Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa
File:                     1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa (raw, json)
Hash identifier:          MKpUVp6l7g2b6xOCT12pvBWk7k7uq8bW7BfN65hbByc=
Subject key identifier:   D6:AB:EA:E6:FA:6C:47:5E:7F:21:91:67:B8:5C:49:B3:81:AD:5F:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E4DA3919147A3272F5580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.117.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:4d:a3:91:91:47:a3:27:2f:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f0f25dfe-e555-464c-a596-5604a7008cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:9e:d9:b2:ff:d5:7e:c5:b5:76:19:9c:73:
                    56:0b:55:26:08:f2:9b:f9:41:aa:6c:42:53:fb:db:
                    3c:cb:c9:c2:e7:99:7f:a0:a9:97:6a:2e:10:6d:f5:
                    9c:62:eb:13:4d:69:d0:53:47:86:2b:d6:1c:d3:36:
                    1f:21:99:9f:7a:84:f5:0c:fc:f3:54:2a:d6:e3:f8:
                    52:b6:0e:ee:9f:f1:2e:28:2f:16:db:63:ee:18:77:
                    5f:81:ab:4c:bb:e9:e8:3d:2d:3e:18:db:1d:b1:47:
                    c9:39:dd:32:ea:cc:7f:1b:04:6f:84:3b:e5:e8:d0:
                    b3:c5:fc:3c:b2:4e:08:a4:21:7d:8e:cb:da:de:d0:
                    67:6a:b2:f1:96:4a:8b:37:68:76:0f:7f:8b:37:1f:
                    23:dd:98:92:73:4e:f9:ae:6b:8c:a6:2c:ec:b6:b9:
                    61:35:9a:60:f9:64:d0:94:c0:71:b9:1c:20:92:80:
                    76:b7:15:32:55:d6:f2:a9:86:ff:bb:ea:b2:a7:50:
                    81:e5:03:df:3e:a8:d1:f3:85:6d:c7:e3:ba:3f:25:
                    c3:cd:11:9a:60:95:f0:03:ab:8b:f0:94:ca:ec:d4:
                    f7:58:1b:10:4b:d1:8a:83:74:04:28:e0:01:39:bb:
                    f9:cb:11:40:36:db:7f:7b:8d:55:95:67:d9:0e:dd:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AB:EA:E6:FA:6C:47:5E:7F:21:91:67:B8:5C:49:B3:81:AD:5F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:69:01:da:44:e5:88:85:4a:4b:09:57:33:db:9f:70:d8:
         94:4d:52:b9:6e:33:4b:14:2d:1c:53:94:d3:77:5c:c3:23:c7:
         fa:7f:80:57:29:71:46:1f:3b:cf:7f:39:1d:c8:21:7b:ed:94:
         cf:19:70:7d:71:2a:b4:7f:12:0d:51:5e:e9:8e:83:c0:f8:df:
         ad:20:74:a4:bd:de:51:e7:89:90:ae:07:2f:0d:96:2f:2c:61:
         7c:83:6c:1a:a3:50:5a:06:3d:71:14:a8:3d:37:19:8b:f7:be:
         a9:1e:50:4d:f1:fe:04:39:b5:cf:0e:df:8e:dc:0d:c8:8c:aa:
         75:56:fb:b6:52:63:2e:69:f4:8c:4b:07:01:7b:79:28:dc:a9:
         b8:e2:48:8c:0d:fe:46:93:75:8d:5e:7b:36:61:df:42:e7:13:
         ee:f6:6e:f8:0c:08:ba:75:2d:bf:1b:c6:38:d8:fa:bc:1b:71:
         b6:78:ee:77:ef:9a:11:12:6f:a4:f5:88:25:1f:d7:bd:26:33:
         f2:6a:45:8d:bd:83:78:39:8c:26:71:7f:08:a8:79:85:e0:3b:
         2b:86:7c:a4:4d:99:25:b3:ee:e1:ee:1e:1a:c3:23:2a:90:5e:
         bc:b6:a1:b9:7b:c0:10:86:38:8a:bb:03:ee:e8:2c:9a:7f:d9:
         c8:23:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:30 2026 by rpki-client