Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa
File:                     d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa (raw, json)
Hash identifier:          ocqpAs8TzWfbN14I9TT/6ab8KOZUL6Ll48KHvdPcwJ4=
Subject key identifier:   CB:E6:74:77:8D:83:75:18:5D:66:80:73:5D:1A:A8:36:DE:BE:B7:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37291B0C568800E262AC100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        68.114.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:91:b0:c5:68:80:0e:26:2a:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=236f9d08-fbae-4bd6-8a77-b1b0541dc096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:c5:6c:f6:42:c9:b7:d4:ee:00:ea:97:18:
                    e5:0c:fa:e7:23:b6:6b:15:b2:4c:0b:bc:00:1c:c2:
                    83:44:fe:ad:1f:09:79:ef:1c:a1:87:ad:e1:b4:06:
                    7b:7a:57:dd:1d:bc:59:ee:cc:47:e8:02:34:64:fe:
                    26:9f:23:9f:6a:d2:ea:15:4f:5a:73:aa:f8:30:25:
                    90:ee:ee:ea:c9:18:37:c0:ad:e6:a4:06:23:a1:23:
                    58:79:cb:60:a7:9c:9e:33:5b:c0:82:33:eb:0a:b3:
                    d7:00:68:1f:f3:ab:d6:9c:0f:55:84:7b:49:33:99:
                    10:47:6b:1e:fe:9a:f7:f8:24:ba:80:da:f5:fd:7e:
                    cf:d8:9c:ac:40:af:5e:f6:4a:d5:80:74:20:ce:31:
                    48:bd:80:55:66:4b:5c:7f:18:2e:11:47:89:39:d8:
                    d1:0b:98:6a:12:cb:1d:5e:34:8d:02:32:53:78:07:
                    83:51:a9:fc:7d:68:b2:90:78:e2:b4:52:ec:04:6b:
                    c3:d5:3a:57:8e:64:2d:ff:96:29:cf:9e:c5:4e:92:
                    8d:45:97:fc:22:5e:c8:eb:b9:1f:e8:79:b0:ab:ce:
                    85:2c:d7:7c:84:d1:50:51:9a:49:9c:02:5e:75:77:
                    9d:c9:b2:49:b5:7b:37:68:92:33:cc:03:d1:49:5b:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:74:77:8D:83:75:18:5D:66:80:73:5D:1A:A8:36:DE:BE:B7:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d958d91e-dafe-3fb8-80d2-7a0f6bc620d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.114.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:a7:7a:7a:c7:96:62:ba:25:a0:99:23:c8:dd:dc:16:4c:
         f4:d9:62:0c:c9:02:3e:d5:9d:a7:d4:17:ca:c0:95:51:5f:fe:
         54:d6:62:dd:cd:96:d0:5d:de:f1:db:26:80:5f:86:9f:5c:63:
         74:bf:cf:9d:03:7b:4f:29:ac:73:a0:29:3b:29:0f:ad:43:3d:
         f7:7c:cc:8d:33:5a:3c:60:92:98:34:ee:27:dd:f7:2f:89:a5:
         9b:00:b0:3f:02:0a:a2:e9:5a:1e:fa:63:ae:0e:6c:eb:7f:dc:
         ed:e2:12:87:25:37:89:bc:31:7d:53:48:6f:65:b1:c4:c5:43:
         ac:cd:9a:98:b5:d9:b4:93:65:34:22:2f:f3:20:93:7b:e5:fc:
         be:e1:ca:db:db:f3:c8:44:46:24:b4:6a:25:f9:fb:5b:c1:7f:
         02:20:2c:05:6e:87:34:94:20:7f:2d:e3:44:26:30:1c:83:e6:
         d2:cf:f0:2c:6f:dd:17:41:08:ad:01:64:76:1c:6c:ba:5a:b4:
         e1:de:78:43:05:04:5b:8d:61:76:b4:a2:21:78:aa:83:5c:10:
         66:af:01:96:ec:db:a7:5c:5a:e0:ce:cf:50:ff:80:6d:f8:22:
         d3:e4:be:11:45:80:00:38:fe:61:96:e8:98:49:f4:7c:2e:90:
         8a:dd:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:21 2026 by rpki-client