Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86a7f0b7-50aa-3cb2-b3fa-45331fdbec0f.roa
File:                     86a7f0b7-50aa-3cb2-b3fa-45331fdbec0f.roa (raw, json)
Hash identifier:          4xHHW1y96CH9GwrXp4i+EC9AYQT+VoNq5KdISYdNdZA=
Subject key identifier:   88:73:21:68:79:7C:28:D1:66:E1:36:82:7E:01:5A:79:0C:B3:2F:51
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161792177BD711F13BC1480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86a7f0b7-50aa-3cb2-b3fa-45331fdbec0f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     40754
IP address blocks:        68.118.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:79:21:77:bd:71:1f:13:bc:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=66f3f46e-7682-4e03-b40e-d7b9be7b311a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:19:40:31:43:3f:0b:de:f6:34:a5:38:8c:b4:
                    55:46:1f:31:47:77:eb:c4:c1:36:05:ab:61:35:a8:
                    53:f1:c9:6a:5e:d2:ed:ec:d4:51:30:b7:4f:b7:86:
                    14:aa:74:60:de:51:a4:57:6a:7f:a5:b0:7e:35:2e:
                    02:4c:47:13:5a:67:4f:43:31:9c:62:6f:0a:98:53:
                    6a:17:bb:fa:0c:e0:b3:2c:2d:99:69:60:81:7c:cb:
                    cf:bc:3e:2b:d9:b9:17:4f:21:37:fc:6f:5a:8c:d6:
                    e6:79:86:23:8b:49:61:f4:f0:b2:d6:6b:5b:18:33:
                    6d:2c:a5:26:4c:d4:a0:9d:78:8b:52:8a:dd:96:13:
                    af:e3:b5:aa:e5:a5:df:c9:b0:1e:d4:1d:a9:fe:f4:
                    64:bd:a9:60:ec:c5:b5:02:a6:3a:b9:49:fe:d2:f3:
                    e7:57:a6:52:83:05:a9:5c:58:6a:65:b6:80:30:a5:
                    57:ce:51:f3:9e:70:4f:b8:e7:b9:75:84:3e:e9:ff:
                    e2:97:14:50:c5:f4:11:67:09:2f:db:1b:e9:c1:59:
                    39:2f:e6:e2:40:59:9c:43:69:9e:23:92:e1:74:b9:
                    fb:0f:ed:96:07:d5:34:3e:86:75:9b:b6:89:47:5a:
                    00:1d:dc:ef:55:98:6c:5b:9d:51:7d:b7:3b:1a:cf:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:73:21:68:79:7C:28:D1:66:E1:36:82:7E:01:5A:79:0C:B3:2F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86a7f0b7-50aa-3cb2-b3fa-45331fdbec0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:64:ca:86:ef:0f:c6:15:8a:d3:b7:83:b5:0f:df:b4:56:
         ad:e6:97:8e:6c:b8:1b:5d:12:4b:7e:bd:c0:56:88:10:33:9f:
         96:1e:bf:cb:02:1a:8d:24:09:ec:ff:79:0d:5d:86:0d:9d:8b:
         94:99:0a:88:09:41:36:96:8f:58:5b:10:97:36:38:44:b2:b6:
         22:b7:73:73:a4:3d:fa:ab:db:3e:da:ab:5a:43:42:84:86:5d:
         29:cf:d3:c6:1e:d8:32:7e:e1:71:a7:39:1e:1d:a3:87:d9:aa:
         91:c3:1e:d7:7a:b7:04:b9:e9:57:96:31:ff:14:39:58:aa:cf:
         93:00:af:f2:29:40:9c:89:c1:bb:c3:d7:4d:d3:75:79:c1:7c:
         6f:f0:dc:d7:55:27:9f:ae:a8:27:11:0e:b1:ea:96:8c:a4:66:
         20:05:0d:3a:0e:16:c5:55:60:f3:f2:c2:45:20:cd:e3:31:35:
         35:ef:4a:d9:7b:11:73:12:65:7c:a2:c7:9b:57:a0:42:3d:ee:
         0c:2f:2d:cd:6d:df:37:e3:b7:c8:ff:f2:85:4b:0e:0c:fe:0f:
         9b:3d:f9:ee:70:b7:13:7d:71:3d:c2:59:7f:18:53:a1:4a:5b:
         84:2f:25:ba:0d:20:e4:10:0a:54:5a:99:bc:34:ea:3e:1b:e8:
         33:a3:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:28 2025 by rpki-client