Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa
File:                     6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa (raw, json)
Hash identifier:          zp5uE+05dOtVS7EGPToakMohoCiuu4du/EYH5a6Oq2A=
Subject key identifier:   C4:FE:A1:77:01:21:9D:56:05:6F:2F:90:BA:A0:B7:96:4F:80:AF:0C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAC6E58674753B7F507440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.112.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:c6:e5:86:74:75:3b:7f:50:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=11ba860f-4052-49c0-b621-7c63a74db22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:f1:8a:38:22:6e:b2:fb:77:75:76:fc:ce:
                    3c:d5:0e:d1:a6:bc:3c:ae:ad:de:4b:0c:f0:1d:b8:
                    a4:d0:18:48:7d:42:e1:ca:d0:f8:a9:6b:59:b7:6d:
                    4b:ad:1f:ff:dd:6b:c5:21:63:76:95:66:16:47:e4:
                    93:70:3f:58:40:fc:db:d7:0a:97:16:3d:6f:0e:0f:
                    79:2e:55:85:33:04:12:dd:50:8d:74:0f:bc:9a:ec:
                    26:4a:74:c4:27:6f:c0:47:e0:4f:27:8f:e4:4b:99:
                    00:db:58:8c:eb:1b:40:50:f6:b4:c2:35:16:a4:0d:
                    95:7e:f2:ca:3a:ad:03:a2:27:a8:4a:5f:6c:db:f8:
                    9a:98:f8:14:28:cf:ba:4a:ec:b4:a5:ef:8e:5c:bf:
                    75:fb:91:4c:f8:ae:08:e1:69:cc:6b:7f:b7:66:40:
                    57:ea:ec:67:f7:30:16:71:ec:10:62:4a:8f:49:65:
                    fe:d1:12:a6:77:60:67:8f:5e:d6:7d:e4:97:d8:95:
                    25:3f:17:2d:fb:42:d2:56:8f:a7:79:6e:b2:33:4c:
                    84:57:40:a8:4e:3f:91:1d:e3:43:c4:c3:99:dc:6e:
                    cd:3c:9f:89:3d:22:60:70:19:89:39:41:97:59:f9:
                    f3:8b:1d:1e:fb:71:bf:71:f8:a1:9a:2e:5c:c6:71:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:A1:77:01:21:9D:56:05:6F:2F:90:BA:A0:B7:96:4F:80:AF:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:93:01:ef:16:1e:07:49:06:93:49:ba:13:24:13:17:44:05:
         20:fb:35:fe:4a:07:65:9b:34:e2:56:20:ed:55:c7:25:51:fc:
         5f:66:5d:a5:a0:64:06:cc:74:a1:22:0f:e3:30:cb:da:d7:a2:
         1b:92:c7:bb:41:cf:06:b5:45:57:a2:2b:da:71:04:d9:85:28:
         b7:03:59:fc:33:38:e8:c1:08:3d:86:75:2b:91:4a:bb:05:d9:
         a7:69:8a:32:c4:60:aa:e4:2d:0b:22:cb:4a:0a:d8:8f:a2:85:
         3a:fb:b2:0e:dd:d1:ca:af:37:56:69:3d:ad:88:a4:1f:37:c3:
         09:d2:0b:14:1f:01:bd:4f:eb:bb:58:2d:73:c8:e4:74:b9:86:
         64:b6:cc:be:d3:f8:fb:b2:5d:cf:ea:cb:76:5b:ae:55:04:3c:
         a2:20:7b:cc:28:19:41:36:da:00:af:dd:de:f1:7c:d5:d2:08:
         13:0c:83:95:c3:bd:5c:69:b2:d7:84:cc:02:27:ba:81:7e:71:
         c7:4a:11:21:b3:59:4c:de:ec:43:fb:52:39:bc:56:7b:f5:19:
         be:f7:a8:e4:19:3e:e4:c9:65:46:86:1e:95:06:43:ca:04:e2:
         3f:1c:32:9b:36:f2:e0:7d:38:4a:0d:ee:7c:e0:cb:0a:ca:9a:
         cd:28:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:51 2026 by rpki-client