Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db68d262-382b-3070-90f2-dffba31fbb95.roa
File:                     db68d262-382b-3070-90f2-dffba31fbb95.roa (raw, json)
Hash identifier:          pHHJNDJxHocHgUtq7LqAzpSfi/HCcItgodwKtMnD0xo=
Subject key identifier:   BA:9C:9C:A4:3A:C2:94:BB:26:B0:F2:7D:A2:40:EC:D6:51:53:9E:47
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DF9B4865FB0E635BC7E20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db68d262-382b-3070-90f2-dffba31fbb95.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.114.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:f9:b4:86:5f:b0:e6:35:bc:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6c8ec45f-f8b8-47e9-8e49-ebbb9e08259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:d1:a8:94:c1:27:2c:1f:96:35:59:58:f6:
                    a9:07:e1:d7:ec:f3:6c:eb:e7:da:fc:ff:0a:51:ce:
                    cb:a4:a1:50:d5:b7:e6:7c:38:65:18:66:50:0a:fa:
                    9f:68:c3:1b:b4:cf:d3:0c:7b:e2:fc:7e:8f:ee:e4:
                    5b:01:a1:64:0f:cc:b8:f7:45:95:15:77:65:4f:0e:
                    75:da:f4:1b:2f:8b:d8:f8:8d:88:8c:3d:e6:4e:a9:
                    29:47:d0:fe:a5:03:b0:db:41:8b:fe:41:97:b5:dd:
                    b2:d6:39:c9:31:4b:4a:a0:2a:d3:8f:99:18:5d:c8:
                    97:b2:2d:98:e9:1b:46:03:49:29:a0:60:ac:bc:9d:
                    0e:80:25:74:2e:db:9f:10:18:0e:b9:e3:97:78:1e:
                    7e:ac:3e:83:d7:8c:94:68:9c:ac:e5:45:22:f1:94:
                    6a:eb:e3:fb:ae:d1:49:12:78:ae:ec:8e:10:43:a9:
                    d1:e8:66:b3:00:df:44:b5:e8:71:c3:ca:6d:d3:63:
                    c9:9d:5b:2b:08:11:f1:bc:d4:81:c7:df:ba:18:16:
                    ac:96:88:67:88:c1:63:9f:a7:44:38:30:f7:2b:db:
                    36:58:68:88:a3:f4:41:91:c3:59:19:f4:dc:2a:5e:
                    5a:f9:6d:fe:3f:f1:db:62:47:2f:85:a2:8c:8b:a4:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9C:9C:A4:3A:C2:94:BB:26:B0:F2:7D:A2:40:EC:D6:51:53:9E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db68d262-382b-3070-90f2-dffba31fbb95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.114.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4c:5d:73:06:5d:d3:81:48:8e:c0:ef:de:36:5e:5f:6e:cc:
         9f:b1:fa:91:b9:c7:91:a8:db:fb:c7:4e:e6:55:c1:0b:09:c6:
         a1:fa:3d:4a:a0:83:d8:c7:fb:a5:0a:34:04:84:59:e4:24:d5:
         33:07:ea:72:c5:a7:5f:2d:b7:72:93:05:c3:29:01:52:a0:64:
         c4:31:6a:be:55:7b:b5:15:a5:14:9d:ca:46:9d:0e:35:5c:8b:
         74:7d:b4:6a:36:5d:a3:1a:eb:30:13:c2:ce:e9:bd:85:23:1a:
         8a:43:31:93:14:56:4a:1e:1c:84:a3:b3:65:07:b3:dc:89:23:
         45:de:85:a8:36:96:56:33:89:93:fc:a7:c4:03:f9:83:54:66:
         c9:7e:e4:76:72:db:9e:c5:04:65:4e:31:ee:fe:93:c6:5e:4c:
         f1:27:2c:0b:7a:69:f8:fb:bc:55:e0:b7:bd:b2:b3:61:b3:b8:
         49:75:c8:92:39:40:31:83:c8:17:ba:a7:b8:43:9f:76:66:98:
         a8:08:f1:cc:b1:0a:7b:10:cf:f6:e9:15:d6:03:9c:18:9a:01:
         ab:67:5e:0c:0e:f0:fe:b4:d0:54:8c:4d:d6:b4:9e:1b:f6:64:
         70:24:93:66:30:0d:cd:33:db:34:39:8a:7d:ce:9c:15:53:37:
         89:f5:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:09 2025 by rpki-client