Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa
File:                     5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa (raw, json)
Hash identifier:          5kkHbCpMGheZ2Q82HJTFWZghfwwO6QYkKxwGURktzIQ=
Subject key identifier:   BD:3E:CD:2E:20:A6:D3:EA:BC:5F:CA:1E:8E:12:92:31:7C:A5:F0:74
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D51254BEDFEC16E9DAB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.116.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:51:25:4b:ed:fe:c1:6e:9d:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=06131362-5062-4ed4-9446-8b95e63f8fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:60:70:91:74:b5:6f:d4:8a:d6:24:3d:7e:8a:
                    96:6b:62:c7:58:17:73:17:6a:a9:bf:01:d4:cd:73:
                    f3:f4:92:01:4c:18:e5:56:23:2d:12:f7:4a:27:6d:
                    1f:18:11:63:5b:ed:65:19:3c:a6:23:aa:8a:9b:11:
                    c2:f4:c7:50:c8:52:01:7b:ed:94:9b:17:2b:78:5a:
                    e0:b8:d4:00:de:3c:d1:e4:09:88:94:1d:e4:23:23:
                    ce:d7:8d:28:62:b2:df:e6:ff:2f:4e:0b:10:70:65:
                    ea:d2:6b:4b:bf:09:a2:7d:60:7b:b2:b2:0e:69:ce:
                    f2:64:aa:c4:14:ea:64:6e:3c:5f:4b:6e:fd:50:52:
                    61:83:05:ae:4b:52:9b:a9:ae:5a:0e:38:22:55:58:
                    9c:8e:68:6e:be:1f:f9:42:84:d2:05:fe:19:a8:2c:
                    a1:78:be:d1:c7:b5:6a:e8:2e:67:77:17:0e:47:99:
                    8d:b9:76:0c:b3:05:43:bb:50:1d:99:93:54:22:95:
                    0e:e5:09:c5:43:16:4d:52:b1:e1:6f:a4:9c:eb:62:
                    dd:94:a8:f3:5a:ee:81:73:4c:17:be:b8:d7:40:13:
                    ca:d7:53:65:22:f8:0d:ba:da:d3:e7:85:ee:e2:3a:
                    5b:77:ef:96:47:6a:25:76:66:59:d9:c0:21:48:da:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:CD:2E:20:A6:D3:EA:BC:5F:CA:1E:8E:12:92:31:7C:A5:F0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.116.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:ea:42:28:ab:1d:37:b5:52:2f:21:5c:13:64:4e:d8:b1:
         e4:7f:ee:a6:31:e2:9b:3e:3d:84:00:c3:9b:2c:d3:e9:b7:96:
         de:91:b7:65:e9:7a:4a:d9:21:c2:7b:1b:ca:22:fd:b2:d3:f8:
         1b:f4:6d:8d:41:f2:f0:06:3b:80:bd:e7:08:7e:eb:32:f3:a4:
         34:5f:51:c7:7d:31:b0:40:cc:05:34:b8:ef:7e:55:18:f3:e6:
         7f:d6:fb:66:35:76:d1:2f:b2:c9:6b:0d:62:39:48:af:fb:40:
         eb:cf:ed:96:cf:75:d8:1f:be:f9:e8:65:ac:0d:c9:82:88:f2:
         95:21:2a:c3:6c:ea:7c:a4:23:79:99:24:92:fa:41:8d:6d:ef:
         5c:c3:fe:fd:c6:2c:05:20:47:15:b7:58:da:c1:4a:ee:9d:2f:
         d0:ae:6e:9d:d3:a6:aa:0f:1b:41:db:50:98:0e:f9:fd:aa:65:
         94:c4:f3:bd:8e:aa:49:91:7a:1a:91:6e:05:d6:e0:85:d1:56:
         d9:71:a4:a4:11:a1:2b:7a:dc:64:c5:79:54:94:b0:78:f0:e0:
         5c:76:41:a4:69:ea:af:13:63:b8:65:9d:e5:92:e6:b5:32:dc:
         f0:dc:e2:a7:8f:bc:a5:ad:40:1d:f5:c0:52:e5:ea:b3:c0:52:
         b7:b2:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:32 2025 by rpki-client