Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ad9b0e1-76b8-3c02-9384-15281b264ed1.roa
File:                     9ad9b0e1-76b8-3c02-9384-15281b264ed1.roa (raw, json)
Hash identifier:          E+AcAFD1cRMP3kd2x/GoSyIA4ehtDwn9LO8E+0SjNDg=
Subject key identifier:   DA:9B:81:77:33:36:B5:5B:C1:39:70:43:97:EE:90:B8:2F:EF:75:9D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F54F2F7167072F9B7AD30
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ad9b0e1-76b8-3c02-9384-15281b264ed1.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        68.185.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:54:f2:f7:16:70:72:f9:b7:ad:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=2b1ff63e-13cb-47db-9ef7-c687f8ea5e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:c5:28:0b:65:fe:f8:53:2c:00:17:5b:36:
                    a2:92:3c:ae:fc:74:6a:38:34:03:02:cb:ce:23:25:
                    5d:2e:15:e8:ec:a6:1e:40:95:dd:76:5a:d4:4c:ab:
                    be:a7:04:27:3d:0f:72:1b:68:1d:3a:37:b3:f5:5e:
                    93:7b:1f:96:cb:69:c9:e4:05:08:a9:ea:bf:29:ed:
                    50:69:6f:37:79:88:8e:4f:41:00:a7:21:c3:dd:42:
                    28:f1:15:39:26:1b:c6:a5:cf:ca:be:40:61:82:d2:
                    9d:24:15:59:e7:fb:13:e7:41:d2:fa:cf:c0:17:b0:
                    89:72:6e:45:e4:21:e8:d8:7b:c1:56:e8:e6:e4:b3:
                    8b:cc:23:44:0d:2d:c6:9d:ea:f2:84:db:63:76:dc:
                    ca:91:8e:50:65:e5:89:20:2d:28:93:9a:20:64:5d:
                    04:52:a5:2e:07:48:fb:a7:84:49:2a:06:c1:a3:c4:
                    89:39:23:45:29:77:fd:98:52:d3:38:b1:e2:e7:ad:
                    67:c9:86:36:fe:2c:16:c7:15:29:d0:5a:ea:a2:0b:
                    e1:36:71:6f:26:e1:19:f4:69:e9:ea:2b:c5:3d:d1:
                    3a:3f:33:0f:c9:dc:84:bb:a5:59:49:c5:0e:58:48:
                    ef:e3:11:10:fb:56:b7:34:70:bc:dd:23:e8:ad:c6:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9B:81:77:33:36:B5:5B:C1:39:70:43:97:EE:90:B8:2F:EF:75:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9ad9b0e1-76b8-3c02-9384-15281b264ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.185.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:62:5d:61:36:1a:2b:c5:41:2e:62:94:43:6f:bb:0c:10:
         63:01:3c:bf:86:06:84:31:f1:9c:9d:51:f2:02:c1:2d:c3:eb:
         0c:33:ae:bd:99:1c:44:dc:9e:6a:cb:10:bf:ce:ab:d8:68:05:
         d6:50:ff:a5:16:65:c3:90:79:a1:35:e6:53:69:2c:5d:bd:9b:
         f2:b4:fa:a4:a2:e3:d6:54:4c:59:24:f2:2a:73:58:ed:28:f6:
         ba:ec:37:be:6e:57:aa:70:77:c6:b5:cd:cc:e2:d2:8f:d1:2b:
         e5:4c:66:82:fc:15:98:57:73:da:57:a3:fe:76:6c:ca:45:e6:
         e2:03:3f:74:77:1b:72:5c:0e:16:5d:08:ff:e4:a5:13:ff:ab:
         f6:b7:5d:37:58:6f:ae:6d:ad:27:c9:58:a1:8d:22:0d:01:31:
         5b:ed:a2:55:d0:a0:31:49:6e:5d:cc:cb:a0:cc:85:df:04:2e:
         d7:96:17:65:e0:76:d4:0d:fc:75:06:53:b0:5d:a0:ba:68:6b:
         3b:9e:68:9d:79:4a:70:81:82:7e:76:17:d3:7b:d9:19:7d:0f:
         eb:2a:ad:b0:69:5e:79:42:f9:35:bc:71:48:94:53:13:3f:c9:
         80:41:13:55:bd:cb:40:01:31:d8:4f:98:c4:06:95:03:15:04:
         6e:d0:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:41 2026 by rpki-client