Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b234a250-ad13-38d1-a15c-bbe3b5d18ce2.roa
File:                     b234a250-ad13-38d1-a15c-bbe3b5d18ce2.roa (raw, json)
Hash identifier:          799vjhB0fHIbZytjoQIxow0dRXDUywKFrDFwM+o4s/E=
Subject key identifier:   58:E5:54:17:50:47:EC:19:4A:E4:90:14:E2:D1:F9:A4:65:E4:F7:6D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DFF9F3108DE38BF0C6C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b234a250-ad13-38d1-a15c-bbe3b5d18ce2.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.116.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ff:9f:31:08:de:38:bf:0c:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=27177fd2-6dd3-451a-9b28-2fdd26df713a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:d9:62:08:b9:d1:d0:af:e9:a8:a9:ac:48:
                    13:86:00:49:ed:5f:0a:c7:3f:51:f2:49:f4:dc:f5:
                    3e:50:52:14:92:eb:30:1d:80:60:21:1b:25:e8:86:
                    d1:8e:67:e2:62:90:9c:fa:cb:a7:5d:fa:8b:19:dd:
                    d0:26:e7:f9:02:05:82:0e:93:e1:9f:e5:91:44:0b:
                    ea:7a:c5:91:b9:92:16:38:83:b7:17:c8:d8:69:d0:
                    35:46:54:e9:d4:50:e5:aa:24:36:8f:ca:e7:37:26:
                    8a:f9:db:e3:84:70:bd:08:8d:2f:8f:ab:35:ef:99:
                    a4:3d:03:c0:47:6a:91:05:04:33:2c:26:78:87:15:
                    5e:f1:3b:3d:a8:b3:6f:ae:8b:46:ff:4e:3d:01:fa:
                    24:b7:d0:7f:58:29:cd:4c:da:6b:a2:78:f7:cd:8d:
                    64:72:f2:c5:6b:15:34:97:c3:94:83:e2:64:70:71:
                    99:10:99:b2:7f:92:45:bf:84:01:8d:61:e6:93:87:
                    c1:c1:71:22:b4:57:99:9f:86:da:8c:23:b7:5b:32:
                    55:69:38:d2:1d:57:ee:62:5b:ca:79:ea:c1:95:ae:
                    67:ba:b9:41:ad:8b:58:82:94:41:22:14:4e:be:10:
                    6b:88:fd:83:1d:a8:fd:2e:ad:08:70:bd:7a:6f:42:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E5:54:17:50:47:EC:19:4A:E4:90:14:E2:D1:F9:A4:65:E4:F7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b234a250-ad13-38d1-a15c-bbe3b5d18ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.116.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8f:8d:b0:41:23:60:5c:ed:81:4f:1f:30:65:1a:8b:7c:61:
         8e:65:2e:50:2c:08:3a:0f:56:7a:4d:1a:d0:1c:95:51:28:63:
         74:26:f0:b3:7f:98:6c:e6:53:8f:5d:26:e3:ff:73:3c:86:71:
         7d:cf:9a:68:7b:da:71:f8:cf:29:19:d1:90:46:55:ac:75:95:
         ff:8b:c9:97:5e:32:9b:38:8a:35:35:bc:9b:13:e8:e6:e7:d2:
         c3:46:18:3b:32:31:73:07:c0:e6:c4:50:0b:bc:cb:47:36:3d:
         1c:f7:1a:25:dc:2d:ef:f9:aa:6b:80:6a:ed:35:07:40:eb:d7:
         95:aa:4e:b4:a7:11:f8:58:3e:7d:a1:38:1d:8a:e2:0e:37:76:
         46:50:3c:cd:0a:b1:e6:25:b4:00:82:5b:0f:04:e3:47:d2:49:
         1e:16:dd:51:e9:e1:e4:e8:a5:60:01:53:8a:91:2c:43:b8:ae:
         b2:9c:64:91:c7:82:1a:d6:57:17:e7:0d:37:fd:60:4a:20:57:
         fe:ca:09:8b:62:38:c3:d4:90:97:4e:27:5f:74:16:10:a5:be:
         45:ee:15:79:14:0b:ac:39:62:8f:d6:07:b5:c2:6f:4e:c9:42:
         99:3f:55:e2:eb:bf:db:81:dc:43:37:2d:4f:dd:c5:7c:4c:c3:
         3b:9f:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:06 2025 by rpki-client