Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa
File:                     b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa (raw, json)
Hash identifier:          Om4w10VXWbAKmfm2gSUPf/VU4TJPEuoWIk7gFaDaD3s=
Subject key identifier:   CD:DD:DA:F1:18:71:6C:0D:68:58:BF:80:7A:44:D7:A8:5C:3C:CA:B6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD99D4B784019E712E480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.117.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d9:9d:4b:78:40:19:e7:12:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5ee22aa1-0790-4fd8-bafe-97e5300e5378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:f3:ed:2e:0b:2c:66:49:9c:dc:b7:6d:e6:
                    e1:cd:9e:f1:4b:e0:d8:3d:62:f6:8f:c5:7a:30:0c:
                    a1:c9:da:b1:1c:f4:1a:45:88:c6:d3:22:4c:da:51:
                    13:ff:d0:96:e2:55:9c:74:a1:3e:9c:24:c1:74:c8:
                    b5:6f:72:bc:8e:d1:2c:71:42:a1:a4:82:ff:cb:2e:
                    10:a0:73:16:55:2c:f2:2e:99:dd:21:89:34:a1:98:
                    35:26:4d:42:ee:fd:52:74:3c:6a:c8:77:3b:bf:58:
                    e1:48:1f:aa:4a:4c:06:30:81:45:cf:c4:2f:38:42:
                    13:de:b2:30:8f:12:a5:8a:74:b6:97:0f:bd:ce:2a:
                    ef:1e:aa:d2:61:fa:e3:e4:60:26:95:65:f4:73:8f:
                    94:d4:2e:32:9c:f6:18:92:fd:06:d5:6a:f1:ef:27:
                    3d:ad:63:4b:63:bc:14:94:20:cb:09:26:13:8c:8e:
                    0d:63:94:9c:5c:14:7e:a2:bd:cd:d6:22:11:53:cf:
                    4e:dd:c4:c1:46:1e:6c:e6:65:fc:72:88:91:72:4b:
                    0b:82:52:97:06:9f:cf:91:ed:2e:7d:61:7c:7b:be:
                    0c:24:d8:bf:85:07:4e:fc:bf:28:ee:6e:09:c9:71:
                    53:02:18:e1:5a:f3:f3:2f:f6:68:14:62:e6:98:78:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DD:DA:F1:18:71:6C:0D:68:58:BF:80:7A:44:D7:A8:5C:3C:CA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:8e:49:4b:4a:4c:8f:12:6b:68:cb:fb:f6:2a:cf:76:28:4d:
         ec:da:12:15:bf:ad:59:84:9a:10:a6:f3:73:c0:0c:86:73:10:
         b7:86:1d:1a:0f:2f:51:a3:15:30:0d:68:11:af:c2:7f:ca:19:
         58:fb:35:b5:2e:00:4a:df:6a:81:e1:5d:b1:ed:88:50:2b:65:
         71:a1:6f:99:06:77:19:b6:ee:32:e2:16:ad:2d:c8:82:73:02:
         eb:f9:05:1d:08:b2:d5:28:bd:cb:e0:12:2b:9e:bb:c5:d4:8b:
         c4:a6:3b:2b:8d:93:9a:c1:61:69:e2:db:64:dd:1d:17:71:1f:
         ff:65:08:46:7e:54:0e:5d:49:d3:e2:cf:b9:8c:02:23:54:55:
         66:7e:fe:76:5a:49:94:91:95:04:e2:0d:5e:ae:cb:20:0b:10:
         9e:28:05:8c:65:10:26:c8:b8:55:0d:10:67:ab:23:5e:e1:20:
         d0:a5:40:42:43:0d:ec:a5:61:23:d5:e8:a6:37:24:2d:60:57:
         aa:91:86:1e:96:1a:2d:2d:cf:3b:d5:98:05:5d:a3:a5:67:f4:
         09:b0:6b:ed:f2:9b:b1:cc:e2:e7:64:7f:73:68:9a:b4:d1:44:
         f7:75:b1:c6:13:59:4c:d7:de:40:4f:69:e0:94:93:65:4a:1b:
         74:ae:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:44:22 2026 by rpki-client