Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e07e945b-a153-3f15-9be6-98001971d8ac.roa
File:                     e07e945b-a153-3f15-9be6-98001971d8ac.roa (raw, json)
Hash identifier:          l1VVmr4QpbJsYqqYDYsZeiJnQwwISDUvr5D42JPs1WY=
Subject key identifier:   90:92:1F:6B:95:25:1B:4B:3D:95:1B:8E:EB:57:3C:D7:05:44:29:4D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DF7FA35BF0EF025A12C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e07e945b-a153-3f15-9be6-98001971d8ac.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.115.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:f7:fa:35:bf:0e:f0:25:a1:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=904f16ea-831f-417d-bd9c-363c016ac1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:df:68:68:91:70:17:e0:6b:80:83:fb:93:17:
                    15:f0:1c:5a:dc:63:bb:09:ee:aa:cf:26:78:8f:d6:
                    82:4f:47:5e:23:cf:f7:cc:f7:80:0d:2b:be:05:1a:
                    0d:ee:7e:c3:0a:ce:e7:4b:cb:94:b6:98:f7:17:83:
                    a0:0d:39:df:b0:98:a0:eb:ed:6a:2e:e8:0a:a6:61:
                    04:d2:44:b2:2e:b9:d5:eb:79:b0:32:83:47:4e:a0:
                    60:ca:c2:14:e0:1c:65:8f:ae:40:a1:11:cd:a3:22:
                    0c:ff:45:b0:74:4f:e5:72:16:35:1c:ab:ed:7a:78:
                    38:c0:99:94:f7:be:65:0e:7b:07:08:e7:70:cc:3d:
                    b2:d3:e0:73:05:9a:e9:32:3f:c3:26:10:86:4c:64:
                    e0:6c:1b:c4:f8:d1:82:6c:5e:8e:30:2b:3e:46:42:
                    53:ff:1b:e8:af:66:37:f0:2a:22:35:ae:81:f4:8c:
                    f9:38:69:bf:98:82:8f:c1:9a:ec:79:f1:34:7a:3e:
                    b6:98:10:f7:3c:58:ad:e7:dd:6b:89:63:2b:18:bb:
                    5b:43:5f:45:88:b5:e1:b9:12:ea:a7:8f:fc:61:90:
                    45:ce:e8:0b:54:2d:b6:c1:85:60:81:95:ae:e5:94:
                    e0:e1:c6:33:27:71:cc:be:2d:cd:91:07:7c:7c:f8:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:1F:6B:95:25:1B:4B:3D:95:1B:8E:EB:57:3C:D7:05:44:29:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e07e945b-a153-3f15-9be6-98001971d8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:3f:a7:19:36:8e:c9:4a:24:65:b7:bb:b6:0c:1d:19:c5:67:
         72:55:46:8d:65:5e:8b:69:54:6e:ec:57:f6:61:b9:33:99:b3:
         1f:c2:fe:f1:ce:c2:db:be:82:53:d2:44:22:50:26:bc:5e:1c:
         15:35:fb:dc:e7:cb:98:78:2b:22:ef:63:c2:99:ca:75:00:9d:
         cf:a6:09:11:33:64:5f:dd:f1:58:4a:e2:7d:3b:59:c5:38:6d:
         f8:0f:c9:65:1e:65:27:3e:4f:c0:a4:45:37:a6:4f:7c:95:bf:
         a2:96:f3:7e:09:8c:7b:0f:b9:ea:aa:3c:12:6f:30:71:a3:a5:
         7a:ef:4a:11:4f:42:81:94:6e:40:b1:fa:05:a8:cc:0b:f6:2a:
         6f:dd:01:4b:e0:c9:9b:01:57:80:d1:a2:37:2f:a6:a7:bf:d6:
         ca:7a:e8:c4:7a:a4:53:54:35:8f:09:ae:7d:5d:3e:c6:69:d2:
         6c:64:57:a6:ed:2e:7f:5a:92:b7:7a:72:05:1f:11:3d:1c:35:
         6e:28:5e:65:29:8e:1c:2d:bc:40:ec:b4:23:55:af:ac:a1:5c:
         30:63:25:ac:38:e7:0b:3a:a4:1b:29:40:b3:51:1f:df:3a:66:
         79:79:bc:bb:02:5b:94:0a:f4:17:c1:f6:68:cd:9a:f6:ae:f0:
         37:63:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:50 2025 by rpki-client