Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92b40f14-3453-387e-8cf1-12a423fd260e.roa
File:                     92b40f14-3453-387e-8cf1-12a423fd260e.roa (raw, json)
Hash identifier:          +FUWCNrUPPItcULs06+u4wmBUFvdkPK7hO08gH+Eclo=
Subject key identifier:   18:AA:1F:16:CB:EC:E6:8F:45:C7:23:76:D8:15:E8:0A:87:CE:2C:08
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DEE59481A2A07E83B3C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92b40f14-3453-387e-8cf1-12a423fd260e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.112.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ee:59:48:1a:2a:07:e8:3b:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=698c0d9e-dc8a-4870-bbd0-fee4fe00a04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:c9:13:2d:5e:29:a8:64:fd:1d:83:bf:50:
                    b0:d3:12:2a:e5:57:91:97:e4:c2:ee:01:8c:7e:5d:
                    8d:7d:72:42:26:fd:d0:b7:e8:6a:c2:b7:86:a6:48:
                    13:8c:61:95:bb:a3:52:6b:e0:9c:82:ef:62:72:c8:
                    b6:f5:b4:61:ee:59:d8:c0:f7:25:3a:f8:97:ff:33:
                    bc:02:ea:90:e8:9f:0b:1f:58:4c:a4:3d:97:a0:50:
                    b1:99:c9:7e:6b:44:11:65:60:5e:74:ba:2d:85:64:
                    40:26:ec:59:fc:9c:b5:d1:b2:fd:36:cb:d9:35:0a:
                    f2:7b:83:5c:3f:ac:30:fe:ec:3f:34:68:4d:3d:78:
                    08:63:c0:e4:d0:ca:9e:0a:fa:23:84:91:91:d0:cd:
                    34:08:0d:46:3a:52:b4:aa:42:cd:94:e1:d4:75:c2:
                    3f:d7:22:d0:75:d1:0e:12:b8:fe:f0:d0:63:12:c2:
                    83:62:78:25:d6:35:4c:5e:34:2c:f1:31:7a:49:fd:
                    25:7d:82:54:cd:0e:3b:60:8a:e6:25:de:3f:06:31:
                    0d:0e:66:f4:d6:db:73:95:99:bb:33:42:08:0d:16:
                    34:ce:06:94:27:99:f8:6e:e3:98:37:7e:29:e7:65:
                    0d:62:20:a4:30:e2:e7:5f:4e:41:98:2e:e1:f5:50:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:1F:16:CB:EC:E6:8F:45:C7:23:76:D8:15:E8:0A:87:CE:2C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/92b40f14-3453-387e-8cf1-12a423fd260e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:3c:74:14:2c:b1:62:81:26:e7:d8:ce:77:aa:be:86:bf:82:
         ef:cf:25:3c:45:e1:15:99:d7:f0:bf:ad:07:7e:14:c1:a5:07:
         82:cc:19:82:16:d1:26:dc:f1:b7:13:b7:97:56:3c:d2:e9:a3:
         3f:02:e3:40:69:6e:9e:ea:d6:c6:19:f4:c8:8c:5e:eb:34:95:
         39:6f:9c:8b:b1:a5:87:9d:45:ea:46:28:53:72:83:25:b5:13:
         e8:17:07:f8:cd:d8:2c:cf:0f:ad:fa:69:e2:fa:14:ba:d1:d1:
         47:a2:5b:4c:7b:83:81:25:cf:5e:ad:4d:49:84:9d:ca:88:e1:
         1f:fa:d7:ed:47:48:d4:34:f9:34:91:d2:45:b4:01:bf:c8:80:
         0d:e0:37:c1:5d:6d:fb:c6:55:6d:64:2a:d6:11:af:49:4a:7f:
         7a:bf:90:01:78:73:71:a5:0c:d6:20:c4:d4:d2:c0:c2:29:5c:
         d9:3f:1a:3d:08:04:20:fd:1a:a9:96:cf:d0:f9:1f:fc:c3:ee:
         12:da:28:b1:4a:bb:43:b7:5d:db:fa:0c:a9:e6:3e:e1:c1:d4:
         de:e9:91:c0:b3:80:5a:1d:05:bc:09:6f:03:e9:66:1c:a0:9d:
         6b:05:2b:fb:24:f5:4e:cb:d8:9b:45:7e:43:2a:f8:9e:97:0b:
         cd:19:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:43 2025 by rpki-client