Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/107505d9-ea3a-387c-a00a-47fe930b5437.roa
File:                     107505d9-ea3a-387c-a00a-47fe930b5437.roa (raw, json)
Hash identifier:          0S/o03+NGj+ISEHORexXLZtWkiygZBdSx2bWVuXbf40=
Subject key identifier:   71:26:45:D4:2C:9B:56:CF:A4:B9:ED:87:BB:18:7D:FD:44:8F:2E:D3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6354DDB7F547F8E1A700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/107505d9-ea3a-387c-a00a-47fe930b5437.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        96.39.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:63:54:dd:b7:f5:47:f8:e1:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f1415c60-5109-40db-a69a-2ae7b00adb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:e0:1e:51:86:48:c9:f9:e0:82:0f:64:7d:
                    07:3f:5c:3a:ae:32:13:8a:ec:a3:e5:7c:2a:a7:7f:
                    3d:29:08:fd:e8:b2:59:cf:77:18:e1:7b:51:81:b2:
                    73:c5:23:55:38:c1:fe:5b:b2:0e:45:b9:13:ec:83:
                    58:b2:d1:c8:a7:60:0a:76:91:42:18:6d:9a:c6:e8:
                    b3:12:8b:1a:f5:e1:b5:7d:d2:a3:7e:1e:27:6b:2e:
                    9f:52:77:ce:e4:1c:fb:3b:60:22:cb:25:fe:68:20:
                    5e:c0:5d:51:50:54:eb:c8:e7:4d:2d:96:24:2e:c9:
                    f1:7d:c7:46:9b:39:9d:03:35:1c:86:9c:cf:d4:61:
                    33:f1:6b:55:12:76:72:00:11:20:14:02:1f:40:3c:
                    06:0b:2d:87:a2:a6:82:6e:22:89:e5:51:65:02:0d:
                    3d:f4:66:16:b6:b4:26:55:b9:1a:78:a8:cd:64:0c:
                    7c:fd:10:89:3e:aa:89:34:23:8e:38:87:66:f3:e7:
                    bf:6f:39:91:91:67:77:0f:28:dc:4e:24:fc:61:4c:
                    55:8a:8b:66:38:99:3b:28:a5:9a:fa:bc:fc:98:b7:
                    56:5a:8a:f9:a7:56:0a:01:8d:a4:8e:81:0c:8e:01:
                    60:f1:b7:05:8e:40:25:09:5e:5a:e6:d3:a8:73:c9:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:45:D4:2C:9B:56:CF:A4:B9:ED:87:BB:18:7D:FD:44:8F:2E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/107505d9-ea3a-387c-a00a-47fe930b5437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.39.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:6e:e2:3a:5f:d6:8c:39:08:c2:3d:52:25:a3:48:08:b6:a9:
         ce:3f:30:5e:1c:08:a7:81:e9:17:90:9d:97:a4:74:af:fa:81:
         91:f9:45:94:4e:af:ec:34:2a:9d:92:c9:0a:1b:ad:ea:ae:e6:
         d0:e0:12:e5:b2:8b:c1:0d:24:6e:6d:ce:72:13:d9:c7:fc:f8:
         9f:f9:e9:d6:e0:d5:c7:36:e4:75:b7:3d:4c:48:8f:06:78:04:
         ed:6e:48:c8:6f:c3:09:07:23:ac:18:64:67:4d:9a:86:74:6e:
         ad:65:a6:c3:ad:19:b5:39:f2:53:5c:87:67:52:ff:7f:7b:30:
         8e:cd:c9:e9:10:8d:b1:50:c6:3a:3c:bb:3c:6d:19:59:73:f3:
         73:3b:4e:2c:a7:af:4a:03:de:19:3b:a1:2b:25:33:ea:db:bf:
         86:46:b3:52:d5:0d:1f:17:66:b3:de:5e:e4:2e:ff:cf:e5:aa:
         aa:c9:02:9c:a9:89:e5:23:46:2c:8b:a6:61:74:0e:24:b8:a4:
         84:d9:16:49:be:d5:23:67:45:0b:37:d6:cf:8c:58:e8:42:ca:
         e1:04:60:d6:89:59:67:ac:06:79:ca:f2:d1:06:60:2a:e1:20:
         49:15:59:bf:9a:e3:f6:c3:17:ef:9e:fa:d1:ef:b9:63:d6:91:
         bf:48:ab:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHWNU3bf1R/jhpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZjE0MTVjNjAtNTEwOS00MGRiLWE2OWEtMmFlN2IwMGFkYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBvgHlGGSMn54IIPZH0HP1w6rjITiuyj5Xwq
p389KQj96LJZz3cY4XtRgbJzxSNVOMH+W7IORbkT7INYstHIp2AKdpFCGG2axuiz
Eosa9eG1fdKjfh4nay6fUnfO5Bz7O2AiyyX+aCBewF1RUFTryOdNLZYkLsnxfcdG
mzmdAzUchpzP1GEz8WtVEnZyABEgFAIfQDwGCy2HoqaCbiKJ5VFlAg099GYWtrQm
VbkaeKjNZAx8/RCJPqqJNCOOOIdm8+e/bzmRkWd3DyjcTiT8YUxViotmOJk7KKWa
+rz8mLdWWor5p1YKAY2kjoEMjgFg8bcFjkAlCV5a5tOoc8lbRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHEmRdQsm1bPpLnth7sYff1Ejy7TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMTA3NTA1ZDktZWEzYS0z
ODdjLWEwMGEtNDdmZTkzMGI1NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMdu4jpf1ow5CMI9UiWjSAi2qc4/MF4cCKeB6ReQnZekdK/6gZH5RZRO
r+w0Kp2SyQobrequ5tDgEuWyi8ENJG5tznIT2cf8+J/56dbg1cc25HW3PUxIjwZ4
BO1uSMhvwwkHI6wYZGdNmoZ0bq1lpsOtGbU58lNch2dS/397MI7NyekQjbFQxjo8
uzxtGVlz83M7Tiynr0oD3hk7oSslM+rbv4ZGs1LVDR8XZrPeXuQu/8/lqqrJApyp
ieUjRiyLpmF0DiS4pITZFkm+1SNnRQs31s+MWOhCyuEEYNaJWWesBnnK8tEGYCrh
IEkVWb+a4/bDF++e+tHvuWPWkb9Iq/0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:05 2025 by rpki-client