Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd16171c-c59f-30dd-b7cd-3d6516152f09.roa
File:                     bd16171c-c59f-30dd-b7cd-3d6516152f09.roa (raw, json)
Hash identifier:          LfUGE9Dvb/+sn/XuELOfudLB5Q2Pg/xJ0us88OYOh8o=
Subject key identifier:   FB:42:07:DC:B9:55:A1:E8:B8:6C:52:83:5C:26:08:F7:16:A9:AD:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB355B72D3049E3DDD7420
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd16171c-c59f-30dd-b7cd-3d6516152f09.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     23222
IP address blocks:        68.190.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:35:5b:72:d3:04:9e:3d:dd:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=74d9a124-e083-4e19-b0c6-ec440a636882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2a:3f:47:a1:9c:f1:c4:87:53:0e:91:ca:56:
                    59:77:53:1f:a1:7d:6c:1c:f2:3c:5c:ae:c2:a2:3b:
                    c8:88:04:5a:5a:e3:ba:9a:19:84:5e:e7:a3:01:50:
                    9e:2a:24:ee:c2:89:b3:0e:ce:d9:b9:ae:63:bc:d7:
                    00:1b:f1:4c:8c:1e:ec:a2:73:89:c8:d8:df:c2:57:
                    b9:ff:a1:a7:cb:43:36:4f:8f:36:bf:4a:86:a3:05:
                    01:fa:cc:5d:33:a5:16:d3:39:a4:8a:b2:c8:97:6c:
                    68:a1:b2:90:7b:31:1f:08:30:79:02:ac:31:9e:04:
                    f2:de:56:d0:b2:9a:9b:5c:1f:d4:7c:14:2b:bf:eb:
                    24:f8:3d:ed:45:1a:da:05:ea:f9:50:25:cf:5a:46:
                    29:57:9b:2d:3e:d9:fb:4d:0e:7a:f3:3a:c7:a1:4f:
                    e6:37:e2:af:12:98:5e:d8:3e:44:9e:3f:93:55:9f:
                    27:d4:c7:6a:22:39:c7:e1:b1:70:45:24:3e:cc:f4:
                    b9:e6:7a:7a:1f:a1:4c:72:76:6c:96:0e:e0:d0:24:
                    7d:67:53:19:7d:58:2d:83:da:98:04:99:6f:85:f2:
                    b3:2a:ee:b5:7d:41:63:fa:a2:f2:2a:5b:88:f8:41:
                    d9:84:3c:79:7c:e6:6e:f8:67:a1:75:9c:9a:6d:36:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:07:DC:B9:55:A1:E8:B8:6C:52:83:5C:26:08:F7:16:A9:AD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd16171c-c59f-30dd-b7cd-3d6516152f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.190.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:1c:9a:6c:5a:d4:86:17:24:1b:ce:bc:9b:1f:55:e3:30:e3:
         d4:58:ee:f5:b6:54:5d:d4:5d:56:d0:82:6d:e0:4d:91:b9:00:
         25:4f:0d:82:80:36:92:df:b1:d8:49:b7:f1:db:27:a3:88:ba:
         3e:21:98:04:72:e9:76:f5:d1:ce:81:55:0a:18:2a:73:e4:e8:
         4b:fe:c7:16:92:7b:63:49:ee:06:ee:08:26:db:67:93:90:45:
         cb:51:94:af:cf:a5:d0:88:07:b5:7d:c0:9d:d1:3b:92:89:ce:
         d3:b7:61:a6:d5:b8:03:05:5b:5a:4f:c0:3d:40:18:35:94:1e:
         d3:06:c5:d5:1c:a4:06:3b:2e:67:fe:b9:9e:37:2b:d1:7d:6d:
         f1:4a:bb:bc:c6:b2:36:11:5a:0d:0c:a8:4e:7a:83:09:39:02:
         56:9d:f0:88:54:39:b1:74:f3:48:8b:8c:37:6d:2a:d3:69:a4:
         36:81:c2:ee:f2:84:f5:9e:2a:95:cb:48:d6:81:9d:16:97:61:
         c7:7f:71:0e:22:3c:95:1a:8d:ec:d1:75:03:9c:a7:6d:a3:71:
         4b:fa:f1:3a:b8:95:ea:53:ff:fb:0c:71:a8:43:16:b9:15:f9:
         06:c5:38:42:24:d1:8d:20:1a:bc:31:f6:15:9c:4b:12:0a:cf:
         67:f9:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 17:31:03 2026 by rpki-client