Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b5e20589-b024-3b2d-b351-7ad287c3d824.roa
File:                     b5e20589-b024-3b2d-b351-7ad287c3d824.roa (raw, json)
Hash identifier:          +bUT98oBaC4PbZ/Pguoki/ztRtMsF9J0XgzWJar0c4U=
Subject key identifier:   6D:CA:2C:DC:C1:56:6E:D6:E0:50:AD:9B:AF:CB:9B:32:EB:F0:1E:72
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD7A9FF0ECB821E9E9760
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b5e20589-b024-3b2d-b351-7ad287c3d824.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.187.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d7:a9:ff:0e:cb:82:1e:9e:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=96b8f813-1ef8-4513-adf7-77bb3b7544e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:0b:9c:e0:f3:55:3b:ec:24:81:49:07:d8:
                    c0:33:65:6a:86:1c:23:90:c8:bb:f1:f4:05:22:75:
                    e4:c0:94:9d:9e:98:b7:80:75:bb:e1:4f:02:89:65:
                    09:c3:22:e7:8b:12:4c:3e:d8:4e:bb:cf:3c:91:58:
                    e9:4e:5c:b5:d0:fe:07:c6:df:43:ca:af:71:cf:93:
                    cc:60:11:4e:2d:8d:d7:d9:3c:4a:0d:84:77:8f:39:
                    fe:97:43:2e:61:ab:4a:65:21:76:df:0f:7d:78:a4:
                    4d:12:3b:a6:6d:47:f9:31:e0:a5:5a:53:ad:66:1e:
                    2b:4e:d3:05:b5:85:66:11:d0:72:78:a1:ab:f5:ba:
                    5d:6a:c3:90:c3:c2:13:99:98:49:0a:5d:bb:6a:1a:
                    91:72:f0:af:49:f1:3d:ad:c6:03:c2:a0:aa:af:63:
                    3c:d6:17:09:67:65:b8:14:cb:22:85:cd:9d:d9:25:
                    3d:52:9f:c4:3e:ca:2d:45:85:f8:e7:7a:ed:50:ce:
                    4f:11:12:03:ce:d2:89:ac:6e:05:22:ae:7f:4e:12:
                    38:5c:79:86:5d:bb:0e:ae:bd:b7:c2:c2:60:d8:a3:
                    d5:0a:41:8d:6b:60:3e:33:d6:aa:df:d5:79:26:11:
                    fd:ad:bc:9f:ea:d6:d7:ed:a7:44:25:e6:7a:bd:3f:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:2C:DC:C1:56:6E:D6:E0:50:AD:9B:AF:CB:9B:32:EB:F0:1E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b5e20589-b024-3b2d-b351-7ad287c3d824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:9f:e6:8c:34:d7:1e:10:8a:08:0b:eb:0d:9a:f2:ea:f6:
         ed:00:6e:fa:ac:48:7f:8a:ce:07:3e:22:4a:73:fd:44:ad:c7:
         f6:89:a8:2b:7d:e4:47:55:4b:b7:99:6b:d2:24:81:ae:fc:8c:
         52:69:38:b2:a3:1a:95:06:29:5c:f0:df:ea:fe:64:af:12:f7:
         1a:3b:e7:b2:03:c5:ee:81:e7:9e:a4:2e:77:e4:44:88:5e:7f:
         e2:76:e1:1f:65:55:8f:90:03:3b:ec:fa:ab:ad:c1:1e:a1:35:
         68:dc:c7:9e:2a:53:b4:c0:60:6c:e5:53:a5:5b:bd:08:5b:9c:
         98:26:08:4e:7c:63:99:3f:0b:ac:65:b7:9c:d0:d7:74:45:ee:
         66:97:10:dc:4f:4f:6d:c9:71:49:e3:fa:08:f7:e6:26:b5:a6:
         90:3d:75:c7:81:9a:7c:10:2d:20:75:1a:e3:42:76:01:0b:8a:
         1e:2f:39:f6:3c:9f:44:4f:b3:6d:bb:06:f7:3f:fd:72:57:83:
         11:de:58:08:5e:05:1a:64:82:ed:05:17:ca:d0:65:4e:5d:97:
         90:4f:30:08:c9:a4:27:02:c7:c3:df:45:16:03:b1:3e:f2:49:
         1d:b4:3a:b8:a7:5f:3f:dc:51:7c:ac:8d:02:47:a7:13:bf:fd:
         22:1d:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:04:32 2026 by rpki-client