Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8fc51b51-0702-3515-a2dc-5d584b53d4a9.roa
File:                     8fc51b51-0702-3515-a2dc-5d584b53d4a9.roa (raw, json)
Hash identifier:          n++zidnz+QO6hKQFjb2loGpxKu1Mo45bixn8kZWPp2M=
Subject key identifier:   2F:B3:17:B2:6F:20:A9:97:75:7C:B7:DC:1F:ED:17:EF:1F:5E:BE:25
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E01127FE9822E365A6640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8fc51b51-0702-3515-a2dc-5d584b53d4a9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.117.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:01:12:7f:e9:82:2e:36:5a:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6adaef84-4cb3-41d3-950d-2b4c1fc95fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a7:a4:19:5f:70:f3:e0:75:fb:40:f8:de:0a:
                    0d:c7:9c:fc:06:d6:0a:64:d2:4d:08:11:db:9f:56:
                    59:ff:73:ec:73:bb:93:c6:6e:65:b1:51:92:b8:05:
                    fe:db:ed:73:b0:3b:24:69:b0:5a:8a:1d:e4:3b:0f:
                    70:a9:77:d2:56:8f:28:1f:07:5d:d2:da:84:27:11:
                    47:df:bc:4a:6a:08:8b:18:90:17:50:ed:4c:fe:9e:
                    2b:fc:35:1d:ae:9c:7b:13:45:8f:0e:6d:56:29:09:
                    d2:1d:63:fa:a5:a3:c1:09:35:b4:bd:fb:c8:cf:87:
                    04:36:da:f5:4b:6f:f4:9f:9d:8b:ec:d2:51:11:2b:
                    e8:a3:eb:2b:e3:db:cf:31:ef:6d:a5:7c:1d:c4:ee:
                    a9:95:77:a9:60:61:86:2e:bd:1d:78:6b:6c:78:e1:
                    44:17:32:bf:5b:63:cc:53:8c:c3:55:7d:7c:d7:b2:
                    00:4e:91:35:6a:23:02:5a:86:f9:1c:6f:ae:be:48:
                    f0:bb:e1:e7:be:cb:08:b1:0f:fd:50:44:29:d6:33:
                    61:54:14:cf:b1:79:a9:48:33:ce:96:8a:42:7b:5e:
                    b7:8f:b9:9f:6d:f7:83:d9:21:6b:01:98:7f:fa:1f:
                    1b:ab:a8:74:85:42:ca:ac:77:74:9c:33:b8:f7:93:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B3:17:B2:6F:20:A9:97:75:7C:B7:DC:1F:ED:17:EF:1F:5E:BE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8fc51b51-0702-3515-a2dc-5d584b53d4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:8b:db:ca:a3:e4:a2:f3:46:d1:5e:a4:ce:9f:03:8f:d2:
         bd:b3:d0:40:ce:1b:da:d7:63:d6:98:71:14:f9:45:95:7e:e7:
         fa:23:21:16:83:dd:d5:60:32:49:ed:82:a3:c4:f0:34:c9:fb:
         0c:63:25:79:c8:32:38:40:8c:7d:8a:34:b7:3d:44:28:62:59:
         1a:8b:08:83:03:32:f3:cd:17:0b:6d:38:8d:c6:4a:e9:ef:a9:
         5d:78:2c:db:7f:53:e0:7e:07:ca:03:e2:f1:87:3a:d2:ff:78:
         47:5b:a7:9b:aa:ba:e8:c6:b8:39:a2:de:c8:b0:32:f9:6b:b9:
         69:1e:6f:93:1a:61:a0:bb:c7:8e:24:57:97:30:74:90:b8:fb:
         50:1b:60:37:68:3a:70:a7:e7:ee:57:72:44:1c:bb:63:94:0d:
         0e:c6:ed:28:78:30:78:24:47:47:97:a5:d9:4c:5d:d6:78:cd:
         14:22:c2:d8:8b:97:e9:31:c5:fa:48:17:7c:6a:d3:3c:82:d8:
         88:8f:a3:08:36:04:d7:59:8b:47:97:86:f3:bf:89:2a:45:1b:
         2a:84:8a:63:07:45:92:f1:0c:f0:bd:2f:0b:9a:84:fd:36:49:
         2e:76:04:bf:a7:1c:1b:94:88:ff:c0:31:c6:2c:7c:f2:8e:49:
         a7:9e:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:07 2025 by rpki-client