Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7ff4b70b-8ac0-32a0-b28d-c42a2a29df87.roa
File:                     7ff4b70b-8ac0-32a0-b28d-c42a2a29df87.roa (raw, json)
Hash identifier:          l9WJVr+2sX7NEAo2pSt85RZmCSGwpb3nS3Quqih810o=
Subject key identifier:   3E:F5:5D:3E:FE:4B:F6:8E:0C:C5:93:7C:E4:2A:17:4E:44:57:A4:0C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D58482E8ADC04558ADCC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7ff4b70b-8ac0-32a0-b28d-c42a2a29df87.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.186.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:58:48:2e:8a:dc:04:55:8a:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=465d1f23-b236-494b-9b13-98635e476232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:bb:81:c3:fc:ad:d3:1f:03:c3:c1:0d:0e:
                    fc:4e:dd:f9:c1:4e:6e:12:aa:4e:60:43:f6:d6:ab:
                    35:9d:70:35:b2:e4:63:2f:b6:c6:57:af:b1:d5:49:
                    37:a9:b8:5e:18:9e:fa:64:ac:dc:3f:2e:24:8f:14:
                    dc:9b:0b:59:5d:70:68:0a:ce:d8:50:b6:47:6a:65:
                    7e:96:8f:5d:c6:5a:7b:4c:c4:e4:c1:70:2c:23:51:
                    00:0a:78:22:55:6c:c6:a3:9f:ff:85:5d:3e:97:a4:
                    45:29:f9:78:06:5d:65:c4:78:d2:a0:9b:f7:27:fb:
                    79:5d:56:08:fe:4c:84:e3:c3:1f:ab:ee:d5:e4:8b:
                    d3:2d:d6:a4:02:4f:82:9c:25:a9:1b:db:9e:3c:71:
                    3d:f2:ba:ce:95:03:58:ea:06:bf:87:69:64:49:fe:
                    69:26:9a:42:61:d5:35:e7:49:1b:54:03:5b:23:bd:
                    cb:53:7d:83:80:4c:6a:96:78:e4:79:82:bf:df:20:
                    70:73:44:47:0e:bd:35:31:98:98:24:1f:e0:cb:94:
                    39:88:3e:fe:8f:c3:bd:36:4f:e9:39:4f:ba:01:0c:
                    f2:0a:39:44:73:6c:01:aa:72:d7:f2:92:ef:ad:5b:
                    b7:e4:06:d3:73:50:72:02:2d:29:10:33:6e:f4:ef:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F5:5D:3E:FE:4B:F6:8E:0C:C5:93:7C:E4:2A:17:4E:44:57:A4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7ff4b70b-8ac0-32a0-b28d-c42a2a29df87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.186.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:47:36:58:d6:dc:84:57:fb:80:db:4b:f9:c8:fe:12:36:16:
         e0:91:20:cb:e4:cd:c6:d9:05:8d:1e:f7:f4:09:67:29:3d:ae:
         bd:73:e6:15:67:21:b3:ab:5c:6b:94:eb:db:3a:98:1e:79:70:
         d8:33:8b:87:30:4c:99:d1:cf:75:c4:e8:b1:df:42:7e:3e:a0:
         0d:1f:81:43:42:f2:07:70:e4:8d:db:5b:8e:b0:e4:14:c7:d3:
         7f:48:34:b5:bd:22:37:6c:e6:01:73:d1:e3:22:bf:e9:1a:3d:
         54:50:03:bd:3f:80:2e:5b:e0:59:a3:2c:fa:25:da:b4:0d:af:
         4a:eb:e2:ce:33:4b:28:8d:75:1f:b7:a5:1b:94:1a:25:a6:d9:
         94:b4:aa:e4:99:56:cd:89:3f:3b:95:25:42:6f:33:3e:c0:60:
         4f:96:40:02:4b:41:23:fd:a0:7e:b1:3e:73:bb:72:f9:ae:37:
         61:20:14:33:0d:1d:40:fd:4a:4f:3c:71:fc:34:7c:1c:d2:ba:
         6b:5c:7a:e5:ad:c1:98:ae:07:d9:ab:e8:55:dd:ed:18:66:fb:
         b9:70:5a:aa:32:1f:b1:9c:d6:00:52:c0:dd:c7:35:d3:0c:fc:
         c1:bf:db:8d:59:5d:8f:b9:5e:40:19:82:3f:a1:41:44:64:44:
         9b:57:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:40 2025 by rpki-client