Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6fa66da2-c0fd-316c-a2c0-5db503aa4e20.roa
File:                     6fa66da2-c0fd-316c-a2c0-5db503aa4e20.roa (raw, json)
Hash identifier:          YLZmY47vHlDUxbEkbOIox+baVmJ4NcueChTc/qhvQfQ=
Subject key identifier:   64:20:44:53:AE:24:F5:A5:9D:1C:E5:06:77:75:1D:45:77:00:1B:4B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB80C840DC9FB90196FA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6fa66da2-c0fd-316c-a2c0-5db503aa4e20.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.187.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:80:c8:40:dc:9f:b9:01:96:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3ca5890c-e5d7-41c5-b009-ebc4d969fb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:75:58:37:c4:44:a5:02:3d:42:b4:36:39:
                    ae:22:49:e6:3b:b5:6b:de:ae:7e:b3:e9:8f:3e:ea:
                    e0:1c:65:30:e7:6d:bb:61:95:80:7a:11:d1:56:f1:
                    33:6e:6d:3f:ec:8f:03:b7:c7:00:1f:70:c5:d1:94:
                    d9:4d:8f:39:40:ae:a9:9e:28:63:9a:b0:29:f0:a3:
                    cf:31:d1:30:a3:ae:1e:85:70:8e:f6:bc:bd:14:76:
                    9a:10:03:bc:aa:8b:55:0a:0f:16:0c:3c:d2:88:41:
                    23:72:1e:31:dc:b7:d9:20:c1:ce:1f:4a:85:3f:bf:
                    82:dd:fd:54:2c:7f:b5:a4:51:e4:3f:ad:19:12:2d:
                    3d:47:ae:34:54:82:b5:6d:16:c5:8a:1b:79:20:1f:
                    23:89:15:65:35:08:d9:2a:2f:7a:9c:a3:e0:af:e8:
                    77:27:59:a1:0e:5d:5b:16:60:c1:77:2a:74:5b:d5:
                    5e:82:d5:86:8d:48:4e:e3:91:55:1d:1f:f7:0c:3f:
                    a1:2c:c6:5f:91:54:77:d7:b7:b0:a6:e5:25:7b:aa:
                    36:2e:e8:df:96:9a:5b:3e:5b:90:d9:71:8e:a7:b3:
                    24:a4:e2:06:e2:5d:3e:a0:0a:ea:ba:53:d6:52:ed:
                    70:71:f7:0c:f9:96:84:b7:6b:49:f4:f7:4b:9b:7c:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:44:53:AE:24:F5:A5:9D:1C:E5:06:77:75:1D:45:77:00:1B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6fa66da2-c0fd-316c-a2c0-5db503aa4e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:ab:9a:6b:f5:d0:33:ed:44:a6:77:f5:68:7e:38:0a:a0:
         00:08:b9:70:9c:db:0b:07:a5:91:ab:7e:e1:d1:2f:b3:ff:c7:
         f3:b0:fe:76:11:74:dd:f3:89:5a:e5:7e:26:97:18:ce:46:c0:
         5f:6a:9b:6d:b2:0d:97:7d:1a:d1:e6:56:90:25:48:f9:1a:2a:
         2a:37:35:4f:bd:55:7c:d9:9b:38:12:2d:8d:f6:6e:5e:e8:53:
         ee:18:b2:eb:25:a9:72:c1:0d:d7:b9:ee:f6:c6:67:ca:5d:be:
         1f:4a:d1:83:a2:e3:69:b8:24:53:40:fd:19:28:75:e9:fc:19:
         de:17:92:62:c3:0f:39:05:70:3a:d9:db:13:9f:51:86:1e:18:
         da:4a:7d:35:1a:a6:92:32:43:ad:b6:a9:3e:7f:68:d7:aa:3f:
         58:76:30:46:32:bc:a9:a0:99:65:e5:ab:63:35:73:72:05:ad:
         03:15:32:26:2d:4e:31:5f:d8:cf:58:c3:06:cd:8b:69:a2:d5:
         5d:60:bb:83:e9:4f:a5:a8:a2:cb:af:38:22:e8:4e:1d:eb:75:
         24:10:30:45:4d:72:a2:f4:3f:58:89:17:26:fc:af:c2:71:41:
         11:b7:4b:18:9e:ab:c8:9f:25:9e:f4:89:cf:be:e8:6c:ca:12:
         c9:12:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:58 2026 by rpki-client