Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa
File:                     f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa (raw, json)
Hash identifier:          H7rPLvoBJ29HGswp+ziW1SdUzBGJIGNkaJFNyoGpIBw=
Subject key identifier:   D0:AF:C8:15:65:8A:9A:15:0E:16:E0:99:FC:B6:F9:5F:E1:D4:8A:D9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161F25C37132C8541732C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.116.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:f2:5c:37:13:2c:85:41:73:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7f28170b-8e4b-4c15-999c-cbc9680d71fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:e1:d4:6b:0b:dd:c7:bb:d9:3e:c2:f6:25:
                    ad:35:88:e2:95:0c:61:76:5e:83:fa:4d:5f:4a:77:
                    50:18:63:40:02:11:cd:e0:bc:da:13:2c:f1:80:fe:
                    62:6a:f2:72:58:4d:29:79:31:8f:9e:b1:92:1b:1a:
                    ad:3b:e0:e2:db:78:9a:27:22:3e:ab:25:33:f9:06:
                    2f:9c:12:4a:f6:e2:fb:71:a3:e0:5d:4f:69:e0:a8:
                    c4:ef:1f:96:a7:b3:11:3c:32:12:28:6b:2d:b3:88:
                    9b:a5:4b:c4:5d:c8:17:f3:68:9f:cb:50:a5:9b:b5:
                    5e:d8:c3:db:32:39:96:2e:32:d5:27:ea:5e:e3:ea:
                    f2:a4:88:78:09:a7:03:9f:63:fb:e6:a3:64:00:7e:
                    18:78:62:30:87:61:3e:de:58:76:c6:a5:ec:f3:75:
                    69:3a:7e:9f:0e:d5:e3:15:d3:ae:6a:fe:59:c4:3f:
                    5f:8b:19:41:d7:07:cb:5c:02:96:2e:51:26:aa:2e:
                    97:d1:8c:cb:40:0a:a9:ff:49:e9:a8:f5:94:99:59:
                    af:9a:5c:f0:be:30:16:ae:16:9d:57:46:9f:b8:f0:
                    43:5c:7e:94:a9:ac:43:b5:5d:5d:a6:b2:8d:74:25:
                    58:f8:d2:28:17:e6:d7:e8:dc:41:9f:3e:bf:51:1e:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:C8:15:65:8A:9A:15:0E:16:E0:99:FC:B6:F9:5F:E1:D4:8A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f7150a43-49b9-3487-b0a8-4cc7912aa3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.116.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:39:e3:11:6f:6d:87:95:dc:c8:b6:7c:52:18:0d:fd:5d:f1:
         7c:6c:2f:fb:40:db:6a:b9:f9:f5:df:d2:09:88:18:c7:04:57:
         ce:e5:bd:4c:8a:f3:68:8d:22:e6:ff:8e:8b:75:93:73:42:0f:
         29:e8:51:7e:d5:cf:f5:cd:2b:96:f5:20:03:5d:35:1f:af:4e:
         b2:9d:7e:b6:9d:4b:a3:da:a8:1a:ae:b5:0e:cc:20:1b:8a:c0:
         c2:82:03:dd:b2:7b:fc:0c:d1:9f:9b:04:39:ec:e4:e8:17:6f:
         0c:6f:13:29:db:f9:f6:57:4c:e2:c8:7f:42:f0:54:42:01:a3:
         99:b7:1e:bd:ea:ca:42:ef:e3:ec:61:5a:94:1a:f4:7d:b3:96:
         c4:4b:e5:71:77:0c:eb:50:26:9b:24:b1:4d:74:45:c2:a9:4e:
         6d:c8:01:5a:8c:74:d3:7b:de:24:1e:d9:3f:c9:c6:48:d3:c3:
         65:ce:af:a2:a7:c8:0f:2f:ef:23:e8:87:62:ad:c5:93:4d:48:
         c4:89:c5:3a:88:30:01:a1:80:48:45:8b:d7:6f:54:c0:b3:29:
         1a:5a:6d:62:e7:b8:4b:78:cc:21:0e:39:d2:ac:6c:3e:e3:83:
         2c:15:60:1f:da:c0:bb:36:99:05:56:31:7e:9c:28:65:cc:82:
         20:7f:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:55:06 2025 by rpki-client