Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb60c5d9-cd80-3590-b218-ae9128f4d043.roa
File:                     fb60c5d9-cd80-3590-b218-ae9128f4d043.roa (raw, json)
Hash identifier:          Se+6OtWGIxkLutPD7DpP3b55+4KRnKriJj/tqvScqoI=
Subject key identifier:   2A:65:6A:07:8A:F7:20:56:30:32:5F:64:FB:05:33:52:E3:9E:BC:D0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161541F26D78D0290B372E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb60c5d9-cd80-3590-b218-ae9128f4d043.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        68.118.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:54:1f:26:d7:8d:02:90:b3:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4f0e15a0-2062-43a9-9147-3753febf5bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:d0:46:b0:85:17:6f:f3:9c:36:c3:e0:e3:
                    1d:b0:7d:6d:b5:cb:66:9d:cc:04:88:7f:9f:18:09:
                    36:12:02:4b:36:5f:8f:f8:4d:df:2d:21:89:be:49:
                    cb:9b:94:9c:bc:99:80:25:9f:7c:91:c2:fe:42:bb:
                    e1:bc:37:4f:3f:73:b6:20:dc:57:75:c6:9c:c4:0f:
                    9d:6b:ff:c9:a1:8b:e0:01:23:26:8b:fc:ec:f5:c4:
                    ab:8c:a3:97:53:90:b9:23:de:2b:e2:94:b8:2e:65:
                    a1:ae:3d:46:51:2b:69:83:50:a3:f0:0a:7f:8f:66:
                    1d:a3:88:cc:70:c4:ad:47:c5:30:bf:ce:d6:94:45:
                    7a:88:a6:e2:3c:c4:1f:5c:62:dc:3c:a0:3c:98:f0:
                    08:af:3d:9f:65:58:6d:70:62:4e:ab:4d:46:30:4c:
                    d3:e3:fd:97:51:12:86:0f:55:07:29:4e:e6:4d:92:
                    ed:d1:59:e9:c0:a1:ca:d5:f8:39:1d:89:aa:c7:ed:
                    d1:73:8d:0b:bb:39:a4:7e:6b:76:dd:8d:04:6a:43:
                    c0:6c:72:3a:1b:65:a4:49:ef:92:b8:3e:0a:97:f3:
                    3d:08:b5:bc:78:c0:8d:4f:8f:d4:c7:fe:b4:39:ad:
                    46:c4:ff:40:4d:c3:f0:ff:2e:51:87:f6:8d:2d:58:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:6A:07:8A:F7:20:56:30:32:5F:64:FB:05:33:52:E3:9E:BC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb60c5d9-cd80-3590-b218-ae9128f4d043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.118.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:84:44:3d:f3:9e:d3:7e:4b:66:ee:6b:9f:67:f6:64:a7:a9:
         2c:b8:2a:e0:d7:86:c6:b6:05:2e:36:93:c0:5c:17:bf:a1:3f:
         d2:89:c5:c1:1f:07:ea:3a:35:06:80:1b:18:e7:67:0a:e6:c4:
         16:a4:2c:19:d1:1f:27:23:c7:15:6c:2e:83:78:35:ec:64:ce:
         64:48:6c:9d:4b:18:a3:3f:a1:15:f5:79:70:66:52:e1:0b:0e:
         f0:f7:ad:08:cb:2e:06:f9:2a:e6:60:ea:91:4c:d8:ce:22:08:
         a1:86:c6:3e:a7:00:5b:03:79:a8:bc:3b:49:43:21:1f:e7:03:
         d6:b4:c1:f3:b9:d7:38:7c:0e:79:26:ff:25:06:ae:dd:50:3d:
         9b:b3:65:55:83:e9:42:50:15:13:ee:53:5e:2c:94:1b:c2:6d:
         75:8b:15:03:d2:79:56:3c:e5:40:bf:59:a0:18:de:ae:a7:0c:
         d2:5e:6c:9a:f0:16:41:7b:c8:a6:19:63:0e:e6:6d:97:ce:eb:
         dc:72:ec:62:46:63:d0:f6:50:c1:fe:62:27:1c:7c:f8:63:c8:
         e6:54:df:18:b3:f4:ad:d2:ba:7e:38:2d:22:e4:e5:71:c0:8b:
         46:be:a6:b7:9d:99:0a:8a:af:c3:e0:e7:42:94:5f:a2:21:b1:
         32:5f:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:35 2025 by rpki-client