Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be187488-45be-3ace-993d-e666f72ada94.roa
File:                     be187488-45be-3ace-993d-e666f72ada94.roa (raw, json)
Hash identifier:          llKlivdz9wNiDcV5IeHMg8kdjytUHDp9UmrJkIW3wYk=
Subject key identifier:   1D:46:E3:72:FB:73:0A:E1:94:74:8A:64:A7:F4:54:33:58:3C:4E:50
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16158BBE2BBFC92AFF23200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be187488-45be-3ace-993d-e666f72ada94.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.184.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:58:bb:e2:bb:fc:92:af:f2:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9ddda0a3-3677-4fea-8745-f09efbd0ab41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:68:2b:55:60:fc:bc:b5:71:bd:59:94:12:
                    60:6a:55:ac:e9:f8:e5:46:c0:9e:b2:b6:45:4c:c2:
                    f7:1c:2e:82:06:53:94:3c:6f:f8:30:41:06:23:b1:
                    ff:af:9a:b7:62:8a:28:94:d9:75:21:30:72:00:0c:
                    ec:bb:8d:99:a9:fe:37:2c:b2:11:64:61:ed:08:17:
                    26:6a:55:d2:5a:97:98:67:1d:4e:9b:f9:c1:88:ad:
                    64:1c:d2:16:4e:e9:3a:0a:96:80:aa:f7:8f:ce:25:
                    e5:a9:e4:30:0b:40:d6:89:65:d3:2b:12:12:35:2d:
                    a7:02:9e:e1:be:49:73:27:5a:fc:de:c0:31:32:ef:
                    33:b3:0c:5a:ac:46:61:db:6f:ef:1d:7b:77:7d:63:
                    41:13:5b:37:f4:65:01:d5:e2:25:52:16:c4:d2:f0:
                    85:ee:90:5e:d7:a1:b8:51:ac:c0:ae:19:84:c7:06:
                    d8:73:58:d1:6d:74:85:c6:91:e6:af:5a:cc:5f:a5:
                    c9:25:40:37:9b:68:c3:86:21:7f:38:0a:32:31:e1:
                    d0:90:a9:a0:e9:f7:8e:54:dd:69:52:ed:b8:9d:de:
                    ec:0b:1f:d6:26:f2:46:57:5c:b6:48:90:4c:29:d6:
                    45:7e:ad:46:ab:79:a9:02:57:0e:c4:e1:12:f6:9a:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:46:E3:72:FB:73:0A:E1:94:74:8A:64:A7:F4:54:33:58:3C:4E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be187488-45be-3ace-993d-e666f72ada94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.184.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:05:ee:59:8f:d3:c3:15:9e:a7:cb:b1:2c:60:32:40:a9:
         94:59:d8:bd:92:eb:f5:06:cf:8b:d1:79:33:fb:54:25:e1:3b:
         8d:fd:d0:4b:2f:73:b4:a3:5a:69:7a:6d:9a:fc:0e:68:20:2d:
         c0:ef:8f:39:32:05:c7:bf:c0:b3:04:38:db:8b:3f:c7:49:6c:
         f0:10:61:e9:5b:1e:51:91:1f:ea:87:e6:3b:8e:1f:c9:eb:33:
         1e:75:8f:b9:31:ce:ba:bb:28:ee:c8:62:17:92:2c:83:29:e6:
         58:09:e1:85:f4:0c:4d:23:f6:68:60:44:c2:7f:43:72:ee:b5:
         18:89:92:ec:a3:99:6b:1e:4b:a5:c4:cf:3d:fb:27:e5:9f:32:
         45:54:b5:31:14:c6:39:dd:59:64:f5:31:af:4e:e2:13:a8:4c:
         68:40:c4:33:40:f5:bf:e2:0b:da:de:38:78:45:a3:64:c7:8b:
         a8:54:47:ad:3b:e2:3b:2c:94:c2:09:25:91:fe:49:e7:d2:48:
         47:4f:99:a8:a0:d3:5c:6c:2a:85:d7:df:a1:50:a6:6c:bb:13:
         06:fd:a2:e9:59:4e:1b:2d:11:c3:22:7f:c5:a6:51:d4:77:2e:
         a7:9e:6c:18:c7:c2:70:82:30:de:21:e7:d9:5b:1a:7c:56:6f:
         0d:ef:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:27 2025 by rpki-client