Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/574e82dd-634b-3134-ab71-1c5b81159ba6.roa
File:                     574e82dd-634b-3134-ab71-1c5b81159ba6.roa (raw, json)
Hash identifier:          qURhBXRjlm8VyPD8X8WatGE5rBSYQPg1miQ4Z+QSPNs=
Subject key identifier:   AC:5E:07:B5:32:2A:F7:70:FE:26:03:F2:C0:36:D6:F3:FD:10:6D:D0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB7CBB36A714921612C700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/574e82dd-634b-3134-ab71-1c5b81159ba6.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.187.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:7c:bb:36:a7:14:92:16:12:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=df2e080f-1cf9-4e05-8ef8-18d469d33b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:77:64:1d:e4:ee:0f:fb:cd:c8:82:51:19:
                    70:dd:7e:a6:20:69:77:45:c4:54:26:a2:0e:71:e4:
                    3d:02:f9:ae:43:a3:94:bd:84:38:7e:92:d4:c1:06:
                    09:19:2b:11:12:10:de:04:6d:60:06:b4:06:87:22:
                    41:01:23:e8:ff:00:b3:f3:35:03:0a:38:d9:ca:95:
                    81:fa:60:b8:bd:ac:d9:fa:5c:93:92:98:79:43:50:
                    03:bc:bf:f3:07:8e:a3:c9:1c:77:de:5d:0e:86:ee:
                    69:b7:8b:79:38:9a:74:a5:26:5b:ed:7b:18:f1:2c:
                    b9:83:0c:77:ce:1d:0e:76:6e:58:ac:54:87:70:e0:
                    79:16:b5:ae:49:73:62:26:ff:4b:d8:07:a6:19:d7:
                    77:f4:70:23:73:bf:a0:a0:ef:7b:53:0f:d2:25:8e:
                    07:4f:fc:bc:50:93:49:91:21:80:e4:ee:d0:79:27:
                    fe:46:97:9f:75:9e:67:05:54:53:df:65:8a:51:74:
                    cc:63:44:69:95:a4:a8:83:ef:f7:d3:b2:f7:ba:ae:
                    55:01:63:1f:3b:bd:6a:89:21:0b:80:3d:05:7e:3e:
                    93:11:fa:05:64:f8:6a:aa:60:e3:91:a9:c0:3c:95:
                    37:ad:6a:49:62:e3:d4:63:fe:9c:42:b8:e8:6e:f2:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5E:07:B5:32:2A:F7:70:FE:26:03:F2:C0:36:D6:F3:FD:10:6D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/574e82dd-634b-3134-ab71-1c5b81159ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:22:16:d5:3f:b2:ee:f1:e4:6b:0f:53:61:60:32:40:c2:
         5c:0e:c2:a2:42:62:ae:4f:09:03:f9:dc:fb:56:14:71:b8:ad:
         7e:73:d7:88:ec:74:5f:23:c4:75:b4:85:99:d8:df:07:93:46:
         bd:7a:ea:2a:6f:59:c7:f9:40:d3:91:1a:37:54:b3:64:93:3f:
         27:19:1e:b0:a6:7f:79:1b:82:c0:9a:10:d5:2c:6f:b3:a5:ab:
         66:40:45:72:12:af:94:c2:48:29:9b:4e:2d:f5:87:32:b6:25:
         2d:2a:ac:35:3a:30:c0:04:5a:8e:9a:ad:81:99:78:fa:98:1d:
         8c:98:98:ad:f2:e5:ab:0c:2f:02:32:8b:ae:60:66:a7:fb:44:
         a0:8e:f4:35:c2:ab:61:e4:70:db:d9:e5:5b:0a:ba:ca:9e:55:
         9a:32:5b:fd:1c:ce:d7:a5:c4:f6:e1:0d:34:fb:4a:86:ba:ad:
         d1:f8:91:62:cb:cb:91:88:c3:d0:7f:48:5b:6a:03:52:57:99:
         18:15:3b:80:7e:78:8e:9a:49:0e:e1:06:88:70:3e:c8:d3:62:
         d4:13:25:16:aa:a0:65:fc:e4:cf:39:8d:59:5d:ea:93:23:98:
         d7:4c:3f:87:f1:9a:91:bb:bb:e0:d4:22:e5:f4:45:8a:4e:13:
         58:6c:c2:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay3y7NqcUkhYSxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZGYyZTA4MGYtMWNmOS00ZTA1LThlZjgtMThkNDY5ZDMzYjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXp3ZB3k7g/7zciCURlw3X6mIGl3RcRUJqIO
ceQ9AvmuQ6OUvYQ4fpLUwQYJGSsREhDeBG1gBrQGhyJBASPo/wCz8zUDCjjZypWB
+mC4vazZ+lyTkph5Q1ADvL/zB46jyRx33l0Ohu5pt4t5OJp0pSZb7XsY8Sy5gwx3
zh0Odm5YrFSHcOB5FrWuSXNiJv9L2AemGdd39HAjc7+goO97Uw/SJY4HT/y8UJNJ
kSGA5O7QeSf+RpefdZ5nBVRT32WKUXTMY0RplaSog+/307L3uq5VAWMfO71qiSEL
gD0Ffj6TEfoFZPhqqmDjkanAPJU3rWpJYuPUY/6cQrjobvLLnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxeB7UyKvdw/iYD8sA21vP9EG3QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTc0ZTgyZGQtNjM0Yi0z
MTM0LWFiNzEtMWM1YjgxMTU5YmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0bIhbVP7Lu8eRrD1NhYDJAwlwOwqJCYq5PCQP53PtWFHG4rX5z14js
dF8jxHW0hZnY3weTRr166ipvWcf5QNORGjdUs2STPycZHrCmf3kbgsCaENUsb7Ol
q2ZARXISr5TCSCmbTi31hzK2JS0qrDU6MMAEWo6arYGZePqYHYyYmK3y5asMLwIy
i65gZqf7RKCO9DXCq2HkcNvZ5VsKusqeVZoyW/0cztelxPbhDTT7Soa6rdH4kWLL
y5GIw9B/SFtqA1JXmRgVO4B+eI6aSQ7hBohwPsjTYtQTJRaqoGX85M85jVld6pMj
mNdMP4fxmpG7u+DUIuX0RYpOE1hswls=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:59 2026 by rpki-client