Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa
File:                     89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa (raw, json)
Hash identifier:          Tm/lehwGyVZELby+cwR83RKDcBE0jRPYMgB/DXDmAWM=
Subject key identifier:   76:3D:F5:51:A1:4D:01:A5:7F:E2:D3:3B:3D:6A:B7:96:03:07:81:C7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37223A78B335A4EBE75A6E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        68.191.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:23:a7:8b:33:5a:4e:be:75:a6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=9dfad2d6-d5e2-4f8e-a26c-0cc911f38796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:ee:c7:31:0c:60:93:20:b4:07:86:f1:f9:
                    51:58:ea:3b:a8:fd:ed:6d:6b:a7:0f:04:22:68:52:
                    b1:e5:37:7c:40:9c:74:c0:b7:76:6a:d6:47:c9:85:
                    34:7b:b4:14:07:c8:99:d9:a2:f7:11:5c:7b:5a:f5:
                    a8:1d:d5:19:ff:b5:1b:e1:8d:4f:a7:d4:22:ff:dd:
                    59:01:27:65:d8:34:53:61:1f:68:6e:fa:53:8d:1c:
                    58:9a:e6:f6:37:45:32:16:fc:5d:50:93:de:7a:39:
                    93:e9:e0:0e:1b:47:fb:de:7a:36:64:a5:98:1c:d7:
                    66:4b:02:b3:45:b1:1b:97:2c:d8:62:52:a7:7c:14:
                    9e:dc:3c:d7:1f:a2:c2:fe:72:b5:c2:0e:62:d3:6f:
                    e3:fa:88:58:83:b5:4b:39:d1:a9:3d:92:fd:fa:89:
                    7d:53:94:c8:b2:29:8f:76:18:49:af:f8:14:68:3e:
                    cf:b5:e0:31:e4:64:3b:c0:57:98:fc:74:c4:33:3b:
                    c2:ca:e3:0c:4a:00:39:34:2b:a3:ce:75:7a:98:42:
                    dc:3e:ca:a0:d1:01:8d:2e:81:5b:62:f0:1f:2f:fb:
                    3a:d0:fc:b7:45:fd:49:f1:f2:6e:e7:b0:91:0a:21:
                    e8:6d:cf:90:86:b0:74:d0:36:52:d1:de:54:a8:bd:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:F5:51:A1:4D:01:A5:7F:E2:D3:3B:3D:6A:B7:96:03:07:81:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.191.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:86:5b:1e:13:2a:42:5d:53:0f:11:50:c6:08:40:1e:98:
         c6:f7:1d:e4:93:4d:c6:d9:98:f7:ac:34:5e:eb:79:c4:1d:46:
         0e:5f:e2:10:8b:b7:67:1c:ca:59:d0:3b:91:1c:79:b2:9e:d6:
         63:cc:b1:5e:0b:bd:4c:2d:67:6c:ff:4b:71:eb:b5:65:49:ad:
         a8:a6:9a:cd:6c:7a:32:f6:fc:c0:8b:1a:1e:2e:74:f9:23:77:
         ec:9d:2f:53:9a:93:ad:f0:58:03:e2:82:65:fe:45:27:d1:57:
         92:4e:59:da:a5:f4:ac:46:7b:e3:33:0b:b2:db:1d:6e:5a:a1:
         1a:c5:8c:79:d0:20:67:e7:2d:1e:fc:6f:79:38:09:23:eb:92:
         0e:82:5f:f1:5c:fd:eb:2e:dd:2a:26:b3:71:39:3e:8b:af:ce:
         69:39:23:08:15:ac:fe:20:4c:37:96:12:1b:7f:e4:c3:50:ae:
         47:77:d0:94:32:78:01:67:48:22:ad:5d:e9:0e:b0:31:57:ae:
         1f:19:5c:10:c3:2f:a0:a9:f6:35:32:56:fa:62:0e:12:af:4e:
         17:55:a3:95:cb:f8:21:4b:cb:d7:cd:4e:4c:5c:aa:c2:22:7e:
         f9:cb:a7:84:a1:c9:59:02:a0:70:54:0a:ab:e8:ee:c4:6c:ce:
         60:77:e2:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DciOnizNaTr51puAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
OWRmYWQyZDYtZDVlMi00ZjhlLWEyNmMtMGNjOTExZjM4Nzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUXuxzEMYJMgtAeG8flRWOo7qP3tbWunDwQi
aFKx5Td8QJx0wLd2atZHyYU0e7QUB8iZ2aL3EVx7WvWoHdUZ/7Ub4Y1Pp9Qi/91Z
ASdl2DRTYR9obvpTjRxYmub2N0UyFvxdUJPeejmT6eAOG0f73no2ZKWYHNdmSwKz
RbEblyzYYlKnfBSe3DzXH6LC/nK1wg5i02/j+ohYg7VLOdGpPZL9+ol9U5TIsimP
dhhJr/gUaD7PteAx5GQ7wFeY/HTEMzvCyuMMSgA5NCujznV6mELcPsqg0QGNLoFb
YvAfL/s60Py3Rf1J8fJu57CRCiHobc+QhrB00DZS0d5UqL0FwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHY99VGhTQGlf+LTOz1qt5YDB4HHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODliNGI1ZmItZjBmNS0z
OWExLWI3YTAtNTViNzA1N2RiNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjAhlseEypCXVMPEVDGCEAemMb3HeSTTcbZmPesNF7recQdRg5f4hCL
t2ccylnQO5EcebKe1mPMsV4LvUwtZ2z/S3HrtWVJraimms1sejL2/MCLGh4udPkj
d+ydL1Oak63wWAPigmX+RSfRV5JOWdql9KxGe+MzC7LbHW5aoRrFjHnQIGfnLR78
b3k4CSPrkg6CX/Fc/esu3Soms3E5Pouvzmk5IwgVrP4gTDeWEht/5MNQrkd30JQy
eAFnSCKtXekOsDFXrh8ZXBDDL6Cp9jUyVvpiDhKvThdVo5XL+CFLy9fNTkxcqsIi
fvnLp4ShyVkCoHBUCqvo7sRszmB34uE=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:08 2026 by rpki-client