Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa
File:                     63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa (raw, json)
Hash identifier:          qrul1Mm/8jVGhI1DjQE400JfLBCKvV4dJ9ACgS4fm2s=
Subject key identifier:   DF:03:BB:E6:5B:7D:A3:17:C5:E3:D2:1E:AA:AA:C4:0D:7B:9D:65:F4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DC9BB030325E9C8EFA680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.112.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:c9:bb:03:03:25:e9:c8:ef:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f6c70fb4-f1fc-4548-b080-151df141bd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:9a:62:0a:77:a0:e7:c1:ad:50:15:6d:f3:
                    7f:5e:f5:64:ab:a6:9f:53:30:81:63:1d:dc:46:ab:
                    09:4e:08:c2:87:81:d7:ef:31:9e:a2:85:da:b5:ae:
                    55:57:59:24:8c:9b:e0:62:69:67:55:7f:30:2d:00:
                    0f:52:19:0d:15:17:f2:dd:46:96:37:77:93:8b:8a:
                    7c:a8:d1:84:f8:96:b2:51:82:a8:0a:20:e2:9a:a2:
                    3f:39:c2:9f:33:f7:7e:43:aa:62:6a:81:1e:74:74:
                    46:c5:2e:28:f2:b0:92:30:2f:4e:a0:d6:05:17:92:
                    80:25:10:6e:bd:2c:9d:9c:87:c3:0e:7a:8a:a4:88:
                    c1:f2:33:51:0c:6f:a8:08:a1:0c:5d:61:59:d8:5c:
                    99:1c:7c:0e:65:0f:93:02:af:4f:b7:bb:47:45:9b:
                    aa:83:09:fb:b8:b7:05:a7:49:12:6b:d5:44:92:50:
                    86:ce:b1:53:03:3b:99:1c:1f:3d:85:e3:f8:79:28:
                    19:d6:e9:e8:23:3b:23:0e:3a:e9:d3:be:df:7b:b1:
                    33:c9:c6:49:e0:0e:13:dd:38:6c:4d:50:06:26:2a:
                    e7:0a:c1:67:77:9c:3b:2a:32:2a:72:de:01:92:f8:
                    33:0d:f6:3a:36:bd:49:c7:1b:aa:4c:f2:23:02:e1:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:03:BB:E6:5B:7D:A3:17:C5:E3:D2:1E:AA:AA:C4:0D:7B:9D:65:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/63ca4ed5-4784-3e5f-b563-df76ea6e8b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:50:e3:78:2d:4a:10:e5:9f:7f:c3:d6:1f:4d:7c:ba:f7:10:
         8e:0f:67:74:03:70:b3:03:84:2a:e0:cc:79:8d:33:be:6b:8f:
         8c:dd:95:35:9d:a5:21:d3:ce:ae:72:2c:9e:71:d5:1b:d5:7b:
         ba:13:c3:bf:03:c4:0e:ec:74:3a:5a:1b:73:e9:df:11:af:db:
         ee:a6:01:7d:e2:82:49:d2:f7:ba:f8:0f:69:25:08:49:08:63:
         8a:02:52:e0:a6:ae:87:51:59:68:8c:49:d3:10:c4:ea:19:ba:
         23:d3:b0:51:55:c8:78:65:4b:ed:3f:1c:1f:0d:45:81:22:41:
         42:9b:07:d5:82:28:1c:16:19:96:29:1e:55:ac:20:de:c4:7a:
         f5:75:a6:ad:10:39:d1:f2:e1:71:81:62:7c:8d:db:b2:7d:da:
         57:80:23:2b:63:6a:8a:86:eb:73:3a:1e:85:a6:4e:45:32:e4:
         06:80:c3:80:82:f5:18:65:d7:c0:71:56:fd:27:f2:82:ca:82:
         e1:ce:62:13:21:a4:24:70:6d:37:bc:1a:bb:35:da:58:49:6a:
         c2:cd:3a:3f:4e:fd:25:2c:85:96:02:b1:36:4d:a3:43:8b:fa:
         9a:3a:47:cd:a0:56:84:34:4e:94:ba:53:91:f6:c5:b8:fd:c5:
         26:be:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:05:46 2026 by rpki-client