Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edbb50c2-6268-3348-baa9-b20c434727ec.roa
File:                     edbb50c2-6268-3348-baa9-b20c434727ec.roa (raw, json)
Hash identifier:          ncp38KWQm+ldb56JggLelWo8oxXOLrsPvYj/L1cADqg=
Subject key identifier:   CE:87:3C:2C:87:AB:97:EC:0F:08:F8:5A:6D:2D:E1:D3:88:0F:1A:57
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161E854D6FD617D49F39380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edbb50c2-6268-3348-baa9-b20c434727ec.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.112.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:e8:54:d6:fd:61:7d:49:f3:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=343d9d30-98ea-4bd4-b2fe-38ec49af0ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:5c:c3:f7:c6:c7:6a:66:b3:59:43:1f:31:
                    0e:09:87:55:26:6a:a9:50:28:c0:ab:e1:02:a8:a8:
                    a6:11:ca:e5:f4:e5:6d:00:89:f6:71:7f:da:72:20:
                    eb:56:7c:99:4b:4e:6e:5a:4d:44:57:e0:54:8f:d8:
                    79:b1:28:8a:6d:7c:4f:84:85:8c:17:b3:4a:25:11:
                    ef:5c:29:21:0c:85:6f:34:cf:41:6b:98:44:00:f6:
                    02:cc:3c:b8:7e:b4:93:79:1c:98:0e:ac:1a:17:43:
                    7d:0f:9b:3d:c5:1e:be:41:01:52:98:bf:7a:66:5f:
                    87:8b:4c:af:fc:bb:59:63:82:06:62:f2:8d:1f:99:
                    de:be:fe:b8:44:15:a8:1d:d0:6a:51:e8:4d:bd:90:
                    db:38:a7:ee:1b:c9:ac:ea:fc:01:e9:93:21:b4:13:
                    db:d9:8a:75:b1:65:6a:9e:a7:cc:ee:cb:a0:52:a4:
                    b2:18:61:e1:cb:84:f6:41:8c:7b:cc:34:66:7b:84:
                    f1:99:99:8a:b3:df:0f:78:89:fa:b7:e4:de:c7:3b:
                    1a:98:3e:7e:cc:7a:e4:f4:00:9c:d6:7e:f5:df:05:
                    a0:aa:66:0d:87:86:9e:0d:91:46:39:59:96:ba:3e:
                    64:d6:80:9f:68:61:7e:82:27:84:c2:ca:7d:28:e9:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:87:3C:2C:87:AB:97:EC:0F:08:F8:5A:6D:2D:E1:D3:88:0F:1A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edbb50c2-6268-3348-baa9-b20c434727ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:13:40:02:76:d5:49:08:f5:98:ab:ae:c4:80:89:06:c8:
         e3:12:be:bc:ba:0b:3c:3c:07:55:db:63:d8:78:52:fa:f7:8a:
         65:24:2f:df:b5:2e:8b:f0:ec:d3:68:10:0b:56:a5:4d:9d:d7:
         4b:78:64:73:fd:fe:13:58:5a:13:89:58:10:a3:7d:ae:46:17:
         56:53:77:02:b6:34:0a:58:54:58:3d:60:38:66:08:78:42:10:
         e3:ca:37:b4:76:cc:28:06:3a:54:ad:8c:c9:6f:1f:85:5a:e1:
         fd:c9:ad:f7:06:4e:3f:08:99:de:61:30:83:c8:17:b5:1c:7d:
         75:3c:2d:13:1f:f4:6a:67:52:5c:1d:88:61:4b:3d:11:8c:3a:
         ce:77:16:b3:78:0f:9f:80:8a:4d:b6:a9:fe:99:3a:d2:55:7f:
         b8:b3:50:e3:b7:76:48:d6:ab:95:9e:fa:19:8e:d7:db:e3:75:
         d4:de:68:8c:29:91:bd:a0:54:3d:8f:82:7f:af:37:7f:bc:42:
         23:8e:b0:10:de:2f:61:40:86:1d:c8:e1:13:6a:d8:04:b0:e5:
         89:13:e0:d5:79:92:b0:0b:34:14:43:e3:be:7b:60:6c:85:14:
         d7:60:f6:de:2b:00:a0:6b:47:0b:2c:dc:05:9a:82:76:79:63:
         ea:20:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:43 2025 by rpki-client