Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa
File:                     9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa (raw, json)
Hash identifier:          s6gpGeRBndewD1vU82rYShZtd/PIXkOj0gcKfYGWpr4=
Subject key identifier:   12:F6:A1:4D:45:7D:81:CD:1D:29:FA:68:34:1C:5E:90:F2:08:A1:AB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E45A0CEB7626331CAF580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.112.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:45:a0:ce:b7:62:63:31:ca:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=ab984e76-e3b5-41b6-9972-34f428347551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:40:8d:f3:f9:a6:88:df:87:d1:03:b2:0e:
                    54:14:73:5e:64:2e:20:80:e8:c6:84:7a:80:62:23:
                    9c:07:2a:a3:10:38:37:0c:c0:c8:26:aa:32:ff:ea:
                    79:76:8f:c4:a2:2f:3e:92:82:78:f3:aa:40:dd:5b:
                    ba:07:c3:b3:fe:c7:8a:47:c8:09:99:2a:62:8d:a4:
                    0c:66:4c:05:9a:4e:95:b6:47:2e:8b:73:03:d7:a7:
                    9e:73:44:50:61:53:2a:97:2d:2a:c4:ef:f0:f5:48:
                    23:88:64:a4:75:a0:7d:d7:d9:3f:80:32:87:29:38:
                    12:e6:08:98:d2:e4:42:ad:a9:0e:bd:4e:39:c6:34:
                    78:ce:31:4b:66:f5:1e:b5:55:48:a1:b2:ab:22:ac:
                    3d:da:5f:2b:2a:26:7d:84:63:c7:20:44:8d:b7:88:
                    05:0a:dd:11:c1:9d:68:4b:58:de:56:c7:40:c9:7b:
                    7b:88:8f:2e:4b:15:42:ff:aa:bd:4d:b9:ea:c7:65:
                    57:ee:97:ce:20:1c:5d:9b:34:b6:41:21:aa:69:03:
                    ab:11:dc:7a:15:20:5a:1b:6d:20:df:2a:22:f8:63:
                    37:a5:4f:26:37:62:39:e5:ac:ba:23:f4:16:97:f9:
                    96:ab:1e:50:9d:04:fd:bd:09:e3:a7:07:54:98:34:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:A1:4D:45:7D:81:CD:1D:29:FA:68:34:1C:5E:90:F2:08:A1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:6f:e5:38:70:84:ae:c7:2c:ab:cb:fa:16:a2:39:1a:2d:1c:
         47:2d:4e:0e:56:f6:da:91:c9:12:20:ed:a0:dd:50:fd:c3:a2:
         3e:d2:97:57:ff:26:01:91:c3:80:bd:46:07:ef:fb:80:73:57:
         32:79:b8:08:49:b9:04:ad:92:a8:95:aa:ee:ba:46:de:94:69:
         4a:11:5e:46:69:32:a6:1a:69:85:44:6e:28:c0:f2:96:97:97:
         b6:f4:39:df:74:0f:9e:c9:ab:a7:0e:c2:e4:62:1d:2c:4c:7f:
         8a:7c:99:3b:23:aa:c0:11:4a:ab:97:73:58:e4:17:0f:7a:d9:
         3e:ec:54:ee:89:56:95:9f:a7:d3:78:f0:a2:0c:05:94:83:41:
         c5:8a:77:ec:9a:c7:06:1e:19:54:6c:45:e7:a3:b4:a0:6a:8d:
         b6:74:78:01:a6:88:e4:6d:cd:8f:e0:b2:8f:d2:a1:37:85:e7:
         e1:83:d5:c2:cd:30:27:21:68:f5:f7:21:3e:b9:75:d0:5e:05:
         9f:83:60:6d:de:6e:ab:21:2e:01:93:b2:86:e6:dc:52:77:39:
         1c:0a:71:1b:4f:ff:08:2b:5b:d0:ff:ca:77:d7:79:e2:22:70:
         6f:be:2a:e7:60:61:d8:3d:0a:d4:e2:de:34:21:45:2a:00:d2:
         68:f6:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:09:08 2026 by rpki-client