Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f181d34-1b20-346a-8ff0-ffb21ca7ac80.roa
File:                     3f181d34-1b20-346a-8ff0-ffb21ca7ac80.roa (raw, json)
Hash identifier:          ZyYMe3IC31dzoYma4TXlF3L+ZrKES8ZJlfr7rTpUiyo=
Subject key identifier:   08:91:53:6A:63:10:9E:22:F5:7A:CD:16:86:5E:B4:D8:09:3D:D5:6F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD5CD839A681EE40C3B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f181d34-1b20-346a-8ff0-ffb21ca7ac80.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.187.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d5:cd:83:9a:68:1e:e4:0c:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=b9d9fb00-de69-4b07-beb9-dece94dad2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:99:cc:9a:6b:5d:72:1f:85:e0:a8:85:47:
                    f2:bf:5c:fb:a5:51:f7:46:17:a4:ec:b6:35:b7:7d:
                    59:3a:dd:03:24:d8:a5:f6:ef:5f:1a:c1:48:e0:d1:
                    2c:f8:b5:0b:ce:79:9f:85:f1:61:33:95:1f:1c:40:
                    05:7e:db:42:d5:54:08:58:da:98:db:d5:e7:58:c4:
                    8e:2e:cf:9b:30:8c:9b:c6:83:1b:fc:5f:78:0c:84:
                    ff:be:7e:26:f0:45:a9:81:5c:5c:82:1b:2f:fd:e7:
                    e9:d1:04:17:96:72:ce:38:d8:bb:11:07:ad:e7:d2:
                    8e:69:90:f8:06:45:f6:58:33:23:9e:5a:ab:a0:fe:
                    62:0f:23:8e:09:97:03:56:1e:f4:0a:a7:7f:fd:f4:
                    b5:b3:a7:69:93:ef:53:66:71:83:93:03:74:ea:13:
                    8b:7e:ee:58:09:c3:1e:1c:6f:7b:6e:9a:6e:b0:aa:
                    eb:8d:20:23:8c:f7:13:4d:56:71:5c:3a:86:03:f7:
                    7c:77:10:b0:8c:30:7d:8c:92:3a:ce:b7:47:93:e1:
                    e2:5a:b6:91:f7:9b:84:03:f0:79:37:31:2c:e1:0a:
                    53:7a:33:b1:73:f4:ad:3e:4d:ca:52:07:da:ca:6f:
                    9c:5f:9c:51:73:68:d1:e9:fe:b0:b5:8d:52:ab:9f:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:53:6A:63:10:9E:22:F5:7A:CD:16:86:5E:B4:D8:09:3D:D5:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f181d34-1b20-346a-8ff0-ffb21ca7ac80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:ca:d8:87:66:43:e9:01:91:9a:32:81:5b:d7:4b:71:d8:
         c1:a8:39:43:82:7a:d5:77:56:a1:8d:3a:1f:73:f8:0a:83:2e:
         78:4c:da:f5:7f:1b:d5:b0:63:f1:9d:50:c9:43:9a:b9:3e:e4:
         ab:92:04:85:d0:f7:5c:fc:51:08:49:4a:35:9e:67:3b:0f:99:
         4d:54:fa:92:b9:8f:37:bb:d1:65:45:e6:4c:78:8a:8a:6e:eb:
         10:27:2f:06:bd:d4:71:97:ee:e5:f3:63:44:03:b4:c8:3f:5e:
         70:4b:ad:d5:74:49:cf:76:b4:02:34:ca:2a:ae:5b:53:12:3b:
         dc:a8:a5:f9:2a:79:8d:7f:72:b8:6a:50:0b:a3:1b:37:5b:c1:
         8a:39:cf:26:0d:37:3c:08:f8:2d:83:da:04:ef:2d:fb:9f:4e:
         b1:64:ca:80:07:c9:19:6c:fc:76:1b:ee:63:99:5b:6e:88:26:
         ae:74:4c:65:08:c9:41:54:d0:fb:1d:14:d0:77:ee:e3:44:8f:
         34:53:36:34:d0:ae:64:3e:20:6a:32:f6:4c:5f:8f:9a:e2:c0:
         4c:2c:2f:35:86:c5:81:95:c2:d3:83:17:1c:5f:26:ab:af:8c:
         68:25:b5:6d:3c:89:85:70:01:72:10:dc:ef:4e:92:29:e9:46:
         5c:5e:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:43:27 2026 by rpki-client