Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa
File:                     5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa (raw, json)
Hash identifier:          7C4C0tT6aiVrw+GrwrnEz/oKzfvbfykFG6Vm3NOVfF0=
Subject key identifier:   1B:E2:B3:8B:24:5B:FA:DB:3C:80:62:D7:3F:E5:BF:CA:37:ED:BF:AF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1615333E7415F019513A3C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.116.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:53:33:e7:41:5f:01:95:13:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8e9510aa-02bf-443e-9a09-15f2e3dae7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:cc:ec:61:f0:81:e9:65:6e:39:4b:17:77:
                    35:8d:bc:3a:d0:2a:30:a8:76:85:8d:91:f1:a9:bf:
                    53:e4:8f:58:a1:00:d8:70:1c:53:a2:c7:33:02:bf:
                    39:e6:a6:de:d1:2d:fb:02:b2:7e:4b:9c:4b:6a:82:
                    11:b8:fc:c9:bb:76:8c:8f:6b:a0:f0:44:b6:fa:81:
                    6d:a7:4b:c3:8e:df:91:2c:a7:e2:06:1e:aa:24:8f:
                    46:e8:2c:0f:25:de:c5:8e:62:4f:3f:1c:b5:a3:b9:
                    b1:5b:10:20:bc:fd:1e:05:fe:58:bf:5b:35:00:e3:
                    7c:2f:a0:2f:5f:28:ab:b7:dc:5f:d8:ac:4e:5b:43:
                    24:62:8c:16:42:82:3c:9a:64:ad:e5:df:0a:b4:59:
                    93:fb:34:28:8a:b8:f1:1e:a3:c8:19:32:59:d6:39:
                    c1:a2:8c:85:dc:ec:12:26:ac:16:56:9a:b1:01:b5:
                    76:c3:46:76:65:38:ab:e9:e5:59:9d:19:67:2a:cd:
                    ff:1d:fa:f1:3e:53:90:29:3c:ab:e9:85:37:7a:a6:
                    b2:b2:e6:ce:ad:c2:4a:bb:1d:1a:01:ff:c6:48:bf:
                    03:bc:28:39:1c:20:49:9a:41:49:f6:2a:f5:8b:f4:
                    e1:45:51:b1:08:e8:da:5c:01:79:55:64:1f:b6:da:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:B3:8B:24:5B:FA:DB:3C:80:62:D7:3F:E5:BF:CA:37:ED:BF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5ae91d95-c1f2-3f64-b6a5-7fd59172b4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.116.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:b0:53:fe:17:06:c3:35:ab:0c:3d:9d:6b:f5:94:90:11:2e:
         e1:76:93:d2:f2:16:95:a3:f5:ea:72:4d:a5:df:a4:3a:c6:73:
         42:01:51:0b:82:89:e9:99:f1:65:31:ca:46:24:0d:7e:57:1f:
         4b:ff:ca:82:9d:74:12:fb:d6:ba:9f:fe:4f:f1:79:ff:75:fa:
         4c:5d:a3:37:9a:2e:a2:c8:d0:ce:80:0f:7c:aa:dd:b1:2f:84:
         65:9d:ee:f1:eb:54:bb:d9:e6:c3:eb:ce:27:4b:b4:ad:63:b4:
         d8:5a:56:dc:ca:4d:e1:81:f3:33:8d:24:66:99:38:73:00:7f:
         17:c9:3a:0a:b5:56:41:c9:65:af:a3:1e:29:56:6b:e9:1f:ae:
         2d:e7:20:3f:fc:4c:c7:dc:b7:b4:0b:ca:af:f8:58:99:63:ea:
         9f:e2:a7:ef:6b:67:fb:11:ef:a9:7f:7d:d8:11:fa:d7:bf:fc:
         ad:34:f7:40:12:63:17:02:a0:3f:17:06:1d:3c:31:fb:d0:32:
         7b:55:71:e8:cb:cf:63:ca:01:a6:71:cc:29:2f:09:82:3b:7d:
         65:76:d4:a4:c7:ad:d9:fd:1f:88:04:ce:0a:4b:ab:93:56:03:
         91:a2:9e:06:19:e2:a3:04:b7:0c:0a:50:1c:3c:37:12:fc:2a:
         2f:07:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:56 2025 by rpki-client