Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/de61c517-1200-374f-b5d5-722c286d711f.roa
File:                     de61c517-1200-374f-b5d5-722c286d711f.roa (raw, json)
Hash identifier:          Ng0lfqSsDE+uHD74i82Uzt0TEsnxc9YVKzS3ZhUY4j4=
Subject key identifier:   ED:7B:38:31:F7:EE:D9:2C:3D:5B:26:5B:75:E8:CB:59:A9:65:8D:05
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD735FCACB071AF32C780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/de61c517-1200-374f-b5d5-722c286d711f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.116.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d7:35:fc:ac:b0:71:af:32:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=4a1cc7aa-5144-4969-a5e6-503210f0fba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:6c:b1:b4:47:68:39:34:03:f3:9f:a9:e2:
                    31:20:e1:2d:b0:3a:20:01:98:76:7d:52:28:e9:77:
                    5a:74:b7:92:36:c6:7d:b5:24:7a:1f:2f:b6:42:91:
                    e3:a3:ee:4e:7c:78:e4:26:af:8b:1d:c9:3d:e3:73:
                    a3:54:79:67:3b:14:23:42:ba:80:7c:21:c8:2a:7f:
                    65:9e:61:0f:12:ee:7d:e2:6b:f6:ad:56:0f:d4:a6:
                    56:d0:d7:2a:18:69:8d:fd:84:9d:3b:d7:f8:a0:75:
                    13:f0:11:42:3d:0e:6c:e1:5f:c6:3d:7a:c7:6f:41:
                    e6:f5:2c:19:e7:8a:9f:26:05:43:f4:2d:ad:f0:ab:
                    31:55:d2:b5:2a:64:c2:9f:e1:c1:ef:99:b4:39:7b:
                    10:52:ea:42:2e:54:7e:3a:b9:75:03:8e:64:55:1f:
                    c7:b3:ae:1f:1d:73:80:24:06:35:60:cc:49:3d:7e:
                    d6:3f:f3:64:81:f5:4d:1a:4f:b8:c3:be:b4:94:25:
                    50:60:5b:54:da:d7:86:fe:15:24:85:1f:da:f5:94:
                    a8:81:9b:76:4e:df:45:a3:bb:2f:17:ac:69:2a:fe:
                    f5:b3:71:d3:a8:ed:2d:5b:6d:cd:80:2e:2c:cf:80:
                    47:ba:f9:24:4c:45:78:05:e3:5f:bf:c3:14:72:b7:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7B:38:31:F7:EE:D9:2C:3D:5B:26:5B:75:E8:CB:59:A9:65:8D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/de61c517-1200-374f-b5d5-722c286d711f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.116.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:7f:f8:75:fa:60:dc:ba:01:ae:55:b2:cb:36:eb:56:66:
         f9:cb:cb:cb:f9:c8:73:69:26:9f:1a:0c:95:ef:61:e3:09:0d:
         99:1c:8f:30:ae:65:24:ea:22:f4:dd:91:ac:cf:90:da:64:ea:
         cd:76:3e:90:a0:9d:b3:5a:6d:2a:97:6e:8e:e3:9e:8e:4c:7d:
         04:31:d2:d9:1f:be:ff:85:59:ac:8a:65:97:4e:c9:a7:28:99:
         74:5c:77:15:d0:65:be:db:2c:c6:96:a5:f2:54:00:15:78:d0:
         77:4f:56:f0:db:bf:33:58:66:32:ba:19:62:7a:9a:59:36:7e:
         2d:20:34:c6:b8:7c:71:74:1b:29:d1:ae:78:cc:ff:33:2f:eb:
         25:da:a5:c9:65:9d:74:42:13:2f:4a:dd:51:74:3c:f6:cb:56:
         82:d4:a7:89:fe:2b:ab:4e:cd:76:0d:c2:9d:3f:05:b4:f6:d1:
         49:8f:9d:6b:e3:5e:f8:e7:9a:4e:03:cc:4f:ec:a9:38:13:f0:
         c7:7b:13:2a:3e:7f:0c:2a:a0:7c:8a:96:c3:06:81:4b:73:49:
         df:ed:8a:b6:ef:08:25:85:4f:eb:2a:ba:9f:ce:70:a3:9c:8d:
         88:06:42:65:7c:e4:06:c4:05:73:46:ee:84:40:00:5d:0f:a7:
         e8:d7:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:11:44 2026 by rpki-client