Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5987ceb9-169f-3251-b17f-2f9ce39d4a6e.roa
File:                     5987ceb9-169f-3251-b17f-2f9ce39d4a6e.roa (raw, json)
Hash identifier:          h2MUBF7aeO8ecmZ6anEe4oM0pppBOGEEf+v/BBLCJAw=
Subject key identifier:   E8:23:59:0C:12:1A:81:66:D6:F6:99:93:98:12:E0:37:FB:C4:E6:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584DBA3B1B061C63356B5E611CC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5987ceb9-169f-3251-b17f-2f9ce39d4a6e.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        68.189.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:1b:06:1c:63:35:6b:5e:61:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=c4cc742b-289a-4ef7-9d39-e54080e8ca35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:42:88:0f:7f:8a:09:cc:ef:75:7f:f7:bd:
                    b2:c8:ca:a1:be:c2:62:16:26:72:ad:df:35:80:7b:
                    d1:61:17:ce:b4:11:d5:1c:f1:42:2a:8e:81:4b:32:
                    a1:33:d5:6b:5a:99:0a:a7:2e:1c:0c:8a:fe:0d:fd:
                    a6:22:b5:54:91:df:f1:9f:5c:80:ca:e9:bb:48:8b:
                    ef:f8:0e:22:0e:61:d3:a6:96:7f:f7:e0:49:e5:47:
                    04:3d:59:5e:a7:d1:d2:41:11:79:ee:85:37:5f:f3:
                    18:68:28:b6:b8:5d:b4:92:fc:f4:9c:0d:4b:5d:c8:
                    f3:a9:cb:9e:4a:77:83:8d:62:93:72:39:46:03:b7:
                    14:38:f2:34:16:6c:88:9d:bb:16:5c:53:7a:26:d3:
                    c0:08:6d:46:59:71:bd:91:4b:67:98:b9:73:b9:46:
                    0b:cf:6d:b4:82:d7:f0:c1:17:92:45:eb:65:24:c9:
                    41:e0:64:45:80:01:c6:65:f6:8b:7a:88:d5:8c:c6:
                    20:82:57:68:3e:e8:a8:ee:d3:1c:a3:66:4b:74:e8:
                    e0:76:8c:34:6f:fa:b2:c4:c9:f9:18:aa:53:3e:0c:
                    3b:5e:37:6a:53:b5:c1:d0:6f:50:09:66:3c:3b:15:
                    08:dd:3d:9e:24:45:bb:f0:58:1d:bc:24:36:c8:ef:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:23:59:0C:12:1A:81:66:D6:F6:99:93:98:12:E0:37:FB:C4:E6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5987ceb9-169f-3251-b17f-2f9ce39d4a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.189.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:c0:32:04:f0:31:e0:23:0b:c2:ba:1e:52:1f:21:9e:60:
         01:bf:03:1f:e1:47:bb:5e:3e:41:7a:da:3c:aa:22:a8:9e:54:
         0e:db:7b:0b:2a:31:84:88:1c:34:f9:cf:22:45:e4:d3:16:11:
         31:e1:c9:c9:c0:5e:6c:5e:5d:37:46:b0:84:15:bf:c4:85:36:
         73:6b:57:9a:b8:79:43:97:68:85:6c:5c:30:34:5b:07:f7:a7:
         6a:7e:4b:85:9b:d3:de:a5:ac:50:61:da:95:23:c6:2a:5f:4b:
         d2:82:a5:59:d4:d6:7e:b9:39:d0:6e:fc:ff:49:3d:5f:00:10:
         88:80:3c:0b:3f:20:b6:53:01:95:4a:c3:cc:ae:85:cc:79:13:
         55:cd:64:87:2e:e7:74:8a:d6:f1:5c:64:ca:54:4d:50:08:ca:
         4e:b8:14:14:1e:48:1b:ca:a1:94:e7:13:4d:84:c2:0d:69:a1:
         ca:3f:fe:62:4f:b4:a9:96:a2:54:17:fa:50:3a:bd:1d:cc:57:
         63:ce:84:37:56:92:fb:9e:0c:b1:65:06:de:b1:36:76:92:63:
         2d:f4:c1:12:e4:13:57:85:5e:fe:93:c7:83:a5:69:f4:2f:cd:
         86:7e:cf:05:ad:19:46:ed:a4:ed:28:60:de:bc:fd:f3:58:f2:
         28:9a:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:48 2026 by rpki-client