Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dd09ea6a-c3fe-31cc-8e19-5b3edb727e04.roa
File:                     dd09ea6a-c3fe-31cc-8e19-5b3edb727e04.roa (raw, json)
Hash identifier:          TZkZXfEilljZiK4TbN+YK9AzmifU+CtD4W+aWknnAu0=
Subject key identifier:   7C:6F:0B:EF:A7:0E:DB:D7:36:8D:B5:1A:41:7C:BC:8E:F6:1C:BB:98
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB7793328B1597399A4580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dd09ea6a-c3fe-31cc-8e19-5b3edb727e04.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        68.188.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:77:93:32:8b:15:97:39:9a:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a1bcde7b-89e1-4f49-8e22-f181e66e6cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:7e:b3:cb:29:cf:09:cf:4f:b4:ef:01:73:
                    a9:9c:9b:ba:21:1e:7d:68:4b:e0:16:ab:9a:71:04:
                    23:7f:da:d8:b1:71:a6:58:28:f5:81:f3:50:f1:9b:
                    96:e7:c8:fc:31:59:52:bf:40:88:4c:c1:57:c3:03:
                    33:af:84:15:cd:a5:7a:cb:5e:5e:a8:d2:e7:69:c2:
                    3c:4d:10:96:b7:a6:da:00:ce:77:28:6f:e8:2d:c0:
                    a4:af:56:9f:06:5f:7a:a4:b9:b9:95:ef:d7:79:70:
                    17:80:ca:a8:00:22:f0:be:06:9e:cd:36:2e:31:f4:
                    92:f8:58:3c:73:96:07:8b:ba:b1:17:25:4f:78:22:
                    a9:34:5a:68:7b:89:1e:12:92:6e:c4:d7:05:21:ca:
                    c3:31:42:d2:61:4c:8a:f1:ff:fd:ff:6c:e3:50:30:
                    b7:52:9c:a1:65:3e:6c:46:62:44:2f:01:0b:87:8d:
                    6c:47:ee:60:29:5c:b1:c8:68:d7:2b:60:9b:b7:b6:
                    69:7d:4c:37:a6:5d:f9:d4:56:cd:75:d3:47:54:8c:
                    f2:02:d9:53:e0:c4:bb:03:e9:36:e3:2a:dc:d9:69:
                    f5:51:b6:2d:5d:18:2a:b6:9d:a3:d8:85:b0:70:8e:
                    a0:3b:89:8a:31:f1:aa:4c:14:68:ab:ff:1c:2d:27:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6F:0B:EF:A7:0E:DB:D7:36:8D:B5:1A:41:7C:BC:8E:F6:1C:BB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dd09ea6a-c3fe-31cc-8e19-5b3edb727e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.188.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:7d:35:47:4a:6d:63:70:05:21:4d:f7:77:57:38:eb:15:
         d8:da:48:90:6b:c7:3f:ac:dd:16:83:e3:86:34:b2:af:4d:6c:
         29:64:90:83:ba:42:56:78:8b:27:c3:c4:d7:2f:fd:e4:1e:d5:
         25:98:b2:93:00:63:78:6e:cb:67:b9:16:69:f1:b7:97:1c:5b:
         36:30:f7:2b:71:45:fe:8b:f1:06:e0:6d:7d:f6:bd:bd:d4:10:
         f6:d3:a7:2e:0b:a3:d9:b3:7e:09:ec:e5:35:36:2d:95:77:5d:
         09:87:7c:f3:7e:ff:64:15:94:cc:56:01:b7:7f:e2:f8:1b:18:
         c5:b0:00:0a:ec:64:86:8b:80:15:b7:46:25:81:5e:2d:bb:f9:
         a1:f1:1d:e1:c2:15:0d:41:21:b0:a4:ff:1b:6f:87:b6:65:da:
         f0:f8:4c:12:f8:b9:9f:ec:1c:51:47:0f:7b:7d:9e:0a:4f:e4:
         7c:83:c7:40:0c:5e:a6:d3:6b:c5:3e:4e:bb:f0:d6:37:11:2a:
         f4:1f:13:63:4f:ca:b4:b3:d0:75:ce:b1:e7:55:03:ff:7e:e2:
         91:98:79:25:80:48:4c:56:af:ad:81:1a:f1:17:e4:cf:d4:14:
         51:80:17:b3:f8:a9:90:8e:4d:ff:07:da:b6:7d:42:6f:69:d3:
         58:cd:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:42 2026 by rpki-client