Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/059afa76-784b-3a1f-87f8-19f9820ce29d.roa
File:                     059afa76-784b-3a1f-87f8-19f9820ce29d.roa (raw, json)
Hash identifier:          SZUr2Rs+PXcN1kZ/yhCuxC6YYfw0FnOKeGl/s1nGPn8=
Subject key identifier:   5D:AF:20:20:5A:6B:7C:A2:D9:91:AF:B2:CB:07:D1:A9:B3:69:EB:71
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E05F520801D7BF746AB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/059afa76-784b-3a1f-87f8-19f9820ce29d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.93.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:05:f5:20:80:1d:7b:f7:46:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e39bdb79-d59e-447e-b6ce-4f3df616fdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:f7:0d:65:cd:98:c1:52:b2:80:8d:81:05:
                    15:40:26:70:03:dc:34:04:22:79:c0:e6:3e:74:f4:
                    90:cf:82:2c:1d:e8:bc:b8:d5:92:bd:43:c8:5c:35:
                    bc:ad:9e:95:fc:19:b2:7e:23:4a:95:93:9c:86:ab:
                    97:42:9e:9b:ea:f9:cc:a5:27:7d:21:c8:2a:7b:3c:
                    6f:bc:8a:4d:e0:9c:8a:f2:66:6e:78:ea:1f:b1:ae:
                    88:d5:05:c2:77:a2:fc:07:ae:42:5f:9c:71:06:61:
                    ed:68:93:36:f1:f4:a5:8e:37:00:0a:46:fd:f8:b0:
                    80:be:09:a9:f8:40:3e:08:2d:6b:95:41:27:1a:32:
                    32:25:00:aa:5e:9c:7f:cf:f2:e7:59:36:90:7b:9c:
                    25:5d:07:83:12:53:c8:d5:73:f9:0f:31:49:d5:9b:
                    c1:d7:ad:4d:70:df:10:12:7d:3e:0f:46:2a:ae:28:
                    b6:3b:00:07:89:e5:5d:b5:a5:ee:93:20:88:ee:52:
                    8f:65:09:a4:52:95:28:74:77:9b:4a:ab:48:6f:54:
                    b3:11:28:74:03:74:f8:b5:7a:c9:cb:52:50:1c:cd:
                    24:b5:9b:48:ce:01:f4:72:dd:6c:a3:03:5a:83:3f:
                    f1:3a:eb:16:31:9f:73:ff:44:95:47:94:e1:ba:43:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AF:20:20:5A:6B:7C:A2:D9:91:AF:B2:CB:07:D1:A9:B3:69:EB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/059afa76-784b-3a1f-87f8-19f9820ce29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.93.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:d0:ed:c9:37:ef:33:5a:da:9d:24:a6:12:7c:45:9b:55:
         5c:f7:48:65:8d:2f:66:b6:7b:27:81:49:29:ca:e8:45:b5:cc:
         b7:1f:a3:3c:24:08:55:65:a6:8a:6b:b9:df:f1:60:96:e4:2c:
         72:8b:a6:c3:b7:14:39:81:ae:cf:5d:ce:85:30:05:9f:71:46:
         b9:be:1d:84:a5:89:ae:37:78:df:2a:73:85:7d:4a:77:d7:27:
         8a:b9:72:29:80:47:43:4c:fa:8b:23:fb:42:fe:36:27:0e:2f:
         31:8f:80:b0:c8:08:b7:d0:78:af:28:39:bb:53:4e:fa:53:6a:
         fe:1a:79:49:0c:bb:c0:ca:04:41:e5:a8:84:0e:ef:0a:d8:c5:
         59:81:51:1b:06:8f:00:a5:ec:6d:73:dc:4a:d6:e8:91:42:05:
         93:0d:df:27:8f:7e:dd:fb:f6:3e:63:2b:50:a6:e7:bb:cf:cb:
         c8:f2:09:39:b4:36:9b:a4:56:1c:c9:ce:83:4c:21:7d:e9:92:
         dc:11:11:a7:ea:8e:cd:44:16:1a:29:24:77:fc:20:24:b1:79:
         3f:e1:2a:85:06:9a:73:59:5b:43:49:28:fc:d9:ca:d8:cf:87:
         68:d2:98:9d:e3:2f:43:8a:43:0f:fa:15:58:5f:6e:f6:e0:f7:
         43:5f:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:27 2025 by rpki-client