Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae9fa3f-deff-3b22-912f-3bfed24afd08.roa
File:                     5ae9fa3f-deff-3b22-912f-3bfed24afd08.roa (raw, json)
Hash identifier:          b/ptJ8huopdLKYi+j4Q2SpIn8K9j0bu30NV5dnml0Z4=
Subject key identifier:   70:3C:D7:66:C1:46:55:47:6B:5B:06:3C:90:B8:51:16:F3:E1:6D:05
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B181475BE9E0B64B8087001C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae9fa3f-deff-3b22-912f-3bfed24afd08.roa
Signing time:             Fri 05 Sep 2025 13:28:19 +0000
ROA not before:           Fri 05 Sep 2025 13:28:19 +0000
ROA not after:            Thu 04 Dec 2025 14:28:19 +0000
asID:                     22516
IP address blocks:        68.113.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:75:be:9e:0b:64:b8:08:70:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  5 13:28:19 2025 GMT
            Not After : Dec  4 14:28:19 2025 GMT
        Subject: CN=303905dc-5341-4ff9-b940-dab9a26a55cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:a1:ec:45:b5:63:61:21:85:55:a6:3a:b7:
                    70:1a:6b:58:0a:e2:25:b4:80:e1:44:dd:74:5d:fd:
                    32:77:5b:68:42:01:a2:37:b8:40:b8:d8:1d:44:d5:
                    be:b3:ca:cf:83:27:cc:7d:1a:7c:3d:cc:e1:5d:9e:
                    c5:6a:91:2b:50:d0:5d:cf:53:e5:e1:a1:15:6b:c7:
                    3d:49:3d:15:fe:46:ff:6e:d0:11:5a:be:13:63:ea:
                    19:6a:5d:d4:ed:48:51:dd:c6:14:9b:20:ea:57:53:
                    1c:08:17:09:9e:32:09:ac:2d:0a:d9:f8:45:ed:53:
                    de:a6:2b:23:4d:52:b7:a8:46:b9:40:23:5c:17:3e:
                    71:ff:bb:e2:f3:1b:94:e3:09:f7:57:6c:5f:2c:99:
                    27:b9:7a:50:75:99:3f:d4:99:bb:d3:5b:e7:93:c4:
                    0b:55:cf:0b:84:12:e5:c1:8f:5e:3a:e2:a8:50:11:
                    5c:5d:c8:66:07:ae:a8:31:62:df:05:25:00:3e:db:
                    dd:2f:fc:8b:79:9f:c4:39:83:83:c0:27:df:e4:58:
                    be:4f:b6:ad:9d:d6:ef:34:c6:c4:93:2a:98:7f:da:
                    e0:fa:ff:70:9e:d3:9c:2e:17:81:53:ce:d2:00:f2:
                    86:61:ca:10:01:3e:b2:30:92:f6:91:42:29:34:07:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:D7:66:C1:46:55:47:6B:5B:06:3C:90:B8:51:16:F3:E1:6D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae9fa3f-deff-3b22-912f-3bfed24afd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.113.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:ad:8a:80:d7:f0:5c:83:29:d4:ee:ad:b0:f7:b0:76:64:97:
         aa:20:b8:7a:10:e7:e2:ec:4b:a8:27:43:a0:59:e3:64:3b:d7:
         ed:82:81:33:3e:af:8c:04:72:50:f4:0d:fd:24:0b:8e:57:60:
         81:dd:f1:b7:ee:4d:af:84:74:90:e4:68:db:20:b6:36:e5:82:
         bc:6e:d9:e0:0e:63:40:ad:6a:b4:f9:d3:07:4c:f1:b9:3f:7c:
         df:f0:43:50:bf:d4:7e:7d:03:b7:ba:ab:b4:69:1d:c5:88:6e:
         56:81:1f:f5:02:21:c2:97:44:b6:02:22:bc:46:71:6a:b1:97:
         21:fa:de:a7:cf:6e:03:6e:e1:f5:5c:47:5e:10:29:13:2a:0b:
         48:a6:95:d1:1e:fe:fa:17:da:52:cb:d0:d1:7a:de:02:82:a6:
         32:41:64:1b:a5:b8:a6:a5:e3:2c:6e:43:7e:a3:74:77:7c:c4:
         69:4e:fc:6a:3b:c9:43:65:4a:50:8c:6e:85:51:cd:84:93:c0:
         25:2a:68:3b:5d:38:29:0f:20:f3:b4:08:83:f1:44:36:5b:86:
         93:4b:7e:2d:6b:9e:68:6d:2a:c9:92:e8:b9:29:8e:c3:e7:fc:
         d2:00:04:ec:fe:8d:9a:da:d9:3b:14:3d:39:72:51:cf:db:65:
         4a:ca:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:12:19 2025 by rpki-client