Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa
File:                     4100d234-1a2b-3285-9f6f-102630868c99.roa (raw, json)
Hash identifier:          xyDEWyCU9Rbw6qA7eijmcTY7FKCuocl1fb5wNH+lcMY=
Subject key identifier:   45:61:AC:CC:C9:07:5B:94:E7:6F:B1:5A:86:03:42:20:46:7D:8E:44
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E520A92275607BED31840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.117.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:52:0a:92:27:56:07:be:d3:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=ef5ea21e-ff56-49dd-96f1-e5dca7bad53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:8d:c0:c9:f6:b7:82:d2:33:e1:4e:b3:e5:
                    ed:50:41:eb:0d:ad:db:2b:da:86:cf:f4:a2:3b:64:
                    06:df:43:e0:4e:11:0d:4b:e3:3d:e9:6b:b6:27:48:
                    00:e3:dd:c7:f6:04:4b:05:2d:e7:ad:b3:02:77:77:
                    21:a8:a2:95:e3:5d:30:f4:28:40:95:b4:54:99:c6:
                    5f:d8:41:4b:35:3c:4f:23:c2:3d:0d:c9:63:77:e0:
                    f6:e6:56:a7:8a:44:02:82:bb:2e:3e:8b:10:4a:6c:
                    fa:5a:ba:55:78:73:6c:aa:d3:7c:d3:7b:cc:fb:03:
                    3f:dc:13:56:f1:f6:3f:8f:a3:d2:dc:62:8e:12:37:
                    c7:18:0f:05:53:5e:b3:c1:50:88:d7:50:9a:45:b7:
                    d0:21:e2:2f:5c:1f:6c:af:84:90:5c:84:ad:73:c0:
                    c8:25:96:19:67:b1:96:a1:6d:47:0e:52:d1:64:2f:
                    f8:4a:a6:4f:09:2c:6e:c6:72:50:0a:e8:6b:5e:02:
                    0c:7c:a8:44:ae:c5:8f:5f:30:1c:cc:6e:04:1a:a0:
                    ed:9c:ee:14:8e:a9:db:00:98:3f:ef:55:12:f8:f7:
                    ed:af:3e:42:45:78:75:df:24:ad:d0:b4:68:53:98:
                    f5:ee:bf:d8:0a:84:5c:2d:9c:4a:8c:f1:17:ed:3b:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:61:AC:CC:C9:07:5B:94:E7:6F:B1:5A:86:03:42:20:46:7D:8E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4100d234-1a2b-3285-9f6f-102630868c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:75:07:79:79:0c:f1:f4:59:5f:ff:c3:5a:73:3a:d9:51:
         eb:41:db:7c:c9:fa:db:17:a9:d1:ab:75:bd:25:31:4a:2d:d2:
         1d:f5:3e:2d:c5:4a:1a:30:4e:dd:29:7f:4c:46:2b:7c:f5:99:
         85:c0:72:90:93:99:58:62:d7:5b:20:d8:91:1f:2c:0e:b0:63:
         da:72:c8:a4:be:77:4d:a6:1f:cd:13:1d:bb:68:e0:62:bf:66:
         a4:90:43:22:96:58:12:2f:b0:98:e2:18:94:7d:74:87:ad:43:
         9a:f9:36:26:c5:8f:8d:e0:05:83:eb:a1:a5:39:e8:6d:f8:9a:
         ea:96:0b:2b:c7:da:5c:b9:1a:41:c4:c8:9f:7d:20:0d:6a:ee:
         e7:80:61:5c:b6:0a:57:a8:40:21:be:a3:7c:c5:06:43:e2:84:
         56:11:86:ed:b1:a5:ec:22:d6:3a:6c:bc:0c:9a:5b:b9:26:40:
         6e:70:e6:9d:82:66:71:4b:b4:1b:89:1e:08:63:e6:5a:f3:53:
         71:5c:13:14:9b:d9:d2:1a:b6:69:94:36:e6:2f:01:3b:f2:2f:
         97:fc:53:09:16:81:b8:18:89:c2:33:ba:12:fc:8c:fa:86:44:
         5c:2b:2c:bf:a8:30:72:cb:2d:ab:9a:0c:4d:57:ff:0f:2c:14:
         96:0e:37:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:03:27 2026 by rpki-client