Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db2aefc9-84e2-3a57-abc1-b7d76e0112c0.roa
File:                     db2aefc9-84e2-3a57-abc1-b7d76e0112c0.roa (raw, json)
Hash identifier:          Dp1JydWy65HxGsHF0Q7UsEK3B0/AmDC98lGhODCsRmE=
Subject key identifier:   CF:BD:E2:56:78:2F:05:39:D6:BA:6D:3F:0A:DA:80:53:8F:02:19:48
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16153B34E2A7F004566EB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db2aefc9-84e2-3a57-abc1-b7d76e0112c0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.115.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:53:b3:4e:2a:7f:00:45:66:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=acff1745-8aba-4f8f-97ff-911762e25ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:a2:f1:65:4f:d1:74:16:8c:52:12:09:fb:
                    0c:7b:27:50:a2:4d:95:10:0a:b9:10:cc:52:10:f2:
                    24:3f:23:c2:c1:07:a1:32:7f:c9:cb:98:e7:6a:8b:
                    58:3f:71:00:bd:df:57:12:05:fa:9a:55:52:9f:90:
                    1d:67:78:5b:a7:51:b2:54:08:26:8c:14:36:82:a5:
                    31:0f:87:7e:81:12:60:62:bf:e3:ca:71:d1:66:e1:
                    1f:07:6d:a1:d7:72:33:ad:ee:b9:f4:7c:87:f9:b1:
                    f0:ee:ec:64:fe:df:c3:48:42:60:86:8a:77:33:96:
                    e3:5c:fb:ae:45:a1:e1:d4:d5:57:eb:7d:57:c0:89:
                    2b:93:d2:28:a6:88:27:82:32:ca:64:56:d0:a3:7f:
                    9d:4f:00:1d:95:91:f1:2a:8c:68:27:3c:3e:07:c6:
                    a2:09:c1:d2:b2:62:2e:54:23:72:29:a4:47:0a:20:
                    ef:60:91:cd:56:b9:99:3b:13:56:cf:9b:17:82:86:
                    0e:54:41:e4:53:00:60:78:ca:16:ad:06:80:15:fb:
                    31:11:6f:6e:36:24:70:88:8b:b9:51:d0:d6:03:18:
                    bb:d6:26:0d:2a:ec:29:87:11:2d:fc:62:7f:c5:5f:
                    a7:c0:a3:20:00:59:11:e6:97:de:c4:5f:7b:b4:83:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BD:E2:56:78:2F:05:39:D6:BA:6D:3F:0A:DA:80:53:8F:02:19:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db2aefc9-84e2-3a57-abc1-b7d76e0112c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.115.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:13:9d:80:9d:17:95:6e:a1:f2:20:2a:bb:c1:8a:85:c8:5c:
         d9:c8:f7:39:34:a8:c4:56:c8:72:9b:a5:bb:3f:93:a3:e2:b2:
         f5:f7:2f:fc:86:93:ce:3e:40:49:aa:ff:a7:54:96:fa:55:1e:
         39:7a:42:bd:c0:7a:b0:e6:63:fc:30:e5:94:e1:8c:70:a8:8c:
         07:71:9f:3f:dc:67:fb:26:99:4b:23:1b:70:97:26:55:62:90:
         ac:af:9c:7a:cb:c7:7b:ca:3d:17:3e:55:26:86:cc:82:45:2d:
         87:84:97:fb:3e:81:f6:2c:9b:86:5d:cf:01:a4:ba:6b:b1:6a:
         12:50:92:68:a9:8e:43:ad:20:a6:1d:c5:d6:26:af:8b:b5:f3:
         a0:61:7c:b1:c8:2d:23:1d:54:3a:60:c4:8c:1f:51:b5:6c:d1:
         dd:dc:60:eb:c9:28:90:38:3c:2e:4e:7d:df:ec:6a:6d:6b:6f:
         76:41:04:64:7a:d0:69:d0:7f:18:8a:a6:97:74:52:f5:f8:8a:
         f2:f8:f3:73:97:bf:ae:d6:7e:74:c4:02:e5:e6:70:1c:a2:59:
         84:05:86:b8:ab:c3:33:14:06:c3:55:df:6f:6e:3a:29:9f:c7:
         3d:4f:c4:ce:43:f8:b8:a3:fa:06:c5:40:41:f5:03:ac:c5:c0:
         b2:4f:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:27 2025 by rpki-client