Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/319246b4-1f90-3f02-8b38-83cec2d0e98b.roa
File:                     319246b4-1f90-3f02-8b38-83cec2d0e98b.roa (raw, json)
Hash identifier:          JiSZkhAo6zXfd/9APsdMmi/R3zvMpg3L/ml5ehPJVGQ=
Subject key identifier:   AF:11:3A:8F:78:35:7F:0B:EE:AD:F3:F3:A3:44:FA:1E:56:9D:2D:C2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161456E0DBEBE9E18659B10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/319246b4-1f90-3f02-8b38-83cec2d0e98b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.112.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:45:6e:0d:be:be:9e:18:65:9b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=afdc600e-ae5b-40f2-bdcf-1f088cc9cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:2f:56:e6:ae:86:3b:28:a0:4d:ad:58:5a:
                    04:aa:45:db:f8:9e:5f:e6:e4:d8:0d:49:3a:90:7a:
                    0d:ce:72:b2:73:77:83:fd:b4:a9:16:1b:ae:84:67:
                    c8:b9:7e:83:e8:90:09:25:11:49:5d:ed:90:26:35:
                    90:e1:c3:4f:c6:7e:fc:33:68:78:47:b8:cd:3b:16:
                    34:e0:46:81:e5:6f:e0:82:5d:4b:40:31:15:38:db:
                    86:1a:3f:7b:41:00:9f:30:21:7f:0f:db:53:6f:9a:
                    3c:bc:00:39:f1:01:a1:61:83:01:85:1c:98:1e:ff:
                    3d:59:af:f8:87:6d:79:03:51:b9:e8:5a:1b:39:4c:
                    5b:18:2f:c2:6f:9d:a9:fd:50:01:27:83:78:7e:3c:
                    8b:2b:c3:3f:79:78:11:50:46:7c:03:2b:fd:2e:d0:
                    ab:38:1a:29:2b:51:09:21:eb:5c:f4:14:55:d8:86:
                    af:e5:5e:5f:88:c2:fc:f4:0a:12:23:60:6c:2f:7b:
                    b9:b4:6e:9b:d8:d7:cf:5e:11:78:24:7d:a8:07:da:
                    8c:e3:b2:9c:b5:e9:36:97:e9:b2:4a:7b:80:4f:40:
                    d0:84:ae:72:b5:5d:2c:f8:81:9a:a2:a9:10:fd:af:
                    f9:ad:bf:c1:63:3c:a9:89:c8:93:d0:12:b6:2b:2b:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:11:3A:8F:78:35:7F:0B:EE:AD:F3:F3:A3:44:FA:1E:56:9D:2D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/319246b4-1f90-3f02-8b38-83cec2d0e98b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:76:5e:e3:20:70:26:35:2a:a3:5e:e6:df:25:0a:34:f9:a6:
         1d:bf:2e:c4:0c:6b:92:ec:83:de:ba:af:c8:7e:f6:70:20:1c:
         21:9a:b8:9c:04:93:f2:03:a1:fb:ac:c3:d8:84:ee:2f:8c:45:
         24:cd:4f:44:82:3c:a7:21:92:9c:78:61:1f:ec:85:4e:45:ae:
         66:3c:c3:52:c1:a4:45:99:3e:f6:18:db:4a:81:c4:11:9c:b0:
         90:b9:ca:bc:7d:8d:bb:68:c5:cf:cd:a4:cd:88:e8:8e:e3:b6:
         a0:c0:b9:fd:9a:59:66:57:91:cc:da:6a:25:1c:9c:2f:47:b9:
         8b:42:fd:68:41:74:ef:ac:28:d1:3f:05:0a:2a:d2:e5:5c:b2:
         de:cc:af:59:02:1b:46:d1:30:61:92:9a:25:22:89:e9:8d:ac:
         00:9d:8a:39:a5:00:b9:93:3e:3a:8e:72:eb:08:9b:13:4f:fe:
         51:30:43:ed:f6:95:bb:a5:e0:68:3b:dd:fe:02:60:bd:f8:45:
         79:ab:4f:1e:a3:a6:db:a5:00:5d:29:e2:3d:95:ee:62:66:7b:
         d7:14:9a:2a:80:b4:36:ab:8f:13:69:91:b0:37:df:50:ba:88:
         a0:e2:ca:fb:95:14:84:2e:32:94:f2:eb:88:50:e9:1b:8f:4c:
         fe:76:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:07 2025 by rpki-client