Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a2f8240-ff02-35cb-b260-f747bae4db00.roa
File:                     1a2f8240-ff02-35cb-b260-f747bae4db00.roa (raw, json)
Hash identifier:          OtWbPrUrvrSNaVWxGdN5SFqmR1IQZI6cZ9geuzC24Ks=
Subject key identifier:   54:F5:1C:3F:3F:8C:29:03:DA:33:44:2E:23:09:30:AF:61:49:97:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3729638E1720137D2701E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a2f8240-ff02-35cb-b260-f747bae4db00.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        68.191.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:96:38:e1:72:01:37:d2:70:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=650a23b6-700f-4c7e-a438-6d9c378f92e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:c6:af:76:fe:45:e8:ac:c0:e5:f7:28:d7:
                    76:e3:c6:55:89:62:48:e4:22:41:49:ae:6c:99:01:
                    53:b7:1f:3d:49:83:ed:12:16:bd:5c:8b:49:ca:2b:
                    3e:d7:ee:68:47:78:a9:31:88:1b:42:38:2f:3c:d5:
                    01:0e:70:b6:25:26:92:18:a1:b8:e1:4c:39:3a:5c:
                    7a:ff:8e:8d:18:72:77:1c:16:6d:68:5c:de:bb:f3:
                    15:7c:9e:33:33:59:db:d3:65:1a:04:02:88:d1:3d:
                    b4:04:32:81:43:b4:5f:7a:75:f4:fd:b2:43:21:1a:
                    ca:4b:5a:46:0d:8a:e5:a8:83:e5:3c:84:71:81:58:
                    ea:ef:ff:ce:e2:64:62:9c:37:6a:08:1a:b9:d3:fc:
                    bd:af:92:3a:92:00:80:6b:b2:75:f4:b8:d7:20:c9:
                    90:7e:bc:79:e5:23:5e:ea:8f:91:e2:9b:cf:9a:b3:
                    02:e8:f6:fc:d0:40:10:8b:ea:24:39:d2:0b:1c:69:
                    0b:6c:38:96:fd:45:e1:5a:05:7b:b9:17:17:7f:a1:
                    f2:39:ff:8d:fb:ab:9a:00:7c:f6:c5:84:a3:29:1f:
                    d2:a3:5a:a3:59:31:c8:9c:6c:d2:ff:f9:74:1e:de:
                    48:67:9f:e5:e6:9b:31:3a:f7:9b:c1:84:de:08:b1:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:1C:3F:3F:8C:29:03:DA:33:44:2E:23:09:30:AF:61:49:97:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a2f8240-ff02-35cb-b260-f747bae4db00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:1a:18:b2:ab:15:d0:69:e6:fe:c2:67:d6:43:ab:da:2e:
         a8:cb:0a:8e:c6:a0:56:4e:b3:09:cf:a1:2d:8b:bb:60:7c:22:
         1e:5d:6d:99:77:97:a2:4a:65:84:f6:0e:38:2e:ce:ae:4a:86:
         cf:34:67:d4:89:74:dd:0b:25:ea:7f:a9:2e:82:95:43:e1:82:
         5d:b1:97:5c:63:7c:10:bf:2a:0c:f2:00:7e:41:36:13:ea:ca:
         13:35:4e:77:ac:e7:06:e0:1d:f9:65:bb:45:dd:a6:08:70:8c:
         66:3f:ac:21:ce:39:69:bf:9c:84:04:83:0d:69:f0:0f:47:12:
         9f:4c:5b:e4:1c:7b:f6:af:b2:f6:1c:39:1b:f1:b7:6b:06:cc:
         41:5c:23:ef:50:72:d4:6b:76:30:56:c0:68:42:0a:02:32:99:
         5b:60:9e:f2:eb:12:07:a7:b0:35:a7:18:16:de:22:8b:c0:76:
         1a:a1:e6:11:d2:46:cc:45:b4:64:fa:53:51:ad:1b:ab:43:c1:
         cd:55:97:1f:2a:d2:c2:c5:f5:c3:b8:9d:97:e6:dd:af:5f:7a:
         d1:28:15:f9:45:6e:04:72:7b:1c:a0:e5:c0:37:9c:c4:2c:ac:
         fc:1c:13:40:2b:b3:4d:af:af:8a:ea:53:f5:4d:c7:49:49:b7:
         d7:b9:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:03 2026 by rpki-client