Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d95a9910-f916-3b7d-ac7c-44e9e3d04947.roa
File:                     d95a9910-f916-3b7d-ac7c-44e9e3d04947.roa (raw, json)
Hash identifier:          vnSoGLQH0r5w3sEa0vVmDFmXDBB74IDNqb8owMonS6o=
Subject key identifier:   AD:CC:38:A4:75:A4:C9:00:11:11:AD:60:CF:87:36:6B:1D:E0:8B:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E4752FF45845D1006C800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d95a9910-f916-3b7d-ac7c-44e9e3d04947.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        68.113.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:47:52:ff:45:84:5d:10:06:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5ba01836-8f52-45cf-b83c-44684f89c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:ca:7f:1e:4d:e8:cd:4c:c1:7c:3c:a1:0e:
                    c1:78:37:aa:f1:5d:a4:69:a8:5d:d8:36:5f:6a:5d:
                    cd:bb:b0:ed:e5:bb:6b:a2:0c:66:07:c7:bf:63:0e:
                    ec:cd:50:cc:b6:b1:17:a8:29:9c:fd:f3:60:ba:15:
                    cf:d6:51:6e:86:15:e7:d8:5f:d9:6a:cd:0c:58:42:
                    07:b8:26:e3:70:ed:e7:92:9a:03:fa:78:d7:c1:c4:
                    7b:76:04:71:02:10:ec:21:ef:3d:6c:22:23:26:75:
                    80:4b:11:9e:62:7f:2d:2f:f4:14:d8:3f:71:e4:c7:
                    c5:be:f8:bc:ed:14:8b:55:8e:55:62:8b:23:1f:bb:
                    1b:31:bc:7f:27:08:c0:7a:e2:c7:36:78:b0:aa:de:
                    cc:f8:97:b8:c0:93:d4:39:42:87:fc:f7:8f:11:d5:
                    3c:1d:c4:2e:76:08:ee:7c:36:82:e8:16:2e:d0:34:
                    ed:f3:47:32:76:f6:1f:a7:06:a8:e3:8b:73:17:70:
                    e1:a1:fb:64:7d:4a:07:ae:2c:15:df:d3:56:3f:16:
                    8c:de:f7:42:d0:3f:6e:0d:8b:6d:b4:49:1d:b8:eb:
                    ee:1f:4b:43:20:b4:d6:e5:23:bc:45:29:79:dd:a2:
                    d5:bd:60:fa:15:13:4f:e2:f0:45:91:e9:4b:69:c0:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CC:38:A4:75:A4:C9:00:11:11:AD:60:CF:87:36:6B:1D:E0:8B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d95a9910-f916-3b7d-ac7c-44e9e3d04947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.113.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:7d:26:38:73:34:7e:00:b3:47:bd:43:f5:3a:c4:c0:83:
         3d:3a:0c:ef:a2:54:d2:77:9c:51:9b:65:df:6d:68:36:f3:04:
         50:6e:4d:b0:7d:ac:97:30:49:84:d8:2d:b1:e4:6d:bb:29:ee:
         b9:cc:e0:13:c0:49:e9:d0:03:7c:86:73:82:93:1c:9d:e6:7a:
         ca:e4:27:c6:5c:89:86:d0:c3:f1:1f:c8:36:46:66:58:a7:14:
         cc:22:11:1e:ca:0d:3e:38:1b:1d:a8:cb:1b:57:16:e2:a0:0c:
         b6:56:fb:ba:7a:6e:08:ce:a9:bd:ad:88:84:9e:2c:70:d5:d6:
         c7:fc:70:0f:97:b6:1e:d4:24:e3:a5:0a:ca:83:29:5e:9b:c6:
         2d:f4:f1:c4:2f:5b:3a:0c:96:c9:be:79:c7:2d:cb:e9:6b:de:
         d7:4a:2c:c8:cd:90:40:76:20:ab:e0:7c:3b:5f:5b:86:ce:2d:
         61:bf:c0:d8:ba:6d:50:4d:c2:18:61:8f:c3:2e:2e:4c:c7:86:
         4f:4f:ac:27:de:6c:35:61:7c:32:02:1f:7e:dc:72:ba:fb:47:
         4f:46:f1:b9:3d:99:da:56:16:b6:9f:ab:a2:71:9a:70:00:72:
         b1:9c:24:1b:66:80:6c:df:16:33:ee:87:cf:68:9b:64:78:a2:
         ee:46:ec:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXkdS/0WEXRAGyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
NWJhMDE4MzYtOGY1Mi00NWNmLWI4M2MtNDQ2ODRmODljOThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuTKfx5N6M1MwXw8oQ7BeDeq8V2kaahd2DZf
al3Nu7Dt5btrogxmB8e/Yw7szVDMtrEXqCmc/fNguhXP1lFuhhXn2F/Zas0MWEIH
uCbjcO3nkpoD+njXwcR7dgRxAhDsIe89bCIjJnWASxGeYn8tL/QU2D9x5MfFvvi8
7RSLVY5VYosjH7sbMbx/JwjAeuLHNniwqt7M+Je4wJPUOUKH/PePEdU8HcQudgju
fDaC6BYu0DTt80cydvYfpwao44tzF3DhoftkfUoHriwV39NWPxaM3vdC0D9uDYtt
tEkduOvuH0tDILTW5SO8RSl53aLVvWD6FRNP4vBFkelLacBTEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK3MOKR1pMkAERGtYM+HNmsd4IvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDk1YTk5MTAtZjkxNi0z
YjdkLWFjN2MtNDRlOWUzZDA0OTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRHFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbFfSY4czR+ALNHvUP1OsTAgz06DO+iVNJ3nFGbZd9taDbzBFBuTbB9
rJcwSYTYLbHkbbsp7rnM4BPASenQA3yGc4KTHJ3mesrkJ8ZciYbQw/EfyDZGZlin
FMwiER7KDT44Gx2oyxtXFuKgDLZW+7p6bgjOqb2tiISeLHDV1sf8cA+Xth7UJOOl
CsqDKV6bxi308cQvWzoMlsm+eccty+lr3tdKLMjNkEB2IKvgfDtfW4bOLWG/wNi6
bVBNwhhhj8MuLkzHhk9PrCfebDVhfDICH37ccrr7R09G8bk9mdpWFrafq6JxmnAA
crGcJBtmgGzfFjPuh89om2R4ou5G7A0=
-----END CERTIFICATE-----
Generated at Wed Oct 14 16:13:17 2026 by rpki-client