Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa
File:                     6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa (raw, json)
Hash identifier:          w0fmHvUYOEHjm0U4/CtuTavKTjUo/JW7w3+gv/MSSbw=
Subject key identifier:   D4:72:3D:D8:78:A6:F5:42:32:29:98:B3:79:F1:9E:27:89:73:CD:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372145948E395AAD7B9D300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        68.112.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:14:59:48:e3:95:aa:d7:b9:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=596bc779-713d-4dc4-b7df-0e47b6d83ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:1c:b1:e6:44:f7:b4:78:ce:be:ff:e4:b0:
                    f2:67:e8:98:e7:9d:05:f6:1c:0b:8f:8b:9e:87:ff:
                    08:44:14:a1:3d:7c:ad:7f:ec:a5:ab:e8:58:a5:fa:
                    fb:4a:8c:86:15:4a:11:92:2e:3a:43:21:c3:e0:28:
                    3d:f0:d5:cf:b3:a0:87:6f:63:b9:56:41:ae:a5:5e:
                    31:8b:b8:93:7f:69:6f:4f:cf:e3:fd:a8:1e:8a:04:
                    0e:ca:30:3a:d9:8b:55:a3:4c:f4:98:54:f7:7c:a3:
                    df:0f:d8:3c:a7:3b:f3:73:56:ce:7e:45:a0:16:d6:
                    41:fb:16:e9:7a:35:0b:08:5b:2d:07:88:3c:b7:04:
                    92:8b:11:74:5b:81:77:2e:95:90:4b:ae:1c:6f:49:
                    c2:39:50:a9:f5:fb:cb:11:c2:53:ad:5a:a4:aa:94:
                    f1:63:13:ae:a3:35:84:b6:8d:d8:54:79:d2:34:29:
                    31:90:07:4f:d0:0d:85:9c:7b:44:59:61:86:3f:9c:
                    59:8c:64:b9:5d:c5:33:70:54:d1:b8:17:a1:2f:c8:
                    21:21:7d:80:f7:51:4c:09:f1:34:be:c8:23:87:91:
                    b1:d0:7d:38:2e:0a:b5:1a:1c:7b:04:e6:1c:36:8a:
                    ca:74:20:1a:72:8c:49:64:79:62:66:e6:6e:89:0b:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:3D:D8:78:A6:F5:42:32:29:98:B3:79:F1:9E:27:89:73:CD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6ef0d49f-ac8a-3ea9-85aa-0bd97b925536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:d5:6d:86:f6:ec:e6:35:35:c0:79:3a:d7:34:ad:49:a2:5d:
         da:b9:34:c4:41:d4:09:ab:ea:0e:c1:1e:9d:c0:9c:b4:db:95:
         43:a6:69:93:8a:e3:52:7e:73:80:64:67:ce:9d:82:25:2f:83:
         39:c6:43:59:31:60:de:14:ca:0b:9d:82:4e:97:fc:c6:c1:52:
         63:1c:ae:47:d7:09:38:8b:f8:00:74:0d:d1:ee:ba:ec:a6:21:
         1c:b8:30:30:99:0d:ee:33:3a:fc:a8:96:76:24:d3:fa:a5:9d:
         02:a5:6d:a9:eb:e5:bf:c0:26:f0:4d:8c:44:6b:2d:00:f8:21:
         07:3f:00:c2:b7:24:c5:e2:68:ac:40:7e:1e:f5:7d:ad:4c:a2:
         31:35:94:55:a4:dd:87:85:ee:00:5c:a0:10:c8:1b:d0:74:f9:
         28:30:58:8b:98:be:d3:9b:12:a5:c6:5b:94:e9:93:ce:3d:7a:
         7d:ce:4b:73:38:5c:e6:12:a4:c1:7f:fc:d2:fc:7f:42:1f:9a:
         97:4b:ad:11:ac:0f:17:58:09:35:09:ef:37:dc:4b:f7:c0:6d:
         ed:1a:77:62:d4:ca:43:84:63:6c:e5:32:83:a5:c8:5d:a4:5c:
         d1:8b:78:68:d7:11:f0:90:10:2e:cc:8e:26:d8:f0:27:56:f5:
         54:7f:14:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DchRZSOOVqte50wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NTk2YmM3NzktNzEzZC00ZGM0LWI3ZGYtMGU0N2I2ZDgzYmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4YcseZE97R4zr7/5LDyZ+iY550F9hwLj4ue
h/8IRBShPXytf+ylq+hYpfr7SoyGFUoRki46QyHD4Cg98NXPs6CHb2O5VkGupV4x
i7iTf2lvT8/j/ageigQOyjA62YtVo0z0mFT3fKPfD9g8pzvzc1bOfkWgFtZB+xbp
ejULCFstB4g8twSSixF0W4F3LpWQS64cb0nCOVCp9fvLEcJTrVqkqpTxYxOuozWE
to3YVHnSNCkxkAdP0A2FnHtEWWGGP5xZjGS5XcUzcFTRuBehL8ghIX2A91FMCfE0
vsgjh5Gx0H04Lgq1Ghx7BOYcNorKdCAacoxJZHliZuZuiQu4HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRyPdh4pvVCMimYs3nxnieJc82MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNmVmMGQ0OWYtYWM4YS0z
ZWE5LTg1YWEtMGJkOTdiOTI1NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHBoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANDVbYb27OY1NcB5Otc0rUmiXdq5NMRB1Amr6g7BHp3AnLTblUOmaZOK
41J+c4BkZ86dgiUvgznGQ1kxYN4Uygudgk6X/MbBUmMcrkfXCTiL+AB0DdHuuuym
IRy4MDCZDe4zOvyolnYk0/qlnQKlbanr5b/AJvBNjERrLQD4IQc/AMK3JMXiaKxA
fh71fa1MojE1lFWk3YeF7gBcoBDIG9B0+SgwWIuYvtObEqXGW5Tpk849en3OS3M4
XOYSpMF//NL8f0IfmpdLrRGsDxdYCTUJ7zfcS/fAbe0ad2LUykOEY2zlMoOlyF2k
XNGLeGjXEfCQEC7MjibY8CdW9VR/FOo=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:31 2026 by rpki-client