Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa
File:                     be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa (raw, json)
Hash identifier:          f++DmbRHkLVtNikSWhj+uxDAahtx5YmLVtGkTKm9q5Y=
Subject key identifier:   FF:F3:DC:0E:8A:0F:15:05:B1:66:56:9C:E6:77:AA:D3:F4:19:79:1B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB80E46C441D7A3A238160
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.189.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:80:e4:6c:44:1d:7a:3a:23:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=0641f3d1-9122-46df-889c-7b7e93d2cb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:7a:12:69:e1:97:ce:1d:6b:b6:d9:51:46:
                    12:61:53:4b:42:8a:e7:73:fa:30:b1:24:af:8a:f3:
                    fd:df:87:b2:cb:8f:2d:82:a5:ef:05:ba:85:9b:1b:
                    a4:ce:0a:87:05:c8:da:66:3e:a7:42:b4:5d:60:a9:
                    d8:e4:74:74:dc:1d:9d:95:55:c5:fc:c5:2c:4f:5c:
                    64:b8:c5:9c:99:8c:3a:52:8e:7c:4c:d2:13:25:6c:
                    7e:2d:ed:e9:cb:56:3d:96:1c:3c:5c:32:b6:88:e4:
                    e6:4c:5a:69:71:ae:b3:63:a2:1b:7b:6c:72:e8:78:
                    5b:38:78:d8:d9:cf:26:09:2f:34:0b:9a:a9:1b:93:
                    69:29:b2:b5:9d:bb:46:7d:0c:5c:e5:8b:a8:40:3c:
                    f8:a2:34:75:35:6c:89:c1:2b:13:7e:1c:98:0b:03:
                    dc:91:f8:70:ff:9d:c2:09:68:6b:b3:ed:0c:eb:79:
                    2e:54:b2:bf:3a:c4:6e:92:4d:7c:28:4c:a4:5f:71:
                    45:be:23:18:a4:49:bc:55:37:0b:4f:99:d4:d4:87:
                    2d:67:82:07:1f:19:4f:92:bd:42:82:34:0e:67:07:
                    e9:ad:98:86:e3:97:bb:ac:07:f2:ee:b5:ba:ec:c5:
                    61:ec:60:41:d9:63:bd:a4:b8:d5:6b:3d:5d:5f:84:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:DC:0E:8A:0F:15:05:B1:66:56:9C:E6:77:AA:D3:F4:19:79:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be5f9b80-cca9-3591-b987-b1e17c5d2b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.189.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:3f:6e:ce:10:c2:13:37:7e:1b:a4:ab:1c:bf:0d:d8:ae:be:
         a4:a4:94:29:e6:10:64:a8:ab:72:88:a2:3d:16:df:38:91:28:
         6b:c1:4b:16:14:00:2e:65:d4:1e:e7:d6:35:82:04:b4:c6:07:
         fb:19:ad:32:31:e5:1e:b7:76:d2:7e:11:d7:8e:7b:14:a0:cf:
         4e:3d:cc:37:71:9f:c3:6b:ce:ff:f9:a4:bc:ef:dd:26:8d:3a:
         b2:f3:00:5e:d5:ad:8e:9a:69:a7:68:9d:0a:89:cb:f4:ac:2c:
         f5:c6:df:eb:7f:e1:f2:0e:9a:49:6b:6d:92:a4:0a:94:17:d7:
         0d:11:3e:a9:cb:30:56:cf:f8:aa:c2:e4:1e:ee:7c:b9:08:f7:
         6a:19:1a:91:d8:93:7e:79:11:0d:41:a1:82:48:f1:48:39:26:
         a3:19:c6:17:cd:5c:ed:a7:d9:b2:1f:83:ba:94:41:00:40:1b:
         ad:7b:81:e7:c5:04:98:c7:75:08:9e:c2:55:16:1c:3c:47:f3:
         a5:15:36:c3:75:f3:a1:ca:3c:fe:42:8f:3a:27:d0:51:2b:93:
         99:18:03:4c:dd:83:8a:8c:bb:25:5c:a3:e3:27:ca:cf:48:37:
         b5:41:01:24:d7:c7:1b:fd:db:50:2f:6d:9d:26:0e:1a:33:7a:
         b0:18:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:57 2026 by rpki-client