Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be187488-45be-3ace-993d-e666f72ada94.roa
File:                     be187488-45be-3ace-993d-e666f72ada94.roa (raw, json)
Hash identifier:          U8/bAlRBFegJANdVoVXl6nlRfrSKZ4UjVaS6PIxbQPQ=
Subject key identifier:   14:31:30:94:8A:75:85:D9:2A:3A:6A:ED:D2:A1:B8:C1:71:93:BA:5C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CADA0056D4ED17CE95F614
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be187488-45be-3ace-993d-e666f72ada94.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.184.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:da:00:56:d4:ed:17:ce:95:f6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=0f7488f9-bb16-4461-bd20-2547b11ad8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:44:e7:c8:a4:cf:10:f4:be:a5:2b:d5:1c:
                    0a:39:7b:22:73:59:d6:a1:7b:85:c6:13:7e:34:2c:
                    90:98:80:ff:f3:86:7c:45:45:c6:55:3d:dc:c2:0a:
                    7c:aa:8c:1b:97:00:be:ec:aa:8b:00:05:d2:0e:ef:
                    e5:44:94:df:82:f3:2f:41:8c:a0:8b:93:54:3f:4c:
                    fd:14:65:3f:72:eb:8f:b8:6c:3a:72:d7:87:8e:d2:
                    2c:b5:7c:dc:28:f5:e4:b7:53:6f:32:a9:ad:1a:56:
                    6e:30:ea:4b:1b:63:47:2b:4a:9f:b5:d2:8f:4d:98:
                    08:67:5b:28:7b:57:dc:4b:1e:f4:94:8c:43:c1:9c:
                    cc:97:34:e3:4b:cc:85:46:59:c7:81:12:22:2c:26:
                    49:48:7c:9c:e1:06:39:99:82:f7:49:76:bb:86:d1:
                    7a:0f:78:d8:15:3c:0e:8a:8f:ed:5b:6d:ea:47:f4:
                    f6:64:f8:9d:81:0a:ee:6f:a8:f1:a0:46:f8:9d:f8:
                    c3:94:0e:12:5f:2b:60:e7:5f:18:15:76:88:73:2c:
                    b9:ef:e8:38:e3:99:25:c9:eb:a1:6c:0e:df:76:45:
                    7d:ed:82:8e:52:6c:0b:50:82:43:fe:f7:26:6b:29:
                    f5:7d:d0:15:1f:96:43:5b:7a:5a:0a:6f:e0:e1:70:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:30:94:8A:75:85:D9:2A:3A:6A:ED:D2:A1:B8:C1:71:93:BA:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be187488-45be-3ace-993d-e666f72ada94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.184.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:1d:be:0d:d1:9c:c3:52:ce:eb:0f:6d:2d:e3:b9:29:cd:5d:
         2b:b1:20:49:85:be:47:4b:3a:37:8f:d5:9e:ad:33:98:db:0a:
         75:62:03:ce:f1:25:ea:28:4c:0f:89:b9:bb:5d:ed:dd:b6:05:
         1c:5f:00:68:d4:c5:fe:db:53:f0:ac:5d:44:84:48:2e:93:f9:
         5c:ca:8d:11:e4:53:a6:e9:40:d0:72:57:be:ff:dc:83:09:7c:
         4d:ae:3c:aa:f9:19:fc:ee:59:9b:43:f8:68:0f:19:45:88:fc:
         d6:78:13:2d:8d:63:15:45:87:bf:89:37:79:d4:fa:d3:85:d7:
         55:11:44:95:e4:26:f7:0e:68:59:01:ce:2b:29:1c:64:9c:d0:
         36:f2:71:41:c9:a3:30:f0:7c:0d:26:f5:9f:90:04:02:9a:41:
         20:70:ac:37:b1:34:29:35:4d:cb:53:c3:0c:8e:c9:bb:41:32:
         c6:d2:2a:12:02:55:cb:8e:3a:de:69:b8:8c:64:18:02:11:23:
         dd:47:a1:7d:36:c8:66:d3:3e:c0:32:be:71:67:e0:68:b6:f4:
         e1:f4:e0:1b:54:72:68:25:75:89:0f:ba:a0:ad:22:f7:b6:f3:
         99:ab:a3:a5:cc:27:d3:44:4a:09:3d:3c:53:d7:f0:ee:8c:23:
         f6:24:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:09 2026 by rpki-client