Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa
File:                     2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa (raw, json)
Hash identifier:          YtR3ymZLeQneN8VDw+SUIQxMv1ae6/5D8XN0xUffgjY=
Subject key identifier:   D8:7F:45:F5:A5:69:90:07:D2:CE:61:4E:3C:CD:62:3A:9D:16:1E:60
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37223D3763CE6C8141F9CE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        68.191.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:23:d3:76:3c:e6:c8:14:1f:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=881b6004-eade-478b-983e-bb0581a44a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:cd:50:ad:e6:88:71:50:50:6a:60:db:a3:
                    5f:c4:85:e5:99:1b:75:f7:d7:df:52:ca:0a:e5:fc:
                    59:ae:7d:85:9d:86:0b:e9:75:7c:4a:7c:4e:f6:0b:
                    cd:65:6d:20:b2:8c:3b:d9:27:3f:7c:9b:c4:6c:c7:
                    96:94:53:ed:31:7c:62:ed:15:8a:af:54:73:a5:39:
                    ad:f5:c5:36:f1:93:0b:76:92:de:32:13:95:4e:d5:
                    84:a6:b0:c6:5d:3b:08:f0:d9:f0:4a:50:93:48:4f:
                    0d:ce:92:9c:31:af:76:ea:00:52:fb:07:85:72:84:
                    b0:b8:bb:51:a1:50:8d:c6:8d:d5:41:8c:1d:0d:61:
                    6a:f3:04:ca:95:4a:38:b3:49:96:e2:4b:5d:1d:94:
                    d6:04:e6:f0:3e:06:00:69:29:c5:1d:a2:1b:c7:bd:
                    11:4d:39:ec:10:4c:be:76:b6:e1:bd:3e:16:24:df:
                    c9:9b:88:fb:80:03:20:40:df:e9:42:44:6b:cd:40:
                    77:f6:82:99:0a:e5:07:e0:58:8a:49:17:bb:d6:cc:
                    ed:46:18:7d:cb:54:84:90:57:97:8a:87:fa:31:74:
                    83:8b:15:f1:7f:f1:0b:68:ef:3b:ce:35:87:61:52:
                    20:b3:14:5a:f7:55:83:bc:a9:48:41:e7:b3:ff:6f:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7F:45:F5:A5:69:90:07:D2:CE:61:4E:3C:CD:62:3A:9D:16:1E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:77:eb:07:33:41:18:2e:93:f1:83:ec:bd:05:b0:58:f4:85:
         ab:db:1b:53:f3:9e:ec:04:68:1c:10:3f:5e:52:54:09:7d:38:
         93:b6:a6:02:f6:f5:9e:67:11:99:19:ee:00:9f:72:de:7c:09:
         18:de:b1:3c:95:49:f5:09:d9:77:64:78:5a:50:b1:43:15:14:
         0d:3d:c8:b5:e5:44:b0:75:84:58:45:06:f0:8b:43:40:1f:5a:
         bd:3e:42:6f:5c:00:fc:2b:30:75:b4:91:b4:a5:74:0a:f0:f8:
         e1:d0:c4:e6:24:21:c8:f8:96:13:5b:b4:c2:93:98:f8:58:ba:
         66:12:a1:a7:f4:90:4d:51:e5:b7:12:d6:87:ba:5c:2e:b9:d7:
         25:b6:94:41:07:72:a1:b0:f5:4e:f5:8e:2a:21:f3:27:0c:56:
         a0:a9:89:ad:f8:8d:da:4b:08:1c:60:b1:82:1f:3a:0b:8d:fa:
         85:ed:4f:40:7c:15:e2:1a:7d:5d:c8:ea:c0:c3:25:cf:7b:97:
         49:33:87:92:02:18:e2:2a:87:fa:de:23:0e:84:f1:d1:84:40:
         5b:07:f7:6d:65:a5:d5:87:9c:4c:2f:64:13:5f:8e:04:a7:6f:
         a6:52:19:48:8a:b2:b1:80:f2:ee:f1:af:1b:e8:7b:62:ea:3c:
         ec:5d:ad:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DciPTdjzmyBQfnOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ODgxYjYwMDQtZWFkZS00NzhiLTk4M2UtYmIwNTgxYTQ0YTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBrNUK3miHFQUGpg26NfxIXlmRt199ffUsoK
5fxZrn2FnYYL6XV8SnxO9gvNZW0gsow72Sc/fJvEbMeWlFPtMXxi7RWKr1RzpTmt
9cU28ZMLdpLeMhOVTtWEprDGXTsI8NnwSlCTSE8NzpKcMa926gBS+weFcoSwuLtR
oVCNxo3VQYwdDWFq8wTKlUo4s0mW4ktdHZTWBObwPgYAaSnFHaIbx70RTTnsEEy+
drbhvT4WJN/Jm4j7gAMgQN/pQkRrzUB39oKZCuUH4FiKSRe71sztRhh9y1SEkFeX
iof6MXSDixXxf/ELaO87zjWHYVIgsxRa91WDvKlIQeez/29LfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNh/RfWlaZAH0s5hTjzNYjqdFh5gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmFhNTI0MDEtODNhZC0z
YTc5LWI2NjMtODdlOWYxZGJiMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANR36wczQRguk/GD7L0FsFj0havbG1PznuwEaBwQP15SVAl9OJO2pgL2
9Z5nEZkZ7gCfct58CRjesTyVSfUJ2XdkeFpQsUMVFA09yLXlRLB1hFhFBvCLQ0Af
Wr0+Qm9cAPwrMHW0kbSldArw+OHQxOYkIcj4lhNbtMKTmPhYumYSoaf0kE1R5bcS
1oe6XC651yW2lEEHcqGw9U71jioh8ycMVqCpia34jdpLCBxgsYIfOguN+oXtT0B8
FeIafV3I6sDDJc97l0kzh5ICGOIqh/reIw6E8dGEQFsH921lpdWHnEwvZBNfjgSn
b6ZSGUiKsrGA8u7xrxvoe2LqPOxdrf8=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:02 2026 by rpki-client