Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8e8f808-b479-3232-b581-054082683bbf.roa
File:                     a8e8f808-b479-3232-b581-054082683bbf.roa (raw, json)
Hash identifier:          CkiMEyFySK16wwprE2xhpl1rfJccBiqpiHtmRaIrcVY=
Subject key identifier:   9A:CF:14:1E:FA:3B:C8:33:37:E1:EE:4E:13:3C:9A:8B:5A:E9:BF:37
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D5ED3CAB609101FDB2B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8e8f808-b479-3232-b581-054082683bbf.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.117.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:5e:d3:ca:b6:09:10:1f:db:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=593dbfbe-a08e-46be-b038-439c85cb1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:a6:02:e7:8f:65:75:35:12:39:37:e1:1b:
                    20:ba:fc:88:ec:1a:92:a5:cd:be:d3:6f:8f:89:27:
                    da:cc:0c:31:b0:07:f3:3d:63:2c:9c:bf:01:a9:5e:
                    f6:67:b0:27:5f:24:46:4b:6e:a4:fe:dd:27:50:ce:
                    ff:7e:40:72:ef:70:c5:03:94:30:95:c7:54:5e:4b:
                    ff:de:00:7d:b9:f6:b3:3a:63:70:c6:92:d1:ab:ff:
                    62:1c:39:2a:ce:4f:4c:b7:21:64:30:95:ee:e4:8c:
                    da:a8:e5:05:bf:35:e5:16:3b:64:10:e2:02:67:71:
                    a5:75:a0:c8:9c:c9:e1:a1:8a:ab:c2:b7:19:7c:22:
                    d5:0f:12:05:49:ee:6a:23:06:5c:25:34:01:0e:45:
                    0b:6f:eb:5c:7e:c5:cd:2a:c1:18:9c:23:08:e2:c3:
                    f6:49:c0:ee:48:23:15:cd:32:45:9a:64:bc:bd:20:
                    57:ff:d9:dd:3c:7b:d9:c6:94:e9:31:02:ee:d7:c9:
                    32:87:30:70:34:7f:19:8f:c1:ea:53:e7:72:42:98:
                    68:a5:c1:0c:c2:20:58:3c:51:5e:6c:a7:7d:4c:e4:
                    76:93:35:b3:39:82:90:1f:46:76:9a:73:52:68:d5:
                    ac:24:7e:bc:4a:ea:4c:3e:f8:9a:15:be:82:68:26:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:14:1E:FA:3B:C8:33:37:E1:EE:4E:13:3C:9A:8B:5A:E9:BF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8e8f808-b479-3232-b581-054082683bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:2f:8f:8e:03:aa:44:10:53:ba:30:96:54:2b:dd:0a:e2:
         f0:29:40:96:03:0b:1e:b2:b6:14:b8:48:bb:94:63:7a:8a:5c:
         fd:b0:a8:05:b0:4e:3f:f2:aa:ac:50:58:0a:88:fe:56:fe:a2:
         cf:fb:b4:2c:22:56:06:f1:5d:41:9e:11:70:00:f4:0a:9f:9b:
         bd:59:fa:e3:d2:d5:45:60:c9:50:73:32:21:a5:64:cc:bf:75:
         d1:05:a5:33:3d:78:c9:c2:f5:d8:fa:6f:3e:a6:73:21:15:23:
         b3:93:fb:5a:66:3a:24:6d:ae:c0:8a:17:bf:0e:d0:85:72:d5:
         d1:f3:2c:3d:2a:75:69:fd:d6:e5:61:2e:0b:ad:97:0d:c6:49:
         af:8c:de:6f:fd:bd:63:8c:23:b8:7a:75:00:e6:35:fe:62:e3:
         1c:75:cb:06:82:73:3b:2c:a9:c0:1e:2a:dd:ea:92:63:46:4d:
         40:74:a0:6f:9a:a4:c4:79:31:e1:51:66:58:05:e4:c1:80:d6:
         50:bc:7c:2a:bd:51:1f:71:93:40:39:85:a1:36:45:7f:b2:3d:
         b2:6a:95:55:8c:04:21:9c:7c:7f:e0:39:c3:56:c5:12:d7:03:
         dc:81:52:26:80:16:53:b5:7e:4a:39:8b:3d:f5:04:80:1f:56:
         b3:69:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:17 2025 by rpki-client