d-9c04-34eaf5d3043b.roa (raw, json)
Hash identifier:          zhOZXG7PkHWgj/8jK9aPHRUpjY5oPeQ6S2AzlAUb1E4=
Subject key identifier:   6D:34:84:01:41:A7:5B:89:66:AE:D7:2B:5A:24:67:DD:F4:FC:AD:88
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D43CA41300400CE7998E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/48299775-fb00-318d-9c04-34eaf5d3043b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.112.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:43:ca:41:30:04:00:ce:79:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=101629ad-1f03-4b44-a04d-1f56dc7852d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:39:ca:b9:0d:76:b4:0f:ca:f5:cb:45:98:2a:
                    a8:64:5c:70:0d:ac:f6:8e:72:f2:83:be:4c:70:db:
                    27:d4:61:49:84:65:05:70:d6:f3:f4:99:e2:f5:cf:
                    31:7c:0a:1d:b2:be:64:09:56:9b:b9:07:8f:b0:63:
                    51:d8:6e:5b:c0:82:12:1e:51:c3:bc:34:c8:c6:b9:
                    f7:f3:80:63:86:93:58:3c:06:18:16:73:bd:0e:f6:
                    05:e2:10:96:26:4e:32:aa:2c:4a:4c:bd:9d:8b:97:
                    75:09:90:dd:24:d9:6f:0c:49:28:a8:75:15:d8:22:
                    ed:25:8e:25:e8:2e:ff:85:ec:eb:cc:f4:99:4f:36:
                    9e:e6:8d:de:25:40:3a:92:84:13:ee:59:14:da:b4:
                    7d:d4:7c:fb:86:50:06:74:bf:b8:6b:28:71:2b:2c:
                    16:44:1c:3c:e9:7c:3f:ad:b7:65:8c:e5:ce:66:08:
                    9b:70:01:11:a1:73:88:5c:4a:02:94:95:03:43:3f:
                    71:bb:78:7b:7e:56:5f:f0:50:64:ce:fa:da:04:14:
                    21:31:80:81:59:98:67:ef:a7:64:07:1a:56:12:2a:
                    f3:74:89:b0:7c:cd:9e:f5:98:6a:99:f1:d9:f8:ca:
                    c9:43:2b:d5:d8:fb:63:2d:cf:bf:30:f1:ae:d2:b2:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:84:01:41:A7:5B:89:66:AE:D7:2B:5A:24:67:DD:F4:FC:AD:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/48299775-fb00-318d-9c04-34eaf5d3043b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:bb:60:c3:15:3d:dc:61:22:7a:4a:88:d6:9f:2b:37:4c:
         5b:75:da:e1:e6:15:24:6c:68:ed:c5:7d:0c:0a:4a:06:46:43:
         26:ed:40:3a:85:fd:15:50:e7:9e:33:f2:23:fc:94:06:68:64:
         1f:54:23:4f:a4:d9:f9:98:ba:35:91:72:df:b6:24:f3:e5:7a:
         cb:64:a4:bb:fa:2d:de:ca:dd:34:e6:98:67:eb:a4:03:8d:59:
         af:05:a8:e1:e5:96:b8:19:ef:1f:6e:60:a5:f4:e2:27:ba:48:
         6c:a7:6e:bc:74:c9:5c:96:b2:24:a8:1f:c3:85:d7:b0:4d:7e:
         ec:4d:73:04:66:c2:c3:d3:1b:34:6f:31:e4:61:a9:86:97:f2:
         6d:1f:f5:6b:fe:7e:cd:d8:7b:fa:08:52:e1:98:b8:66:71:92:
         3a:21:f3:b4:03:b8:cf:f4:04:44:4a:05:e4:8b:ea:ee:28:56:
         1b:46:68:2b:8a:1c:0b:58:27:ec:90:67:a8:1f:89:fc:d2:f7:
         f5:c0:bc:3f:87:34:28:13:1c:6e:21:2a:10:8a:76:a4:26:d7:
         d8:7d:04:e6:9b:7c:e8:76:02:e8:77:a2:53:fb:a8:1b:8a:0f:
         73:e4:3b:08:c5:d8:00:70:1b:9c:32:d6:cc:6b:b1:30:67:eb:
         5b:ce:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:48 2025 by rpki-client