Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa
File:                     63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa (raw, json)
Hash identifier:          w1sFgLqlw/dgGnw7R2bDKNEfpVgNQK95YLbC1Rzw6aw=
Subject key identifier:   07:C5:CE:74:EF:11:BC:B7:75:10:71:22:20:FB:95:DB:EE:46:57:90
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D3FA5F13C421D136D1900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.112.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:3f:a5:f1:3c:42:1d:13:6d:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=01b1b718-f0d0-4126-af6a-8024f39a12c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:4e:2c:93:41:15:1d:1c:b3:b6:58:c9:88:
                    31:09:4e:d6:91:03:fa:af:d0:d5:7a:06:3c:7a:d6:
                    9f:0c:4b:a4:25:9d:87:32:ec:f5:88:4b:2f:ba:7f:
                    6a:8c:ef:a2:ad:b0:70:28:38:68:8f:a4:7e:6a:11:
                    00:9b:8b:fa:1e:f9:1d:37:9a:ea:70:ca:90:dd:24:
                    7e:18:39:d1:98:dc:e4:dd:3c:f2:3d:c7:04:af:b8:
                    78:d7:11:bb:3a:89:45:a0:5d:2e:2e:4b:21:4c:b8:
                    f2:6b:83:8f:74:db:aa:70:f5:cb:44:10:c4:dc:8a:
                    3b:71:f9:2f:b2:43:3f:22:e2:b3:6b:14:0e:eb:8d:
                    96:9b:f3:a1:e7:d5:df:cb:30:41:20:79:8f:28:c7:
                    3c:80:ff:84:d9:36:42:60:c6:90:c3:4d:0d:dc:9f:
                    e2:d9:2d:93:0b:67:fa:46:3b:2c:5a:83:b5:ef:3d:
                    7e:08:01:99:07:a1:ce:f3:49:dd:cd:c9:be:d5:08:
                    93:39:a8:ef:6e:69:ff:20:56:f0:58:cd:42:67:78:
                    22:87:e5:cc:aa:28:51:12:23:4c:08:e7:d9:fb:39:
                    23:d1:f5:3b:04:7c:e0:81:dc:c3:46:2d:94:65:42:
                    55:ad:43:51:97:7e:26:7c:78:98:2c:57:46:fa:d3:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C5:CE:74:EF:11:BC:B7:75:10:71:22:20:FB:95:DB:EE:46:57:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:65:20:4d:c7:24:42:26:a0:b5:cd:9c:75:e0:81:37:1e:df:
         ec:b8:f5:49:13:c0:e6:57:e8:2f:60:2f:44:74:2f:c5:f4:72:
         01:40:40:a4:9b:7f:b7:b2:73:88:46:eb:ae:aa:70:2d:81:58:
         15:1b:b0:f1:56:40:c0:6b:4d:f9:9b:5f:20:7c:46:d1:48:66:
         9f:0a:99:3a:b9:ca:5e:18:82:95:9c:54:03:9c:30:37:f6:40:
         92:90:c8:ad:06:a6:c0:f7:5a:11:00:fe:50:56:bc:3d:98:5e:
         35:f8:c5:c0:a3:97:78:bd:23:15:c3:8f:c9:53:e9:17:fd:92:
         01:f9:85:44:a0:21:c8:68:07:b0:14:78:6b:7d:94:a0:e2:23:
         1a:a4:bf:b7:97:55:d1:a6:a1:92:28:67:94:f6:7e:68:5e:1e:
         7d:e7:b9:76:77:be:36:0d:cf:10:de:23:86:43:3c:c8:1a:d9:
         1c:f5:7f:96:0b:f2:51:55:2c:52:1c:bc:a0:83:bf:81:44:4e:
         a6:22:74:f3:4b:87:b5:37:8b:df:6d:a7:5d:db:53:b3:e5:ac:
         31:59:4b:02:ac:2a:4a:a1:77:3a:51:64:19:63:d9:3a:fd:43:
         d2:a7:77:89:4b:da:28:28:72:52:fe:46:4e:56:b2:77:e8:ac:
         ba:12:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:18 2025 by rpki-client