Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa
File:                     e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa (raw, json)
Hash identifier:          c4bGrHtqk2PJbquiQq3WZSJULph3hCJ/9S4sJ2xlxBc=
Subject key identifier:   B7:88:4D:F9:0A:F2:14:80:89:C4:A1:2A:79:CE:A9:DB:D4:AA:65:4C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FBB2A2E65388B54706820
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        68.112.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:bb:2a:2e:65:38:8b:54:70:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=bccf4ee2-0926-49a7-b841-05e0c0421d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ee:01:d2:90:4b:61:6e:da:ee:61:19:77:3d:
                    9f:f6:ea:23:a4:05:51:79:cf:67:de:1a:4c:78:ca:
                    5a:86:d6:3c:c2:9d:fa:b8:a1:e7:1d:e7:63:88:aa:
                    50:9c:e0:b4:30:fd:9e:0e:40:86:37:d8:88:20:c8:
                    ec:f2:c8:cf:c0:d2:0d:79:49:8e:f6:d8:67:44:df:
                    ae:33:db:09:89:3c:1c:64:7d:8d:b7:92:e5:ff:60:
                    0f:ef:c3:bb:93:d6:d7:6b:c9:b3:4d:96:ca:ca:35:
                    99:1a:6c:5e:5a:0a:46:c0:54:ed:c2:28:e7:4b:27:
                    b7:25:85:0e:e4:d9:9c:de:13:d2:89:4d:da:02:c4:
                    78:8e:19:01:60:81:56:6c:58:96:95:7d:32:03:47:
                    1b:5d:86:2b:6f:ef:8d:0e:47:0d:3c:d8:b2:44:1b:
                    a6:cd:0c:e5:d3:fa:97:92:43:b1:05:79:29:4b:83:
                    87:22:81:91:9d:3a:e6:4c:83:00:bb:53:09:f0:1f:
                    8b:d7:f4:3f:ba:57:7a:dc:00:dd:c8:22:d3:a1:04:
                    a5:8f:b6:b0:5e:97:df:17:aa:7b:33:74:c7:8a:cd:
                    dc:9d:69:6a:37:10:c6:03:ba:2c:9a:08:02:c3:d2:
                    9f:ce:09:29:33:6a:f9:8b:49:86:64:3f:a6:18:ca:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:4D:F9:0A:F2:14:80:89:C4:A1:2A:79:CE:A9:DB:D4:AA:65:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e36aaa20-b906-3295-9c0d-7ea9b9e1fcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.112.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2a:9a:5a:49:c7:be:30:b9:f7:b3:2d:99:30:8b:98:2b:44:
         f4:11:e7:06:84:6f:6e:ca:33:c8:72:a2:c5:e3:94:73:9b:4b:
         5d:2c:e3:1a:fe:ea:df:ce:0d:f4:88:30:57:4b:ca:91:05:7e:
         84:b1:fb:9d:f2:2a:f4:68:70:e1:dc:77:ea:58:12:45:22:3f:
         d6:90:1a:c5:fe:a5:e1:17:ff:c6:8d:aa:63:ea:0c:04:9c:f8:
         0a:e4:62:2d:48:7e:dc:00:ad:c1:6c:57:3a:5e:9d:f7:c1:02:
         ff:83:5a:7f:59:c9:0d:b0:68:62:8a:ca:61:81:9b:cc:b2:2b:
         4f:51:32:91:5d:ec:a8:45:f8:24:be:9c:cb:cf:3e:1f:e9:07:
         7e:d5:6d:84:1a:50:cd:b6:ee:de:f3:ef:60:3e:e2:66:83:35:
         a4:32:90:2d:2d:65:c2:d8:aa:64:c3:b1:c5:df:83:ce:b6:50:
         9d:5a:a5:42:7e:5c:f9:40:2e:fd:31:ef:b2:02:4e:de:55:31:
         a5:22:59:28:36:af:d3:44:59:19:ff:c5:2c:db:5e:da:0e:4f:
         f9:54:91:e9:cf:6d:20:df:92:29:8d:80:80:e1:03:de:86:f2:
         7b:2a:af:27:b6:84:bc:41:70:fa:82:ed:61:ed:62:4a:e2:11:
         c7:54:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:09 2026 by rpki-client