Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa
File:                     042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa (raw, json)
Hash identifier:          /6QkLwaDA9wVMrhUamzDC1GJIDEcqZ5Tw+/1RuPNmcc=
Subject key identifier:   FC:22:3A:D4:23:6E:1E:B2:82:A1:07:31:19:AA:0A:B1:E2:C9:76:6C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD2D1ECA4B9888DB8D620
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        96.40.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d2:d1:ec:a4:b9:88:8d:b8:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0220d12e-5d72-447d-b7fe-02f98e971fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:78:bf:05:13:a0:59:d8:ed:b5:b4:f6:44:
                    b4:37:54:00:a3:76:7d:33:fb:3e:aa:1c:68:ac:95:
                    a6:ef:60:5b:b3:d8:f6:22:7b:32:44:9e:3f:ac:87:
                    d1:f1:96:cc:31:40:c1:e1:fc:bf:08:63:a1:da:d2:
                    68:8b:83:3a:e2:32:53:88:79:c6:86:b9:d9:2d:3a:
                    25:af:a8:ce:2a:5d:f2:b7:df:16:ae:59:3b:c7:46:
                    6a:06:46:2a:2d:11:69:f3:f7:1c:12:f1:47:f5:dd:
                    06:20:55:41:9b:2a:59:2b:a6:8e:41:0c:8b:97:c8:
                    d6:8b:b9:bd:9b:46:85:f9:ad:7d:ad:2c:50:3f:85:
                    b0:d9:a1:ff:12:38:d2:c0:68:72:df:7a:5a:45:6b:
                    99:26:c2:2f:21:b0:ad:46:0c:e7:25:42:b4:c2:61:
                    ef:f9:d3:57:d3:a7:1a:2a:b1:e9:99:fc:21:7e:43:
                    91:9a:f2:97:11:fe:d0:d9:11:de:df:ee:8b:52:90:
                    ba:16:96:a1:5b:10:6e:ee:8a:c1:1c:3e:57:a6:26:
                    36:3d:ba:31:81:97:09:0d:23:5c:64:c8:9e:ba:49:
                    41:ba:0d:52:73:b5:d7:70:40:9d:2a:be:39:30:2e:
                    a7:45:b4:8c:5d:d8:cb:01:6f:1f:81:b1:03:00:b6:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:22:3A:D4:23:6E:1E:B2:82:A1:07:31:19:AA:0A:B1:E2:C9:76:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.40.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:e7:fa:47:2b:04:87:1c:8b:76:75:8a:02:fc:4e:c5:0f:e8:
         54:8c:78:7f:5c:2b:4b:f3:d3:3d:a5:52:5a:e8:44:94:ac:73:
         75:4d:ba:e8:c1:22:c1:e7:e0:da:5d:45:78:c0:1b:33:dc:b6:
         b9:f0:1d:2b:9b:b2:a2:54:e8:b0:ff:f0:32:3f:62:62:d4:5a:
         c6:4e:04:b2:47:41:4b:da:f4:a6:09:f1:6e:f7:ab:c9:ab:41:
         1f:1f:0d:11:bd:33:b0:c0:8a:69:9f:bf:9a:01:bd:e4:06:26:
         0b:cb:68:a0:a2:dc:76:c6:f4:e8:e3:61:98:5d:dd:da:cf:f1:
         d1:b8:4f:2f:f3:96:97:4a:e8:62:1f:74:e5:13:42:11:65:4a:
         50:d5:2f:d3:15:72:1f:df:8e:13:d1:18:b6:0c:9a:b7:39:c2:
         5d:25:50:bf:a8:71:0f:d0:1a:51:42:40:88:79:f6:20:8c:16:
         5c:6e:01:21:4a:1a:52:41:2e:b7:94:db:5c:86:39:26:26:f0:
         87:43:a4:47:92:e6:57:8b:6b:80:6f:34:4a:d7:2e:10:d4:c4:
         0f:4a:05:72:04:c1:04:83:40:ae:31:e8:3b:64:74:13:11:fe:
         c1:88:08:ee:55:fb:18:4e:d8:c0:6f:c4:39:ea:6f:3e:1f:94:
         89:d3:dd:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdLR7KS5iI241iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MDIyMGQxMmUtNWQ3Mi00NDdkLWI3ZmUtMDJmOThlOTcxZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxch4vwUToFnY7bW09kS0N1QAo3Z9M/s+qhxo
rJWm72Bbs9j2InsyRJ4/rIfR8ZbMMUDB4fy/CGOh2tJoi4M64jJTiHnGhrnZLTol
r6jOKl3yt98Wrlk7x0ZqBkYqLRFp8/ccEvFH9d0GIFVBmypZK6aOQQyLl8jWi7m9
m0aF+a19rSxQP4Ww2aH/EjjSwGhy33paRWuZJsIvIbCtRgznJUK0wmHv+dNX06ca
KrHpmfwhfkORmvKXEf7Q2RHe3+6LUpC6FpahWxBu7orBHD5XpiY2PboxgZcJDSNc
ZMieuklBug1Sc7XXcECdKr45MC6nRbSMXdjLAW8fgbEDALYPFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwiOtQjbh6ygqEHMRmqCrHiyXZsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDQyYjFhM2MtOGFlZC0z
ZWMwLThkODUtZWNmNjBiNmEyNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANrn+kcrBIcci3Z1igL8TsUP6FSMeH9cK0vz0z2lUlroRJSsc3VNuujB
IsHn4NpdRXjAGzPctrnwHSubsqJU6LD/8DI/YmLUWsZOBLJHQUva9KYJ8W73q8mr
QR8fDRG9M7DAimmfv5oBveQGJgvLaKCi3HbG9OjjYZhd3drP8dG4Ty/zlpdK6GIf
dOUTQhFlSlDVL9MVch/fjhPRGLYMmrc5wl0lUL+ocQ/QGlFCQIh59iCMFlxuASFK
GlJBLreU21yGOSYm8IdDpEeS5leLa4BvNErXLhDUxA9KBXIEwQSDQK4x6DtkdBMR
/sGICO5V+xhO2MBvxDnqbz4flInT3UU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:37:10 2025 by rpki-client