Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dedc9cc5-74e3-3162-9531-32f9528d5355.roa
File:                     dedc9cc5-74e3-3162-9531-32f9528d5355.roa (raw, json)
Hash identifier:          0eJ3QPj0RNIhCzy3ziqDPkpEdsegblzzrwQHvnrqd6o=
Subject key identifier:   BB:B9:2C:E9:3B:90:19:02:47:46:C0:0A:9F:16:F6:01:FD:C2:06:CD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DDAA54BB640405840A9C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dedc9cc5-74e3-3162-9531-32f9528d5355.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.184.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:da:a5:4b:b6:40:40:58:40:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=b9e2e1ee-c1b4-48b2-9d7c-b57477f33172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:21:b4:7c:87:02:b9:e3:59:0b:56:b1:2f:
                    67:f7:46:80:cd:a0:af:d6:02:05:4e:28:ee:ec:9a:
                    ef:00:20:c6:10:60:7a:37:34:12:1f:44:30:c6:60:
                    7e:6b:0d:ce:8a:9a:de:44:11:0f:dd:5c:ce:45:c7:
                    51:de:6d:69:0f:3e:1c:8f:85:14:bf:d8:e0:e1:8c:
                    a3:18:55:1f:45:b3:98:7d:5d:dc:68:18:7e:6a:a1:
                    bd:0d:ba:e7:e0:25:ed:86:48:6a:d0:53:78:4e:55:
                    82:b7:05:2e:9b:6e:8d:d3:99:ba:22:ce:bc:24:df:
                    bd:a6:d4:82:0e:15:87:3e:c2:b2:79:c6:f2:c9:ef:
                    d6:df:a2:2b:d9:08:f6:e0:24:e3:04:86:1e:72:5b:
                    7b:33:c7:fc:fc:91:8c:69:b1:c2:e5:88:bf:cc:39:
                    be:74:78:04:6b:28:02:19:21:2d:b4:d7:f8:bf:e4:
                    fb:ec:a0:25:4f:6a:3f:4f:2c:06:f3:91:88:be:ed:
                    bf:8c:d4:2a:71:ae:8d:ba:a5:e0:ef:05:d7:59:13:
                    08:6b:25:5d:c5:3d:15:a8:2c:80:43:f6:05:9b:e2:
                    26:68:c9:8f:d8:2b:f9:0a:6b:15:17:f4:c1:72:47:
                    6d:8b:e0:5b:21:e0:29:64:1d:3f:3a:17:25:83:67:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B9:2C:E9:3B:90:19:02:47:46:C0:0A:9F:16:F6:01:FD:C2:06:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dedc9cc5-74e3-3162-9531-32f9528d5355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.184.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:f2:8d:37:93:d3:08:73:94:8c:47:9e:bb:ab:01:35:01:
         55:8b:77:f7:78:8c:4b:d7:d3:02:3d:b5:6d:15:2f:b2:a3:04:
         72:5a:96:45:63:5b:36:cf:7b:88:56:65:55:8e:11:df:3c:c2:
         2d:16:c9:cb:9c:09:38:14:7f:7e:8c:78:43:71:91:90:8f:40:
         12:52:2f:1e:59:f5:3a:39:c9:5d:c5:f3:59:6e:4e:51:30:1d:
         59:b9:db:49:35:9b:fe:74:ec:8e:32:75:d7:23:a3:84:93:7e:
         25:b7:69:5d:38:07:cc:fa:39:b0:3a:33:05:27:4d:a0:82:24:
         08:3a:39:f1:fc:80:a5:c3:23:d7:ad:e4:a3:5c:74:88:75:be:
         66:c6:99:af:8d:20:92:d9:e5:d4:dd:d3:54:4b:70:4b:73:34:
         ae:99:8b:bf:ff:ad:9c:2e:94:23:d6:55:1f:21:42:a7:7a:27:
         c0:10:7e:98:54:c0:ef:ae:4f:e5:f3:76:f7:46:13:cf:bf:b9:
         22:7e:a9:8f:77:92:83:02:26:29:45:00:fb:35:a4:c0:fd:19:
         85:32:a6:e7:1d:8b:d1:ac:3e:14:43:45:bf:9f:f9:49:c5:5f:
         6b:22:d1:ac:22:d1:41:7f:5e:83:54:15:40:c0:1a:86:7d:66:
         07:f7:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:14:30 2026 by rpki-client