Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa
File:                     857c88c7-6202-315f-a120-c9da40381623.roa (raw, json)
Hash identifier:          fbaO+Nj6aYLCie5wWsPOUE5TbCIGJpWpW7hzKQIOd20=
Subject key identifier:   D3:C7:EF:C8:C4:C2:A0:F1:EA:70:BA:2F:41:E5:BD:76:73:08:08:17
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F504AE900998EEFF9C480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        68.188.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:50:4a:e9:00:99:8e:ef:f9:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=3e3b5d67-f7bc-4f40-ae2a-a45cd60e2407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:e4:af:67:03:ba:20:0d:a7:d3:14:4d:92:
                    91:dd:e1:0e:d3:ac:4f:ea:d3:e4:1f:6f:7b:bd:e4:
                    6d:52:84:3d:45:b1:c8:13:6d:de:70:ec:31:c9:f0:
                    cf:79:f2:e8:b3:de:ae:4c:b4:16:95:0a:f8:56:2b:
                    25:1e:c7:d7:d8:c6:aa:6c:c2:90:79:86:36:51:df:
                    74:9d:0c:7f:10:50:8b:6a:e4:b5:45:a1:38:fc:d8:
                    92:35:5d:0d:56:28:b8:b9:e5:01:45:ad:35:18:37:
                    89:21:d2:6e:16:e6:90:a2:82:89:93:0d:15:84:62:
                    77:4c:86:d8:dc:94:58:21:b3:f1:6f:7d:57:d0:b3:
                    b9:9c:33:43:97:51:40:80:a6:72:f3:d9:ae:7d:a6:
                    d7:87:49:73:ed:58:f7:49:88:a8:b7:7a:1f:7e:06:
                    32:bc:eb:75:7c:82:88:50:eb:6a:38:89:30:08:f6:
                    7b:23:64:2a:70:3d:01:8c:7f:31:d7:b5:fc:12:7b:
                    c9:97:24:0b:3f:80:dd:bd:8d:00:8b:e8:e0:df:7c:
                    36:6f:3b:69:e3:a8:75:23:6e:24:72:61:56:64:93:
                    dc:fe:fa:86:a2:cf:89:cd:73:28:05:33:f2:36:6b:
                    f9:d4:97:86:4c:7a:ec:07:36:f4:1b:03:93:5f:aa:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C7:EF:C8:C4:C2:A0:F1:EA:70:BA:2F:41:E5:BD:76:73:08:08:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.188.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:8a:72:55:72:a5:20:8e:8c:8c:8c:f8:75:64:57:ae:35:
         9c:0d:86:a4:15:d2:78:35:3e:16:1c:b7:3a:3d:fe:de:5a:05:
         cb:a5:a8:d3:90:03:8c:41:ae:8a:a8:37:97:7f:7a:fd:06:1b:
         5b:0f:d8:ed:e4:0c:19:26:f6:56:26:8e:fa:90:6c:eb:b1:ae:
         5c:43:e6:c4:cd:16:79:8e:85:aa:96:62:ab:3f:a6:2a:fe:7b:
         52:99:fd:80:a5:74:3b:20:7f:45:e5:f7:50:f9:19:11:e5:77:
         9d:59:2a:5e:da:6b:43:a0:54:2a:27:21:b1:2b:53:c9:b5:ed:
         c0:82:ca:b4:ce:f2:84:d6:53:ed:b1:a6:b1:cf:ee:bd:d6:26:
         7a:57:cf:a5:95:15:ec:4f:18:7c:a9:43:30:b8:d7:a1:37:89:
         6a:ee:64:9d:0a:8e:5a:f8:9f:09:f7:6d:d2:63:26:24:c7:66:
         19:77:5c:38:8a:f8:b4:86:d0:cc:b0:fa:bf:66:4f:e4:cf:27:
         d0:29:88:65:f5:a3:9e:4c:31:88:fd:8e:d8:ea:a7:b4:4f:f2:
         c5:34:9f:06:fa:09:a6:37:79:d1:64:da:d6:53:a2:bf:3d:93:
         01:56:e0:10:5c:c3:c3:55:c9:d8:07:44:63:9c:21:fb:2e:b3:
         1e:8e:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:55:50 2026 by rpki-client