Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af522695-ec47-3eb5-8cbf-0203a049e14b.roa
File:                     af522695-ec47-3eb5-8cbf-0203a049e14b.roa (raw, json)
Hash identifier:          B/ztDCB2ulc+/aAzCqvacIIay2z+xDkDcuNGggF684E=
Subject key identifier:   57:56:13:AB:AA:B1:92:80:FC:1E:27:26:F6:3E:81:FB:D1:26:7D:A7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161E92E2FDA8DCFBE67B3D0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af522695-ec47-3eb5-8cbf-0203a049e14b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.117.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:e9:2e:2f:da:8d:cf:be:67:b3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=887d5a18-cd88-4654-ad7b-976070b80c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:fb:c7:74:c7:43:dc:86:70:44:80:3b:15:
                    db:fb:8f:18:a4:9e:7e:57:1d:e6:39:b4:66:9e:9c:
                    b2:a3:98:ca:fe:46:6e:6a:d6:c9:fc:94:15:b6:02:
                    7a:0a:79:bb:51:f1:d6:db:d1:01:bf:89:8b:ef:d0:
                    e2:25:88:c6:73:ae:51:a9:c1:9c:18:94:64:a0:34:
                    46:8c:84:2d:ba:ef:ab:38:06:d5:c6:96:be:d8:69:
                    90:a8:15:ec:71:82:67:8f:de:ac:f7:c8:d6:2c:93:
                    9b:f6:60:58:41:3f:c1:3f:65:c8:f5:8a:3e:ff:c3:
                    c0:96:66:56:eb:38:61:19:26:d7:f5:a8:9f:07:e4:
                    8a:04:5b:8c:e9:0d:85:48:65:04:3c:a6:96:6b:87:
                    5f:3e:2b:32:fa:d7:37:82:31:4c:3f:b0:f1:6b:5c:
                    cd:9d:63:32:31:1d:4d:4a:d3:ab:3d:b9:72:66:2f:
                    c1:15:3e:fb:ed:a8:20:db:2b:f9:74:03:94:aa:05:
                    c8:2f:43:d8:dd:b8:3c:fe:21:0a:57:af:64:5f:00:
                    ff:c9:0b:37:08:5b:8d:8b:2e:ad:d5:09:48:4b:18:
                    93:36:64:da:df:4c:73:32:9a:c3:88:12:22:d2:45:
                    c6:44:24:5a:bd:b3:c2:ab:80:42:2d:36:e0:35:68:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:13:AB:AA:B1:92:80:FC:1E:27:26:F6:3E:81:FB:D1:26:7D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af522695-ec47-3eb5-8cbf-0203a049e14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:0e:4f:a2:34:58:53:60:b8:b1:c0:05:19:65:ce:ed:01:
         20:ef:1c:9e:8c:41:28:29:01:bd:e9:f5:da:b5:45:19:b1:92:
         4d:05:6b:f0:fd:a1:1d:5f:bb:1a:0e:84:be:2e:20:30:4a:44:
         ad:e5:3c:dd:3f:16:44:47:05:1d:9c:36:c0:e4:5b:2b:35:cd:
         bd:f0:92:03:3c:c0:f6:69:85:6d:bf:39:22:ff:61:43:0e:ac:
         a8:be:f7:68:93:86:bf:bd:a0:12:90:5a:6d:62:aa:8b:bf:8f:
         41:43:c7:1f:f6:20:7b:91:56:8d:9e:77:21:44:1d:fa:dd:44:
         74:df:12:0e:52:62:b0:06:6e:23:7e:88:c4:38:cb:e3:55:79:
         2e:4c:bb:b9:80:82:33:b8:fd:49:dc:98:ab:c6:4c:3f:10:5b:
         4b:25:79:9b:66:69:7e:ac:c3:2f:d3:95:e6:d9:d0:1c:58:13:
         96:6d:3a:57:33:4d:6e:b6:8a:c6:69:a7:10:ac:a7:21:6f:bd:
         34:34:03:66:85:e0:94:a9:bc:c5:4c:65:b2:7e:a0:9c:00:28:
         12:97:00:b3:f7:e2:a0:58:5d:b1:09:dd:8c:c3:b8:6a:81:ad:
         06:2a:c2:71:51:f4:e2:aa:bc:b5:bb:6c:12:b7:ab:cc:38:c3:
         8d:a2:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:31 2025 by rpki-client