Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de914ee-0115-33db-b7ea-9e45ab053326.roa
File:                     4de914ee-0115-33db-b7ea-9e45ab053326.roa (raw, json)
Hash identifier:          cfbbE4TQCRf1l/b2rnlJYMg7JL9g7jBLFAcuoGXC1Ws=
Subject key identifier:   81:F9:7D:BB:BB:16:12:96:4B:98:28:C4:ED:D3:C3:64:5C:4B:4D:88
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DE8B03DC075AC21923800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de914ee-0115-33db-b7ea-9e45ab053326.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.112.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:e8:b0:3d:c0:75:ac:21:92:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2e00ebbc-6d03-4b13-85bf-52179f3109f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:35:0f:a8:e8:af:6b:c5:f0:0d:22:3c:69:
                    c3:ab:22:4c:a8:fa:2c:c6:ef:d7:13:fa:cd:13:63:
                    04:28:b8:6c:0d:64:20:4f:61:50:20:d0:3b:6b:5f:
                    16:c2:4c:e7:3b:45:f7:80:aa:d8:9e:1d:8c:8e:48:
                    22:aa:c1:17:33:fb:cd:14:b7:a9:a5:56:d1:8d:3c:
                    50:53:5c:2b:49:fa:73:f7:77:ca:92:09:28:8f:0b:
                    49:68:bc:5d:5f:10:4b:f6:2f:f1:5a:48:70:cc:41:
                    6d:dc:78:58:20:59:1b:04:f7:1e:61:7b:94:b7:47:
                    a5:fd:69:07:f8:c3:9f:bd:11:43:62:c5:42:2a:cf:
                    ef:b0:4f:ac:da:ec:ac:7a:86:2c:fa:c9:c4:a9:75:
                    a9:18:f7:8a:88:9d:df:ff:cf:e5:9b:ec:be:33:ca:
                    54:81:40:d1:36:11:5b:ee:91:9b:01:b1:c5:e8:ec:
                    24:91:e6:ec:5b:93:24:4b:11:be:94:21:62:fb:23:
                    67:55:42:bc:11:ce:a9:da:19:05:58:02:ca:22:83:
                    24:37:1f:85:c0:3f:1e:65:fd:2d:61:f0:66:0d:f1:
                    3e:64:82:9e:92:08:69:cc:3a:a4:bf:08:44:e7:5d:
                    ae:5c:1f:6a:15:27:1f:cf:71:4d:4d:a3:1e:7c:f6:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:7D:BB:BB:16:12:96:4B:98:28:C4:ED:D3:C3:64:5C:4B:4D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4de914ee-0115-33db-b7ea-9e45ab053326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:f4:ca:7c:64:9a:2f:05:08:66:21:00:4c:77:dc:26:be:
         75:59:46:5f:98:88:c7:54:96:35:5b:64:f7:16:cf:4d:d1:49:
         51:85:8a:18:69:27:ab:70:66:75:06:25:c7:5a:10:7b:cc:1f:
         00:d8:29:09:48:33:fb:21:25:e2:ed:10:9c:7e:52:f2:da:cf:
         9d:25:03:16:5a:3d:32:cf:ef:d8:fc:bd:09:f6:88:5b:47:78:
         d9:e9:18:79:e9:73:2e:cd:cf:dc:c0:46:59:12:47:22:01:c5:
         24:ab:88:86:f8:f1:81:19:0d:17:0c:5b:8e:bb:56:3e:b5:f8:
         31:79:e1:ed:8c:77:53:f6:a6:48:65:7c:61:ff:ce:5d:d7:41:
         4a:9a:11:0a:ed:f1:91:a4:72:fb:3d:1b:ff:5a:62:eb:f4:73:
         c2:af:a5:38:10:61:2f:24:e3:f7:93:aa:52:bd:ca:37:c5:78:
         95:a3:b2:71:5a:10:f3:a2:76:53:9d:9b:bb:40:22:08:31:56:
         6f:df:05:16:19:1a:ab:74:78:da:2d:c9:34:30:7b:67:9b:94:
         82:1f:55:10:3e:0f:98:02:0a:6b:fd:cd:ef:8f:35:5a:13:ea:
         a5:8d:8f:da:02:21:ad:81:e6:ae:6e:09:cc:aa:e3:0e:49:56:
         ce:53:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:17 2025 by rpki-client