Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29a305d-619a-3dc6-a9bb-08480a5840ba.roa
File:                     e29a305d-619a-3dc6-a9bb-08480a5840ba.roa (raw, json)
Hash identifier:          45dNgcvg1brMzF7UM3amQ8g8SDFjFhV3aqcpuRud70U=
Subject key identifier:   93:4C:3E:59:53:E2:5A:50:7C:71:1F:D3:90:AB:0D:BB:C3:A9:CB:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD434C67E4A1122179B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29a305d-619a-3dc6-a9bb-08480a5840ba.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.187.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d4:34:c6:7e:4a:11:22:17:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=8ae6b31e-ba6e-4d3f-9f48-59fe5a2a55ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:58:00:f6:30:4f:2f:1b:1d:ad:9b:60:82:
                    10:8a:fa:18:b6:4f:48:87:00:86:e7:fb:21:a6:ba:
                    0e:68:05:1a:86:2f:c4:fd:96:44:9d:b4:06:54:c8:
                    d6:81:3a:91:f7:0e:97:db:43:5c:df:77:f8:73:91:
                    65:b7:8b:b3:43:f0:45:84:d1:7e:05:45:d8:aa:76:
                    d6:6a:65:28:00:23:77:02:53:4c:0a:ef:fa:e9:12:
                    11:88:6a:44:93:1f:0c:eb:f3:27:d7:d0:02:4a:62:
                    36:e4:a3:19:74:2d:9c:b3:80:da:4a:5f:d3:80:ca:
                    71:df:d6:03:db:b6:65:cb:07:21:34:07:1e:17:e6:
                    46:55:88:e3:36:83:37:ae:5f:9d:46:0c:54:4e:0a:
                    9f:44:49:7c:06:a9:1a:de:4b:78:05:6c:c0:6c:9b:
                    19:42:b1:d8:bc:2e:c0:2f:38:fd:a9:37:0e:64:b1:
                    b2:43:ec:b1:fb:86:67:a0:18:d2:78:2b:9f:57:d1:
                    e9:ca:fa:b1:38:02:e9:00:3a:24:b6:b0:58:08:74:
                    21:5a:90:1f:5e:cb:40:9f:41:e4:98:b1:ba:e8:ac:
                    58:9e:d7:ca:00:8f:f5:b3:74:74:f8:53:47:08:bb:
                    dc:f5:13:f5:9d:fd:51:74:99:ee:6d:66:04:2b:a1:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4C:3E:59:53:E2:5A:50:7C:71:1F:D3:90:AB:0D:BB:C3:A9:CB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e29a305d-619a-3dc6-a9bb-08480a5840ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:0f:e3:e8:dc:dc:fb:df:03:2b:ae:01:83:e6:b0:f6:9b:
         d3:33:25:a6:f7:ce:88:5f:bb:8f:5a:ee:fb:a1:e1:a5:7b:37:
         b1:21:e5:7a:0d:e0:10:4b:3f:4b:a6:18:d1:5e:9d:85:3b:f3:
         c3:b9:57:0e:88:b8:21:28:ab:5d:a7:17:77:4e:4e:79:87:31:
         77:fd:5f:db:8c:b1:c5:c1:89:64:3b:88:c7:bc:aa:ef:d5:bd:
         c9:45:e0:fc:77:fa:37:1f:9c:6d:fe:c4:4b:84:5d:5b:30:b2:
         1e:33:6b:dd:9c:dc:c3:bf:5c:3a:bd:f5:3c:3d:74:ad:ee:02:
         3b:b2:e8:f7:71:4c:56:3d:c3:c6:cb:3f:70:fe:b6:3c:2c:1f:
         50:ed:75:fb:5c:23:e6:74:3c:ab:80:87:c2:06:ec:ff:ad:f1:
         89:bb:f0:ad:d0:1d:75:c3:18:3b:69:9e:41:19:5d:cf:cd:44:
         bc:3b:2a:ba:8b:6b:f9:94:b8:7b:5a:dc:1b:dc:ea:37:b5:6e:
         50:d0:a9:fe:68:0b:7f:8c:7e:ff:bb:e2:3a:bb:46:42:2b:ce:
         6f:3d:64:ea:d8:35:a8:1c:44:4c:cd:32:d3:d4:9c:8d:3b:47:
         47:77:9f:26:b8:65:2d:be:52:c0:6a:36:ac:30:1e:d0:7f:8d:
         8f:de:d4:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdQ0xn5KESIXmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
OGFlNmIzMWUtYmE2ZS00ZDNmLTlmNDgtNTlmZTVhMmE1NWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmxYAPYwTy8bHa2bYIIQivoYtk9IhwCG5/sh
proOaAUahi/E/ZZEnbQGVMjWgTqR9w6X20Nc33f4c5Flt4uzQ/BFhNF+BUXYqnbW
amUoACN3AlNMCu/66RIRiGpEkx8M6/Mn19ACSmI25KMZdC2cs4DaSl/TgMpx39YD
27ZlywchNAceF+ZGVYjjNoM3rl+dRgxUTgqfREl8Bqka3kt4BWzAbJsZQrHYvC7A
Lzj9qTcOZLGyQ+yx+4ZnoBjSeCufV9HpyvqxOALpADoktrBYCHQhWpAfXstAn0Hk
mLG66KxYntfKAI/1s3R0+FNHCLvc9RP1nf1RdJnubWYEK6EU2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNMPllT4lpQfHEf05CrDbvDqcsVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTI5YTMwNWQtNjE5YS0z
ZGM2LWE5YmItMDg0ODBhNTg0MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET+D+Po3Nz73wMrrgGD5rD2m9MzJab3zohfu49a7vuh4aV7N7Eh5XoN
4BBLP0umGNFenYU788O5Vw6IuCEoq12nF3dOTnmHMXf9X9uMscXBiWQ7iMe8qu/V
vclF4Px3+jcfnG3+xEuEXVswsh4za92c3MO/XDq99Tw9dK3uAjuy6PdxTFY9w8bL
P3D+tjwsH1DtdftcI+Z0PKuAh8IG7P+t8Ym78K3QHXXDGDtpnkEZXc/NRLw7KrqL
a/mUuHta3Bvc6je1blDQqf5oC3+Mfv+74jq7RkIrzm89ZOrYNagcREzNMtPUnI07
R0d3nya4ZS2+UsBqNqwwHtB/jY/e1G4=
-----END CERTIFICATE-----
Generated at Sat Oct 17 11:20:37 2026 by rpki-client