Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db209cd-dbe3-3cfc-b2b4-50aeae25f357.roa
File:                     9db209cd-dbe3-3cfc-b2b4-50aeae25f357.roa (raw, json)
Hash identifier:          RBHFIyhIyu20sPgJMy3pxZcxCHRvbm9vMK4DBCMk88Y=
Subject key identifier:   F2:58:64:1B:AC:D1:47:E4:AF:9C:BA:70:F8:98:DE:5E:B4:46:80:9F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CADAC522CE3BE7FAEDDD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db209cd-dbe3-3cfc-b2b4-50aeae25f357.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.185.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:da:c5:22:ce:3b:e7:fa:ed:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a9408b0e-2ea9-4403-a8bd-6240071677fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:90:57:8f:fa:f9:a4:ec:22:c5:34:fc:0d:
                    c6:96:f8:da:05:11:53:05:c9:5c:6a:58:64:40:f2:
                    0e:92:65:f3:3e:ff:1d:a3:c0:c5:d4:a2:20:9f:0f:
                    29:d2:a1:81:74:09:e6:d7:d4:01:23:3b:b2:a8:3c:
                    9a:52:e2:c3:c5:54:92:a4:cc:75:28:90:d9:70:26:
                    98:04:9c:4e:7a:b9:21:f2:f1:42:84:c5:ae:a0:19:
                    c5:1d:7e:52:55:6c:24:96:f4:15:af:db:dc:5c:bd:
                    03:10:4a:e0:96:43:87:7a:93:82:fd:fc:54:30:f6:
                    f1:a5:1d:6a:18:37:ca:16:eb:dc:e6:ac:0a:f4:52:
                    bb:d0:3a:ca:3d:1b:ea:5b:16:e6:f1:73:1c:97:91:
                    84:8a:b0:d1:96:13:dc:25:2e:e0:e5:d9:31:f2:d5:
                    c8:d3:dd:c6:32:cd:9e:59:5e:56:32:f4:d8:c5:77:
                    47:e1:41:6c:58:e0:14:63:c8:27:1b:de:36:10:3e:
                    70:30:5c:dd:f1:4b:aa:24:b6:53:44:9c:64:e5:c9:
                    dc:c2:39:d2:4f:c2:cd:26:a8:11:59:8a:44:1e:f2:
                    05:eb:85:21:25:85:47:76:1d:f3:7e:ff:e0:a2:22:
                    34:c9:e6:ef:76:9e:b5:60:9a:42:4c:cb:8f:6f:17:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:58:64:1B:AC:D1:47:E4:AF:9C:BA:70:F8:98:DE:5E:B4:46:80:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db209cd-dbe3-3cfc-b2b4-50aeae25f357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.185.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:32:00:cc:7e:eb:6f:a7:33:1d:e3:4d:66:0c:ac:3f:c2:
         af:4d:55:a5:7d:c5:cb:3c:b8:8a:82:ac:6f:c6:0b:2c:ad:09:
         d9:04:a3:eb:f0:75:20:ed:75:29:b5:c6:b5:40:09:be:72:cd:
         b5:15:1e:65:ba:c5:ca:a8:2a:cf:71:bc:67:ac:26:04:d5:23:
         69:79:66:bb:02:48:d9:d7:cc:c3:3a:41:53:c3:d7:f2:97:84:
         20:87:58:9e:29:05:d4:b7:84:04:dc:b4:28:28:16:65:a3:74:
         be:3a:6b:68:14:3f:4c:e8:21:29:48:5b:3e:3a:6f:d8:39:5c:
         20:23:27:aa:9c:60:84:bf:ca:75:15:ab:23:72:e2:28:fa:65:
         7a:66:d5:1e:96:51:e1:54:64:50:54:9b:01:5f:a5:37:b4:fe:
         ed:5a:88:5d:e8:4a:98:07:7c:1a:d6:eb:82:fd:a2:f4:a3:e3:
         32:3f:47:3d:84:a6:07:d1:7b:a7:97:98:ea:ef:7e:f5:7e:cd:
         54:d6:de:09:4a:99:c5:e9:cb:6f:7f:95:64:1e:aa:2c:12:79:
         9e:65:56:d3:96:71:60:c1:22:4d:ba:a5:35:13:ec:d5:83:a2:
         53:14:7b:93:32:b9:91:d4:6a:79:60:c7:43:57:e5:35:e5:9f:
         49:0d:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:04 2026 by rpki-client