Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/809fbe92-595e-3067-ae2a-624432421925.roa
File:                     809fbe92-595e-3067-ae2a-624432421925.roa (raw, json)
Hash identifier:          bok7HJyG4bOY1hZbZmDi2qt40ghRfUbinglaCz80X6w=
Subject key identifier:   D3:08:AC:CB:89:9B:FA:78:00:9A:EF:76:BA:88:1D:EC:FE:DF:90:E8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16157ECCFC5BDC2DC4B7080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/809fbe92-595e-3067-ae2a-624432421925.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.117.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:57:ec:cf:c5:bd:c2:dc:4b:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7b8eb900-f02a-4071-b253-3063ae5c9f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:bc:72:b7:81:93:6d:ae:7b:2b:14:5d:60:
                    75:00:45:12:39:94:07:74:9b:c9:44:29:1d:41:25:
                    9a:3f:32:90:e7:3b:ec:e7:d6:9a:ea:ab:a2:46:76:
                    33:5b:66:75:19:8f:43:1b:c4:f0:b3:01:e1:5a:09:
                    36:10:fd:b6:f7:54:a0:e9:85:6b:79:58:23:f5:9a:
                    b3:ea:5b:9e:c2:13:b2:a8:62:35:6b:29:db:cf:af:
                    24:c9:52:da:23:c0:d6:ef:f0:7c:30:30:4a:96:ab:
                    7d:3a:2b:cf:41:06:64:84:06:02:4d:44:e4:d2:8a:
                    98:d1:39:eb:61:8f:a9:fe:9e:31:35:68:2b:6b:47:
                    7c:7f:4c:2a:3d:c3:2d:9b:08:b1:97:eb:18:d8:78:
                    f0:2e:03:56:67:1e:6f:82:79:46:dd:93:2b:da:12:
                    0a:5c:28:fc:26:86:04:3d:f7:05:7c:c2:a5:a9:08:
                    68:05:4b:71:bb:3c:ec:31:37:87:bc:6d:bc:53:c1:
                    c3:71:86:97:64:25:1f:fb:96:e6:46:ba:c1:0e:68:
                    01:70:7f:18:58:f8:4e:28:26:fc:bf:fa:75:d3:6c:
                    50:1c:b1:8d:90:83:3a:69:de:c7:c6:ff:ee:c8:bf:
                    aa:ec:b5:a9:04:f0:a2:8c:cc:b9:eb:5a:eb:fe:e8:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:08:AC:CB:89:9B:FA:78:00:9A:EF:76:BA:88:1D:EC:FE:DF:90:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/809fbe92-595e-3067-ae2a-624432421925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:7a:86:1d:82:71:f5:9d:4e:89:df:9e:66:6b:96:35:c3:
         59:23:5e:61:38:a8:94:1f:6a:cd:e3:09:80:70:f1:91:2c:4c:
         9b:16:09:3a:4d:5f:59:6b:3a:85:7a:94:1a:f0:7b:f4:48:49:
         10:d2:6b:b5:30:16:9f:91:d5:35:ce:02:f6:96:84:e0:f7:c3:
         80:e9:a8:5f:62:b6:2a:2d:ae:cf:a4:16:0d:b1:24:5b:39:e3:
         17:08:4c:d1:93:59:f4:b3:5b:55:62:0a:da:fb:76:85:2b:cf:
         dd:6b:e7:91:d4:1f:a5:ea:b9:73:19:4f:1d:80:43:3e:69:d4:
         cf:ac:7c:5e:dc:5d:91:89:1f:94:c2:0b:37:45:d5:68:71:7e:
         22:c0:df:6e:bd:aa:42:a3:36:7f:99:2c:b6:d3:aa:73:76:53:
         f4:58:df:89:79:11:d9:31:69:15:00:5d:38:bd:79:a6:bd:60:
         a5:e3:78:7e:93:16:be:3c:eb:db:55:4c:e0:d1:da:d6:2e:e8:
         76:bd:5b:f3:04:f6:a1:b4:dc:61:58:f2:19:3b:5d:cb:0f:5f:
         91:4b:20:de:a4:90:3f:8d:bf:06:9c:2b:25:80:3e:a1:73:5f:
         5a:d3:be:d7:67:b5:02:4f:dc:65:c2:f3:6f:b1:de:18:9b:da:
         2f:8e:d7:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVfsz8W9wtxLcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
N2I4ZWI5MDAtZjAyYS00MDcxLWIyNTMtMzA2M2FlNWM5ZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOq8creBk22ueysUXWB1AEUSOZQHdJvJRCkd
QSWaPzKQ5zvs59aa6quiRnYzW2Z1GY9DG8TwswHhWgk2EP2291Sg6YVreVgj9Zqz
6luewhOyqGI1aynbz68kyVLaI8DW7/B8MDBKlqt9OivPQQZkhAYCTUTk0oqY0Tnr
YY+p/p4xNWgra0d8f0wqPcMtmwixl+sY2HjwLgNWZx5vgnlG3ZMr2hIKXCj8JoYE
PfcFfMKlqQhoBUtxuzzsMTeHvG28U8HDcYaXZCUf+5bmRrrBDmgBcH8YWPhOKCb8
v/p102xQHLGNkIM6ad7Hxv/uyL+q7LWpBPCijMy561rr/uhXBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMIrMuJm/p4AJrvdrqIHez+35DoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODA5ZmJlOTItNTk1ZS0z
MDY3LWFlMmEtNjI0NDMyNDIxOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHXQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiLeoYdgnH1nU6J355ma5Y1w1kjXmE4qJQfas3jCYBw8ZEsTJsWCTpN
X1lrOoV6lBrwe/RISRDSa7UwFp+R1TXOAvaWhOD3w4DpqF9itiotrs+kFg2xJFs5
4xcITNGTWfSzW1ViCtr7doUrz91r55HUH6XquXMZTx2AQz5p1M+sfF7cXZGJH5TC
CzdF1WhxfiLA3269qkKjNn+ZLLbTqnN2U/RY34l5EdkxaRUAXTi9eaa9YKXjeH6T
Fr4869tVTODR2tYu6Ha9W/ME9qG03GFY8hk7XcsPX5FLIN6kkD+NvwacKyWAPqFz
X1rTvtdntQJP3GXC82+x3hib2i+O11k=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:31 2025 by rpki-client