Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1af67a95-418e-3ed2-b38d-1ec03d775d12.roa
File:                     1af67a95-418e-3ed2-b38d-1ec03d775d12.roa (raw, json)
Hash identifier:          FX/0HaxIbO5HXDNjmURQwSvzcI1gdEyF5Cfi31Z6I3s=
Subject key identifier:   CE:61:94:4B:AB:AE:88:4A:C5:F8:78:DF:0A:B4:64:DE:BC:F8:40:CD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16158A8E6A9DF33CC584500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1af67a95-418e-3ed2-b38d-1ec03d775d12.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.119.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:58:a8:e6:a9:df:33:cc:58:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=52061de8-ddae-4c24-a97d-75074a3bc21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:13:71:50:32:b5:a3:f2:a4:65:4b:cd:31:7b:
                    fc:7b:4d:b3:1c:da:4f:90:9a:95:20:ae:5d:1f:11:
                    f1:27:e8:1e:04:0b:e9:41:32:96:fa:ab:f8:c1:9e:
                    ed:8c:ff:7f:3d:19:42:fe:09:d9:44:6c:07:69:7e:
                    f7:8b:21:a3:2e:78:8b:5c:d5:99:e3:bb:fa:db:be:
                    f5:41:17:f5:e0:d5:48:b0:93:b4:83:40:c8:32:a5:
                    c7:49:af:6f:32:34:92:70:25:1d:91:f1:b8:0d:01:
                    b8:1b:dc:b8:b2:f7:80:44:2b:4a:92:eb:df:5d:f1:
                    68:66:3b:06:2c:fe:0e:e8:47:6a:ec:8d:11:d4:01:
                    bd:09:93:10:5e:3d:d1:21:3a:96:b3:2f:d4:34:83:
                    c6:b8:5c:4e:91:ec:22:e9:a7:93:b6:51:73:01:30:
                    95:32:4a:03:09:23:c6:e5:f3:75:37:e8:2d:aa:03:
                    21:59:85:ca:75:e2:14:0d:ce:15:ec:01:37:fc:d0:
                    08:c9:a5:d6:0f:b4:29:98:89:cb:95:59:c7:7e:bd:
                    b0:21:e1:22:ce:c6:2a:03:9d:dd:c0:24:20:e3:3f:
                    a6:1b:05:7f:10:35:99:1c:3d:b3:7d:cd:56:bc:bb:
                    f3:71:4c:76:b2:b2:52:08:87:c2:c4:68:22:31:2c:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:94:4B:AB:AE:88:4A:C5:F8:78:DF:0A:B4:64:DE:BC:F8:40:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1af67a95-418e-3ed2-b38d-1ec03d775d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:39:9f:8c:75:a2:46:75:ce:88:17:17:f3:e6:ca:12:87:50:
         56:42:de:e7:83:41:c6:ac:22:f8:a2:68:85:4f:a6:99:cc:1b:
         02:1b:aa:94:80:89:aa:4f:3d:cb:0b:24:89:65:5c:0d:62:e2:
         78:c2:04:00:5a:a0:2c:7f:32:fb:e8:ab:d0:d4:6c:e1:42:ed:
         5b:bf:27:a9:52:6b:eb:f8:b5:58:02:09:73:de:75:d0:38:02:
         56:b8:8a:57:77:5c:01:82:88:77:09:04:6b:17:97:61:65:05:
         fc:be:79:a0:19:d5:b5:56:ea:5a:47:5c:fb:78:3b:03:60:ee:
         37:2f:86:17:4f:8c:18:3c:c7:62:27:91:05:99:65:08:07:9f:
         e5:9b:89:8e:0d:cf:fd:bb:0f:07:60:ae:48:f8:03:14:dd:2c:
         9c:15:ab:10:95:1d:c3:a6:f1:fb:87:7c:5b:af:e2:43:90:3b:
         90:eb:f9:88:36:8c:e0:14:da:e8:80:aa:14:30:c9:17:bb:39:
         45:59:a6:c8:62:d5:fd:cb:bf:d1:96:ac:08:d8:ff:bc:09:31:
         9c:79:8d:0f:fb:cb:83:5d:f8:1a:e8:d2:56:46:88:e1:d3:ab:
         b7:12:9c:1b:57:22:b3:f2:f1:66:8c:95:ea:96:9c:e6:a7:c3:
         66:a2:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:54 2025 by rpki-client