Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84f15057-a9f6-3563-af47-db309e468e84.roa
File:                     84f15057-a9f6-3563-af47-db309e468e84.roa (raw, json)
Hash identifier:          AdpcrH3ISzuiggJZStDTJ6BfmmIz7a4NnI/naD/XeAs=
Subject key identifier:   4F:20:38:07:83:F1:D6:C7:D4:DF:92:2E:77:9E:06:36:23:23:BB:2A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DD9E2AE8A3C8F941CB700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84f15057-a9f6-3563-af47-db309e468e84.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.118.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:d9:e2:ae:8a:3c:8f:94:1c:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=65ea33e9-5113-4c5c-9a83-26c3d7b22bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:8c:99:56:50:cd:39:b9:d5:4f:61:bd:37:
                    2d:2b:44:35:e1:30:c0:a6:47:62:c0:e8:9e:4c:ab:
                    90:25:96:31:84:23:79:3e:2c:ee:c8:b3:d4:7a:d5:
                    fb:65:f6:ff:97:67:8e:24:a6:de:10:8f:0b:f0:45:
                    4d:c5:2f:12:5e:c3:1e:f6:c7:3b:9a:3a:c8:36:d8:
                    3a:48:8e:6c:5f:f1:37:4d:1e:b8:36:cd:3e:b6:80:
                    81:12:43:be:bd:9f:df:c2:5f:de:74:7f:77:36:fd:
                    96:f6:e8:3d:f9:ea:1a:b6:cf:b1:4f:1d:c2:46:f5:
                    e7:c0:18:73:dd:61:06:67:20:c9:50:bc:3f:48:19:
                    16:e7:3b:9a:ab:cd:88:c6:6f:bf:fa:2d:7d:2b:97:
                    10:74:d6:cf:8b:a1:66:23:e1:fe:6e:eb:30:8f:36:
                    a2:b3:ae:8f:5c:a9:08:4c:a5:6a:e8:de:6b:81:31:
                    6e:46:b1:65:05:05:ce:af:2e:fd:01:9a:fd:8f:fd:
                    14:94:42:3e:72:24:7e:51:a3:86:c6:0b:d3:41:7b:
                    84:eb:49:10:db:bd:e4:a8:69:44:3f:d7:0f:54:31:
                    6d:82:1d:d4:d6:4f:fb:f1:4f:c3:d8:eb:a2:1e:55:
                    e8:76:d1:d6:33:3d:7d:5d:e5:95:05:15:e4:df:68:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:38:07:83:F1:D6:C7:D4:DF:92:2E:77:9E:06:36:23:23:BB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84f15057-a9f6-3563-af47-db309e468e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:49:84:33:f7:0d:7e:e1:86:5c:44:51:90:c0:f0:02:3c:
         d8:ae:c8:32:31:93:5a:a4:25:9f:69:28:40:d3:fd:5e:80:c9:
         e8:16:fc:a3:23:f7:88:50:86:b1:14:04:c1:c6:5c:e3:d1:f5:
         ad:42:99:b7:70:5f:41:df:b5:6b:0c:04:21:3e:b3:12:e9:11:
         2b:0d:50:d3:92:60:63:b0:f4:79:5a:c0:be:0e:61:6e:c7:0c:
         3b:75:07:f8:65:93:79:a5:4b:7a:39:bb:db:e9:8f:d1:a2:71:
         73:78:c9:b7:b2:e9:8c:33:18:3e:6f:16:de:32:2d:c5:37:16:
         17:08:27:b0:e6:ee:d8:16:c0:e6:9d:d9:64:94:8a:18:1a:01:
         52:4f:52:8f:ae:9f:5a:11:cc:a6:31:32:d8:bb:2a:3e:2d:2e:
         1d:ed:e2:d3:f1:6b:a5:7d:80:d6:ab:c7:01:d6:ba:52:78:8f:
         0b:eb:0c:1d:1e:0c:43:33:73:4a:9c:a1:9a:bc:b5:a7:fd:0a:
         89:88:19:57:7d:93:26:1a:22:e1:e0:9c:9c:a4:a3:41:19:cd:
         75:36:b9:95:92:ad:6d:4f:93:66:db:7c:4a:36:26:ea:23:31:
         49:72:3d:ed:f0:e2:52:20:09:70:99:1b:ad:fc:0f:68:4d:56:
         3b:12:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:53:59 2026 by rpki-client