Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/686bd20c-f58a-3176-b8ce-5fe126321f6d.roa
File:                     686bd20c-f58a-3176-b8ce-5fe126321f6d.roa (raw, json)
Hash identifier:          iQxBmWlU4vjevNyzUSckuFCBSETzcLW0zCmzn9j/BNM=
Subject key identifier:   36:45:B7:1D:6A:6A:97:FF:D8:A7:8F:FF:70:43:30:A7:80:EA:7F:D4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D54141EAA6596263BB980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/686bd20c-f58a-3176-b8ce-5fe126321f6d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        68.190.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:54:14:1e:aa:65:96:26:3b:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d2183522-383e-45c6-99b6-cd632041b69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:12:5b:ab:48:4a:e3:95:2f:8f:07:a7:bd:
                    58:66:6b:73:dd:5f:08:df:fc:9c:ef:31:d7:fc:ad:
                    ea:ee:95:c7:45:dd:45:54:92:51:bb:a8:58:91:d3:
                    11:cf:c5:70:e0:c6:43:cf:fe:c9:f8:b6:74:2d:e4:
                    a6:b6:0c:5f:dd:82:17:5f:bb:a6:18:18:20:87:c9:
                    89:4f:25:c1:8d:04:34:a7:15:5a:8f:ef:66:c4:ba:
                    b6:cf:ed:c6:54:ff:77:7b:aa:99:e8:50:61:08:7f:
                    ac:1a:b4:62:c2:fd:fa:67:63:1d:6f:e1:a1:4e:32:
                    a0:a5:c1:f3:d7:73:e7:db:4c:da:43:78:ba:df:e6:
                    9e:d5:46:20:b8:2d:61:07:91:4a:76:a5:8b:ad:24:
                    f2:31:6a:b8:d3:d1:92:43:c6:e7:9d:03:bd:ee:ce:
                    cc:e2:9b:de:a0:b5:a4:c5:00:11:98:30:a1:14:1a:
                    d5:a7:4b:af:4a:67:3a:f2:09:6d:70:2d:4e:cd:5d:
                    85:d6:99:67:a9:ec:df:aa:3a:6f:ba:99:27:4b:7f:
                    02:81:ee:ec:bd:97:49:52:6c:82:5e:49:75:af:a2:
                    0a:b6:dd:b8:57:7b:61:49:27:59:53:bd:b3:f7:cf:
                    34:cd:b4:09:ee:6f:96:d2:14:c4:8d:86:42:75:ff:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:B7:1D:6A:6A:97:FF:D8:A7:8F:FF:70:43:30:A7:80:EA:7F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/686bd20c-f58a-3176-b8ce-5fe126321f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:fe:82:65:20:72:a2:36:f3:30:c9:4d:9c:28:9f:94:06:
         46:92:55:c6:9a:a5:70:37:44:e8:a1:3f:a2:83:e0:17:52:6d:
         f7:6f:5f:bd:48:78:cb:86:93:a3:e9:f5:63:6a:e4:ca:ed:77:
         a5:35:b1:a8:bc:05:02:6b:a7:5c:6b:3e:97:01:5f:0b:43:c4:
         0e:ac:2c:9a:ce:57:ce:6b:99:02:5b:14:3e:4f:27:ed:0b:71:
         e6:e9:28:7c:96:37:65:df:18:f0:da:9c:65:c7:67:e3:85:d1:
         44:9e:56:dc:15:ac:8c:65:77:00:b7:2d:e9:15:d3:22:ba:7c:
         d8:04:f7:fb:49:40:c9:90:28:d2:a8:f0:b3:8e:46:36:23:d4:
         fe:21:3c:af:a1:77:6c:58:47:fc:4e:12:e9:38:43:b9:a2:5f:
         c9:54:fc:75:58:9d:f1:e0:86:36:5d:cb:ac:19:7b:c5:ea:cc:
         bc:aa:0c:fc:46:41:ac:f9:85:9f:68:1a:f3:bb:3e:48:62:e9:
         65:44:d7:ea:3b:a5:db:ba:3e:ed:56:f2:b9:3d:ca:54:81:58:
         15:76:f4:d7:25:c6:4b:08:60:5d:54:11:6c:fc:96:e4:ac:56:
         91:6b:02:7e:b3:1e:43:7a:46:2a:06:6c:6b:46:51:55:77:fc:
         f4:6e:51:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVQUHqplliY7uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZDIxODM1MjItMzgzZS00NWM2LTk5YjYtY2Q2MzIwNDFiNjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkYSW6tISuOVL48Hp71YZmtz3V8I3/yc7zHX
/K3q7pXHRd1FVJJRu6hYkdMRz8Vw4MZDz/7J+LZ0LeSmtgxf3YIXX7umGBggh8mJ
TyXBjQQ0pxVaj+9mxLq2z+3GVP93e6qZ6FBhCH+sGrRiwv36Z2Mdb+GhTjKgpcHz
13Pn20zaQ3i63+ae1UYguC1hB5FKdqWLrSTyMWq409GSQ8bnnQO97s7M4pveoLWk
xQARmDChFBrVp0uvSmc68gltcC1OzV2F1plnqezfqjpvupknS38Cge7svZdJUmyC
Xkl1r6IKtt24V3thSSdZU72z9880zbQJ7m+W0hTEjYZCdf9eWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZFtx1qapf/2KeP/3BDMKeA6n/UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjg2YmQyMGMtZjU4YS0z
MTc2LWI4Y2UtNWZlMTI2MzIxZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2+/oJlIHKiNvMwyU2cKJ+UBkaSVcaapXA3ROihP6KD4BdSbfdvX71I
eMuGk6Pp9WNq5Mrtd6U1sai8BQJrp1xrPpcBXwtDxA6sLJrOV85rmQJbFD5PJ+0L
cebpKHyWN2XfGPDanGXHZ+OF0USeVtwVrIxldwC3LekV0yK6fNgE9/tJQMmQKNKo
8LOORjYj1P4hPK+hd2xYR/xOEuk4Q7miX8lU/HVYnfHghjZdy6wZe8XqzLyqDPxG
Qaz5hZ9oGvO7Pkhi6WVE1+o7pdu6Pu1W8rk9ylSBWBV29NclxksIYF1UEWz8luSs
VpFrAn6zHkN6RioGbGtGUVV3/PRuUbE=
-----END CERTIFICATE-----
Generated at Fri Oct 17 21:08:09 2025 by rpki-client