Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72c86630-0765-348b-9fd9-89f2e5e9cbdc.roa
File:                     72c86630-0765-348b-9fd9-89f2e5e9cbdc.roa (raw, json)
Hash identifier:          K+cQcH6DXNtioXBzfgmmNBJGZCYQz3bWH/4fWOnWKpw=
Subject key identifier:   FB:E0:A1:9B:10:6B:9C:64:7C:87:51:BD:33:9A:B2:34:0F:E3:77:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D25727F6CBBEEDC8CA440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72c86630-0765-348b-9fd9-89f2e5e9cbdc.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     1077
IP address blocks:        68.187.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:25:72:7f:6c:bb:ee:dc:8c:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fc546410-60fb-483c-abf8-bf82d5861036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:71:69:96:63:5e:5f:75:05:d2:3e:82:2d:
                    58:4a:09:2f:af:ef:aa:fa:2e:b9:25:8d:2e:0c:b5:
                    89:34:cb:b3:f4:61:be:b5:ca:40:c7:22:f7:07:c3:
                    c3:58:4c:66:f2:a9:ae:be:ca:26:bd:27:63:7c:2d:
                    77:e7:57:8e:fd:d5:2d:2e:de:7e:c9:ed:60:18:0c:
                    71:65:f6:d4:7e:c7:d4:a9:69:31:3a:a4:8e:aa:10:
                    7e:1d:2f:07:8e:f6:8f:bb:c6:80:71:5b:9d:1f:f4:
                    2b:34:8b:51:fd:8a:cb:50:2c:0d:61:3c:41:ea:d8:
                    ca:0b:f7:7c:38:ff:97:f1:51:9b:5a:d5:26:cd:e2:
                    1c:93:f3:75:15:18:8e:78:99:a2:dc:e7:9a:a9:74:
                    d6:91:03:17:74:0e:2c:cf:a6:0a:67:a0:66:24:95:
                    e0:00:99:99:7b:32:f0:3e:ea:8d:20:eb:2a:64:3f:
                    6f:bd:d2:7e:81:3c:19:3b:17:c6:c4:34:cf:9b:ec:
                    42:cd:5b:94:47:83:ad:e2:c8:59:11:4b:ca:cb:2f:
                    81:60:00:f4:26:db:c7:e1:39:a5:49:28:43:37:af:
                    73:df:b0:87:d1:9d:66:12:b9:15:9c:e8:50:d3:c2:
                    ae:fd:fb:7c:f4:07:71:4f:ea:17:f2:23:89:df:75:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E0:A1:9B:10:6B:9C:64:7C:87:51:BD:33:9A:B2:34:0F:E3:77:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72c86630-0765-348b-9fd9-89f2e5e9cbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:41:86:48:dd:14:6f:15:85:94:aa:31:2d:d2:70:56:72:c5:
         e4:ce:62:11:46:bd:dc:2c:7c:7c:51:af:87:32:af:df:d0:14:
         31:57:36:de:44:b0:6a:ed:2a:c6:01:ac:e9:78:c8:44:97:91:
         54:b9:4c:f1:74:20:97:da:5d:8b:c3:30:5c:96:6e:16:0f:dd:
         88:47:b4:9e:9f:81:b3:44:2d:9a:be:97:36:1a:e3:3c:2a:ef:
         0b:ea:a7:ca:e4:f6:65:d7:7b:b2:77:ab:ff:90:f4:13:d1:32:
         8e:ba:0b:3c:1a:34:8a:b4:18:c9:6d:91:a5:2d:f7:9b:3d:94:
         c8:71:1f:7a:22:9f:37:7e:fe:6e:91:dd:02:c3:32:bd:a9:d5:
         f1:75:10:d6:7c:07:6b:91:29:7b:33:50:01:eb:87:50:02:0d:
         b1:60:37:93:5b:e9:c5:fa:5e:69:91:d7:ba:58:35:58:e8:ed:
         67:dc:15:07:2a:68:46:c7:d5:bd:ab:4d:fa:24:9e:46:cb:fb:
         b3:9d:e5:3b:a6:f5:d7:52:4b:a0:14:3f:77:79:68:26:98:73:
         ad:17:b6:40:d0:6c:38:c1:1a:d6:bf:32:7c:e6:bf:f6:60:97:
         8e:cc:28:d0:bb:9b:9f:fa:95:72:35:cf:26:ee:40:3c:32:f0:
         76:3c:c3:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHSVyf2y77tyMpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZmM1NDY0MTAtNjBmYi00ODNjLWFiZjgtYmY4MmQ1ODYxMDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqdxaZZjXl91BdI+gi1YSgkvr++q+i65JY0u
DLWJNMuz9GG+tcpAxyL3B8PDWExm8qmuvsomvSdjfC1351eO/dUtLt5+ye1gGAxx
ZfbUfsfUqWkxOqSOqhB+HS8HjvaPu8aAcVudH/QrNItR/YrLUCwNYTxB6tjKC/d8
OP+X8VGbWtUmzeIck/N1FRiOeJmi3OeaqXTWkQMXdA4sz6YKZ6BmJJXgAJmZezLw
PuqNIOsqZD9vvdJ+gTwZOxfGxDTPm+xCzVuUR4Ot4shZEUvKyy+BYAD0JtvH4Tml
SShDN69z37CH0Z1mErkVnOhQ08Ku/ft89AdxT+oX8iOJ33XfrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvgoZsQa5xkfIdRvTOasjQP43dDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzJjODY2MzAtMDc2NS0z
NDhiLTlmZDktODlmMmU1ZTljYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLsQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANBBhkjdFG8VhZSqMS3ScFZyxeTOYhFGvdwsfHxRr4cyr9/QFDFXNt5E
sGrtKsYBrOl4yESXkVS5TPF0IJfaXYvDMFyWbhYP3YhHtJ6fgbNELZq+lzYa4zwq
7wvqp8rk9mXXe7J3q/+Q9BPRMo66CzwaNIq0GMltkaUt95s9lMhxH3oinzd+/m6R
3QLDMr2p1fF1ENZ8B2uRKXszUAHrh1ACDbFgN5Nb6cX6XmmR17pYNVjo7WfcFQcq
aEbH1b2rTfoknkbL+7Od5Tum9ddSS6AUP3d5aCaYc60XtkDQbDjBGta/Mnzmv/Zg
l47MKNC7m5/6lXI1zybuQDwy8HY8w4g=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:25 2025 by rpki-client