Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0bd69613-2596-3647-839a-f0f6741013ce.roa
File:                     0bd69613-2596-3647-839a-f0f6741013ce.roa (raw, json)
Hash identifier:          73OpDLd089wgM0tj4VStDePtDSta/PrXdYDNRONpl4o=
Subject key identifier:   32:F0:66:45:83:6F:4B:E9:E1:FC:F4:E6:F7:76:75:DE:B8:78:4C:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD08D556AF776893FF5B0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0bd69613-2596-3647-839a-f0f6741013ce.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.232.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d0:8d:55:6a:f7:76:89:3f:f5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=dbe5f3b0-e5fc-4a9b-9865-f70d41b106d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:bc:1b:9b:8e:fa:f5:9d:22:5c:1c:a4:4e:
                    c9:c7:85:6e:0d:e4:8f:84:07:0c:40:8f:af:cb:75:
                    f6:5a:1d:d8:d4:45:eb:69:38:4a:44:e9:a0:4e:83:
                    01:a5:c8:1c:e5:df:1c:f3:d0:00:95:4a:a2:35:18:
                    ed:e8:69:eb:f1:cd:01:a1:39:67:49:48:76:1f:61:
                    b0:0b:4d:19:55:2a:b6:c9:92:d9:ac:f8:25:e5:73:
                    f6:51:2c:2f:14:cc:cb:df:b4:97:48:86:49:f5:ea:
                    eb:6c:f3:02:37:17:e6:66:36:ef:83:20:08:c6:ea:
                    ac:c6:f1:18:db:44:8f:ef:0f:36:29:68:db:aa:4c:
                    dc:9c:24:8c:fa:1c:51:42:d9:8a:d6:bd:c9:87:bd:
                    f0:d4:d3:5b:c4:41:dc:2f:bf:a3:4d:93:ba:e8:dc:
                    cf:6e:21:48:93:5a:cc:2b:90:9b:a5:3c:78:ff:49:
                    9d:45:60:b3:ae:1b:71:e6:99:1d:9d:f8:9e:a5:ff:
                    ba:ad:75:84:a5:9d:8e:d0:35:a5:ea:d6:59:00:46:
                    d9:c9:09:5e:1d:3c:75:65:04:d1:18:25:27:5b:4f:
                    2f:11:ca:be:35:88:ba:96:38:5d:26:9b:72:73:bd:
                    11:3f:3f:8c:54:a1:d2:73:03:32:88:de:0b:ce:2f:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F0:66:45:83:6F:4B:E9:E1:FC:F4:E6:F7:76:75:DE:B8:78:4C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0bd69613-2596-3647-839a-f0f6741013ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.232.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:04:0a:8e:3c:b0:f1:86:95:11:5a:5f:90:60:7a:44:20:
         f1:34:f1:c3:60:c3:64:a8:ea:1d:b0:8f:8f:fe:25:f7:5a:0f:
         b7:86:b2:d3:4d:71:2a:7b:1b:dc:e9:6d:83:70:fc:2e:23:04:
         4f:8a:81:99:5f:8d:0c:1f:89:0d:86:95:4e:b4:89:23:24:3b:
         d6:6f:56:15:6d:69:fb:95:74:5c:09:27:1f:6a:57:76:ea:35:
         1b:b8:cc:d1:25:75:cf:44:3c:45:a1:0d:9b:15:36:0f:de:10:
         79:c3:e6:01:84:de:af:0e:99:d1:e2:1b:e0:d6:dc:1a:85:17:
         6e:ef:b2:78:04:b0:f9:56:d5:b5:4b:41:95:e6:44:49:d2:86:
         61:e4:0c:6d:d3:22:33:03:65:08:4a:67:8f:6c:5e:c1:85:83:
         29:59:21:0c:9b:59:ee:08:eb:8d:cb:cc:ae:fc:d0:bb:af:86:
         a0:78:d0:79:07:6c:4a:10:d9:2f:c7:84:9e:02:8e:2a:f2:4f:
         0d:34:38:c3:a2:d3:0d:b6:bf:74:77:6c:35:5d:57:5b:03:ea:
         4b:05:81:f3:a0:b9:de:d1:ee:23:7d:74:70:26:41:81:2a:d0:
         c1:4d:a3:e8:da:90:58:3f:46:de:91:a3:60:69:c0:ab:08:45:
         56:78:01:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdCNVWr3dok/9bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZGJlNWYzYjAtZTVmYy00YTliLTk4NjUtZjcwZDQxYjEwNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipm8G5uO+vWdIlwcpE7Jx4VuDeSPhAcMQI+v
y3X2Wh3Y1EXraThKROmgToMBpcgc5d8c89AAlUqiNRjt6Gnr8c0BoTlnSUh2H2Gw
C00ZVSq2yZLZrPgl5XP2USwvFMzL37SXSIZJ9errbPMCNxfmZjbvgyAIxuqsxvEY
20SP7w82KWjbqkzcnCSM+hxRQtmK1r3Jh73w1NNbxEHcL7+jTZO66NzPbiFIk1rM
K5CbpTx4/0mdRWCzrhtx5pkdnfiepf+6rXWEpZ2O0DWl6tZZAEbZyQleHTx1ZQTR
GCUnW08vEcq+NYi6ljhdJptyc70RPz+MVKHScwMyiN4Lzi8iXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLwZkWDb0vp4fz05vd2dd64eEwcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGJkNjk2MTMtMjU5Ni0z
NjQ3LTgzOWEtZjBmNjc0MTAxM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGL+hAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaqBAqOPLDxhpURWl+QYHpEIPE08cNgw2So6h2wj4/+JfdaD7eGstNN
cSp7G9zpbYNw/C4jBE+KgZlfjQwfiQ2GlU60iSMkO9ZvVhVtafuVdFwJJx9qV3bq
NRu4zNEldc9EPEWhDZsVNg/eEHnD5gGE3q8OmdHiG+DW3BqFF27vsngEsPlW1bVL
QZXmREnShmHkDG3TIjMDZQhKZ49sXsGFgylZIQybWe4I643LzK780LuvhqB40HkH
bEoQ2S/HhJ4CjiryTw00OMOi0w22v3R3bDVdV1sD6ksFgfOgud7R7iN9dHAmQYEq
0MFNo+jakFg/Rt6Ro2BpwKsIRVZ4AfY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:43 2025 by rpki-client