Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/973498f2-35b4-39d8-a8cf-e85754f67b3e.roa
File:                     973498f2-35b4-39d8-a8cf-e85754f67b3e.roa (raw, json)
Hash identifier:          3QZH3pgZg3d757kxNI5Pwk3MHGEMq1lAEHx5CrbucDE=
Subject key identifier:   E8:1D:5B:FD:0F:8F:E5:D1:73:88:6B:A0:3B:E4:25:96:3C:54:6F:DF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37222C69280D32382146B60
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/973498f2-35b4-39d8-a8cf-e85754f67b3e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        68.186.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:22:c6:92:80:d3:23:82:14:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=84d93df1-7489-4cab-9a09-c3cebcdc68f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:53:4f:a2:d9:cc:83:5d:92:ed:a8:f8:d6:
                    6f:a6:1d:7a:88:49:0e:d2:1d:57:75:cb:89:c8:6b:
                    95:fc:80:85:75:35:d9:c8:f4:4b:4e:db:64:7d:16:
                    b9:02:be:f5:47:cb:09:86:bb:28:a3:a9:42:19:68:
                    96:b2:b9:c4:cf:d1:1a:ab:66:0b:f3:bb:63:e8:81:
                    a9:fb:0f:0c:5d:b9:db:dc:ec:df:92:1a:71:c8:66:
                    bd:a8:5f:32:08:fb:4f:38:a9:f6:ff:15:af:e9:77:
                    31:41:a8:5d:d0:50:e8:b0:14:c2:60:0d:8c:58:a5:
                    09:8e:97:3e:b5:02:41:03:cf:ed:77:4e:c3:19:5e:
                    3d:26:48:21:13:5b:08:0f:f3:dd:e9:60:31:34:82:
                    e6:28:1b:01:94:b2:f6:24:37:cc:0c:24:69:e3:f1:
                    0e:84:94:b1:4c:de:38:ba:b2:3b:05:70:15:55:bd:
                    fe:27:1d:84:7a:3a:84:c4:dd:57:ca:cf:e3:07:2e:
                    90:52:44:02:19:e3:89:b4:b8:15:0e:56:b2:8a:81:
                    7e:7a:f6:e7:f3:ea:91:a4:62:d5:05:e5:f5:4b:88:
                    52:8c:86:a8:94:11:37:90:1f:fc:5b:74:43:60:c3:
                    ff:3d:07:92:88:30:1c:ac:17:45:0d:36:88:0e:2c:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1D:5B:FD:0F:8F:E5:D1:73:88:6B:A0:3B:E4:25:96:3C:54:6F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/973498f2-35b4-39d8-a8cf-e85754f67b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.186.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:33:8d:e5:e1:4e:1e:97:84:e7:10:41:9d:18:bb:41:46:6c:
         2c:ef:ea:3c:36:2e:f5:86:e0:41:fc:f0:71:15:45:95:06:63:
         26:62:78:79:29:24:f3:91:2a:98:1a:93:80:9b:1d:bf:b1:be:
         4d:49:13:5b:7d:14:8a:e7:45:b7:e2:bb:8e:47:9d:d2:05:1d:
         4c:54:95:f7:9a:59:4b:45:0e:ed:b6:3f:05:5c:0d:08:57:c3:
         0c:ab:a1:9b:cd:3f:07:fa:89:7b:19:05:21:ef:82:8a:d9:a7:
         61:c6:85:3f:dc:9d:24:42:c2:8d:7f:a0:8b:14:63:59:54:ac:
         70:c3:48:03:67:c4:db:d7:1f:45:75:20:9d:4f:2f:b0:0a:31:
         81:fc:e8:e5:04:07:16:08:9a:7f:8e:bc:76:56:ea:30:6c:4d:
         8f:fb:55:bb:47:57:18:cf:b5:8f:4a:5a:8b:92:7a:15:11:61:
         b8:ac:e9:15:3d:cd:57:73:cc:d4:bb:6f:57:25:e2:b6:f4:5d:
         f6:f1:b8:23:7c:bf:3a:76:22:0a:bd:d3:84:84:90:be:7b:b2:
         2e:08:2e:f8:78:4b:11:0c:85:0a:0e:cd:af:1d:d7:f2:50:9e:
         38:cf:1f:27:c0:49:38:e7:a5:3f:39:3c:c6:25:0e:92:6b:6f:
         97:02:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:38 2026 by rpki-client