Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5bc5a32c-7299-333e-a336-985ae87ef4d9.roa
File:                     5bc5a32c-7299-333e-a336-985ae87ef4d9.roa (raw, json)
Hash identifier:          //0/boJjzlG/JsPgnQY2qIe1te/rzxC8ppJy5zzTmxc=
Subject key identifier:   E2:C1:93:F0:8C:C4:66:71:EC:E5:D1:97:D8:83:B2:4E:FA:42:93:5C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DEE8E5D992C8A398BA160
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5bc5a32c-7299-333e-a336-985ae87ef4d9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.113.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ee:8e:5d:99:2c:8a:39:8b:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ff00afd0-6a1a-43e6-92eb-ca22a6e85379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:35:7d:5c:dd:5f:d9:96:a9:7c:dc:8d:e2:
                    82:f0:4a:54:6c:b0:18:86:59:09:6d:07:31:ee:68:
                    5e:8d:9b:16:ea:a0:bd:04:7f:05:68:ee:4f:68:07:
                    db:96:a1:73:d7:a1:96:0f:6c:d0:3f:09:94:41:7f:
                    15:fe:2d:c0:42:5e:03:66:48:89:36:82:ef:ba:0c:
                    7e:8a:f4:64:69:35:1a:46:af:99:84:45:b6:04:ad:
                    b5:c5:ae:3b:71:08:21:25:ee:8e:da:50:26:7c:c6:
                    f2:2c:a5:cd:d9:35:ba:5f:bc:cd:8a:8f:22:f2:42:
                    e6:11:a6:a0:e5:7e:36:fc:a9:d1:df:01:8c:f4:2b:
                    6a:f1:19:05:2e:a5:61:39:df:2e:10:69:93:5f:4a:
                    0d:b0:d9:78:de:e6:4e:b9:4d:d5:b5:09:b2:23:fa:
                    ec:8e:75:e8:d8:7e:2c:5c:7e:f4:28:fe:4c:45:f2:
                    90:2f:e2:77:92:8f:e0:51:50:07:30:66:a4:91:0d:
                    34:b4:ce:94:5b:f3:8c:3a:72:ec:a1:e0:55:0c:c2:
                    95:1d:5c:4e:34:8a:72:72:ab:1a:56:e7:bf:34:d4:
                    92:56:3e:e1:55:78:37:15:2e:06:d1:2d:09:ae:b5:
                    71:81:50:21:36:10:9e:b8:58:d5:31:7e:38:46:7b:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C1:93:F0:8C:C4:66:71:EC:E5:D1:97:D8:83:B2:4E:FA:42:93:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5bc5a32c-7299-333e-a336-985ae87ef4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.113.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:1d:16:5e:10:37:50:5c:6c:4b:05:c6:ea:1f:07:61:07:
         73:e0:5e:b2:a9:79:a6:be:84:a9:61:31:a4:ef:43:f4:05:75:
         3c:a7:1c:a4:5d:a7:88:66:54:05:c7:fd:03:c3:1a:25:bd:e2:
         ca:89:e3:a2:3c:10:a2:7b:a2:69:76:c7:7e:3c:05:f1:08:72:
         90:94:a9:44:03:11:84:8c:90:2f:f8:2e:08:0a:f4:ab:16:30:
         ad:4f:e6:80:0c:ba:b4:5b:97:b4:63:5b:0a:4a:37:6c:78:78:
         e5:82:9a:e7:e9:70:f7:f8:e5:6b:57:13:23:14:ad:24:c2:9f:
         84:7a:14:82:6d:e4:47:ac:02:1f:0d:8e:bb:8b:7a:ab:76:49:
         5d:0c:8c:ab:da:3f:f8:fd:06:71:8f:5f:27:6c:54:d8:c5:48:
         f5:9d:7b:a3:b4:8c:be:d3:a5:a4:ea:55:eb:e4:eb:e7:59:72:
         33:38:53:b0:f4:53:e7:38:81:d1:14:c6:61:7f:4e:13:22:ee:
         62:57:c7:80:11:14:87:da:be:16:71:4a:5f:b3:96:0e:9f:2c:
         f6:f8:d3:75:7b:13:ce:af:23:a2:97:d4:0d:15:c4:73:d2:1c:
         7b:78:12:58:a2:6b:2e:46:35:1f:6f:ef:4c:e4:93:37:b3:7b:
         00:75:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:57 2025 by rpki-client