Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7ef7e595-6d5e-3161-8528-8f62941e3f6c.roa
File:                     7ef7e595-6d5e-3161-8528-8f62941e3f6c.roa (raw, json)
Hash identifier:          u1qkOEUmcOaMtHSY+IJVK7Xgke2DAst1/wDpMvDr4Kw=
Subject key identifier:   C2:84:8E:1E:03:00:A6:C4:73:E8:10:07:CB:9C:26:33:A3:B1:8E:BB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CADF07DB67292B30579BC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7ef7e595-6d5e-3161-8528-8f62941e3f6c.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.119.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:df:07:db:67:29:2b:30:57:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b433327e-8dbc-4c50-82aa-5943cf391015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:28:59:d5:1b:8e:66:1d:cf:7b:0a:a5:fe:
                    69:cf:f0:76:7e:03:39:10:ad:1a:62:37:7a:96:10:
                    b4:e3:bc:58:01:3d:c0:ce:aa:49:8e:57:5f:70:00:
                    b8:29:51:7a:0f:76:8c:4c:e9:6e:61:6f:51:dd:a4:
                    e8:b6:b1:5b:43:a5:95:53:a5:47:fb:6f:07:00:66:
                    7a:fe:d6:33:6f:a6:ec:db:44:21:73:39:95:c5:b3:
                    9e:75:10:8d:56:66:e6:d9:b6:98:47:09:15:dd:fc:
                    21:bd:11:97:75:53:db:62:b8:47:32:3f:8d:74:70:
                    1e:1a:c8:95:73:a1:45:5a:bd:50:bf:ab:3a:55:2a:
                    19:d0:a8:01:f6:9e:13:78:86:4f:17:4d:4e:73:37:
                    fb:80:27:b5:f0:cc:c0:a5:f5:81:9f:2f:d9:b3:03:
                    53:bd:7d:45:20:7b:3e:ff:2d:e5:a3:60:3b:12:bc:
                    54:d9:2b:61:98:93:4d:24:cd:ca:ae:e3:f6:4f:3a:
                    69:55:f5:c8:71:ff:92:be:b2:0f:b6:d9:49:4a:26:
                    bc:53:9c:3d:79:bd:7a:d7:32:f5:44:40:52:b5:ac:
                    6b:d1:62:05:64:57:ac:58:f7:9b:79:ce:3f:cf:cc:
                    5d:02:b9:e9:d2:8f:3f:5e:4e:43:14:c5:40:9c:76:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:84:8E:1E:03:00:A6:C4:73:E8:10:07:CB:9C:26:33:A3:B1:8E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7ef7e595-6d5e-3161-8528-8f62941e3f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:1f:dd:3e:c0:59:a6:a0:86:b4:25:40:a7:a9:15:26:17:
         ee:63:fe:19:4a:51:8a:2a:48:5c:4f:8e:72:52:48:cc:ce:c7:
         13:58:9c:ca:16:c4:7f:48:ca:26:d2:ce:61:c6:34:d5:39:65:
         2d:9b:a7:90:d4:58:3f:a7:18:b4:a9:15:e5:3c:3b:6d:ea:50:
         57:60:1b:66:9c:04:39:a9:5b:a7:a5:0a:85:f9:ed:b0:da:de:
         9e:6b:94:60:73:45:67:4e:5e:f0:67:05:1d:21:84:dc:a9:22:
         7e:e5:f3:03:bd:e0:1d:76:52:a9:12:49:9b:5a:f7:5f:dc:61:
         ab:9c:50:9a:89:a9:b6:e8:af:e4:9d:a1:07:22:d5:de:1e:ce:
         09:c9:b8:80:e9:87:6c:4f:99:a3:ce:97:43:d0:1c:7c:58:76:
         9e:ea:eb:d3:c2:9c:fc:97:62:ec:2a:f8:53:ea:ae:2c:ca:88:
         07:24:a6:f0:f7:49:ae:d5:8c:14:e1:6a:26:21:c9:cd:52:58:
         53:96:f6:c1:ce:5a:45:db:c6:d2:19:c0:f2:30:44:f9:13:2c:
         99:2d:c8:52:ce:49:3e:94:a8:95:c9:8f:e7:43:d2:c3:c4:06:
         6e:62:bd:02:aa:0e:07:f6:b0:61:9b:c3:08:3e:df:54:38:c2:
         ac:d1:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:47 2026 by rpki-client