Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa
File:                     9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa (raw, json)
Hash identifier:          lsfHufFHzX0YuprYwmmx7LntfAj8YCtAgNW4GaFqqS4=
Subject key identifier:   3E:41:B3:B6:EA:19:53:DE:F8:9E:13:E1:B3:C9:16:00:FC:63:B2:BC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FB8D6F5974C0A6F9138A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        68.112.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:b8:d6:f5:97:4c:0a:6f:91:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=6b8e6eb9-c2fe-4184-b74a-55f85b215509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:71:17:39:88:de:11:0d:7d:a6:4a:13:53:
                    b6:9f:bd:20:e3:ff:b8:d1:3e:b7:49:c1:e1:1d:73:
                    d7:d3:19:14:2a:03:1b:bb:10:33:b4:8f:ab:67:ec:
                    15:59:e8:66:ee:c5:37:60:c0:ea:20:78:99:0b:75:
                    92:81:c8:78:0c:6f:ee:f6:6d:95:2d:8c:e8:11:93:
                    b5:ca:a3:b7:88:1e:b0:de:ad:b2:4d:47:d3:5b:01:
                    ee:f3:90:46:9c:75:a0:b2:2b:b0:e8:09:ec:3f:a9:
                    83:62:8f:0d:fc:bc:f3:9f:c6:61:e1:fd:f8:6c:4c:
                    b1:d4:3d:75:dd:0b:07:c6:43:6c:d0:c6:0f:d2:1e:
                    07:83:5f:06:dd:a7:88:8d:27:f7:9b:cd:49:91:2c:
                    e5:75:43:4c:db:81:b6:fb:c0:3b:ff:9c:52:53:3b:
                    2d:3a:be:8d:02:04:a2:e6:c0:80:cb:fa:3c:91:65:
                    3f:6a:d0:b5:8f:ba:73:98:19:f4:b9:b9:20:e4:d7:
                    39:0d:d0:03:95:81:82:18:f8:39:94:28:16:fd:ec:
                    70:d5:18:50:d2:cb:19:da:88:c4:eb:0b:b7:f2:bf:
                    c3:0b:eb:52:4f:a0:32:6b:eb:c5:13:0e:a8:01:f7:
                    11:1d:3d:ac:10:5f:6d:6c:0b:37:5a:d0:3a:17:14:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:41:B3:B6:EA:19:53:DE:F8:9E:13:E1:B3:C9:16:00:FC:63:B2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a4a4f58-0072-3cf3-a01d-b8b68fff95d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:d7:d4:42:8a:85:e5:c1:1c:19:df:04:2b:b9:f3:30:a5:
         3d:ba:bc:d3:4c:d2:b6:a2:fe:59:4a:06:9f:79:c2:0d:2e:52:
         0e:79:f9:cc:a0:cc:bf:b1:d9:5a:80:cf:19:8c:e3:f6:78:a5:
         b6:95:74:d1:ae:a8:29:08:16:9e:c0:76:24:18:9e:c0:de:6d:
         cd:37:ed:d8:70:12:17:b0:f4:2e:9b:c4:1f:c4:e4:09:2d:33:
         74:36:ae:78:c8:ea:1f:bd:a7:56:f7:ca:dd:57:5f:83:bb:d7:
         d6:57:10:7d:41:1f:0e:b6:cf:c4:fc:3b:8c:ba:d8:94:85:e9:
         b3:33:4f:84:15:07:c9:5f:d0:b5:07:8b:47:41:c9:dd:e1:8e:
         f2:20:53:83:af:be:0c:f8:5d:bb:e6:56:80:e6:7b:1a:2f:59:
         00:32:e6:59:ff:ee:53:f0:f1:8d:e0:fd:a3:2d:77:8b:6d:d1:
         cd:62:ed:29:a1:1b:dc:15:74:a7:76:76:32:20:b7:81:41:67:
         da:80:bc:16:5c:64:af:ac:02:21:8d:4d:f3:93:60:cb:82:d9:
         fb:be:fc:87:f2:71:16:e5:60:1c:f3:70:d5:e7:c9:d5:9d:36:
         ec:c0:a2:64:2d:38:f4:dc:69:96:a9:c7:1f:8e:88:97:1b:c3:
         b3:93:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:43 2026 by rpki-client