Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1603e35c-fee9-3f0e-8f7e-ee1615709f14.roa
File:                     1603e35c-fee9-3f0e-8f7e-ee1615709f14.roa (raw, json)
Hash identifier:          6Jqvjv8jTbtSrBDyx9WXBIbEHZ1LxMgiNK/jJQLhujI=
Subject key identifier:   AD:C1:AF:09:D4:AC:8A:1D:F1:7E:62:B2:7D:7B:2E:2A:0A:C3:34:02
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B76F2A2A7C7FFEB8DBE9ACB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1603e35c-fee9-3f0e-8f7e-ee1615709f14.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     20115
IP address blocks:        75.130.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a2:a7:c7:ff:eb:8d:be:9a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=d196b95e-2b8b-48dc-9c5d-e88072b8f228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:d7:bf:80:14:ce:ac:60:c1:d9:27:47:a0:
                    49:a3:db:23:66:97:e5:37:38:8b:92:7c:12:09:09:
                    23:03:23:3b:18:df:af:f8:40:6c:14:81:7c:f1:c5:
                    42:82:f0:f7:56:1b:8e:7c:09:b8:07:74:5c:14:34:
                    94:d1:da:b5:44:75:80:76:55:40:fc:93:ba:fb:cb:
                    5c:19:92:c3:83:d5:bc:36:ca:2a:e9:24:89:b4:3b:
                    37:3c:3d:80:48:a1:50:3a:a3:fa:31:4f:9a:84:23:
                    99:9a:bb:92:e8:49:86:10:66:6f:1c:4b:87:f6:dc:
                    86:a0:37:cd:71:f7:2f:51:18:81:b1:17:c0:10:79:
                    87:79:cf:b4:02:2e:a3:e9:bf:17:1c:b7:ec:dd:07:
                    69:62:1a:c2:fe:ce:6f:e2:4e:9e:20:d9:d5:34:e0:
                    9e:c8:72:2c:2a:66:ec:64:82:2a:ad:b9:7a:b0:67:
                    b7:15:54:7e:7d:74:e9:a2:df:a2:fc:31:55:b9:c0:
                    ce:5f:c2:96:0e:57:75:cb:b4:dc:0f:b7:d4:76:47:
                    41:d6:cb:bb:35:f0:7e:08:bd:3e:8f:20:14:30:a2:
                    57:a8:3a:e5:c6:1a:93:11:0b:bb:5a:30:75:5a:36:
                    36:66:2a:27:0a:52:49:81:6a:72:59:61:09:fe:22:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:AF:09:D4:AC:8A:1D:F1:7E:62:B2:7D:7B:2E:2A:0A:C3:34:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1603e35c-fee9-3f0e-8f7e-ee1615709f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.130.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:51:9b:0e:69:15:fd:62:35:b0:cc:28:9d:53:14:53:24:
         fa:49:5c:e1:b0:bf:8c:db:81:76:40:d1:22:20:5b:34:ba:de:
         af:c0:f2:c0:4f:5f:4d:98:a1:00:35:d2:2f:5d:fe:2f:08:66:
         0b:29:9c:e4:a1:84:2f:da:9c:75:75:b6:d4:f5:a2:aa:d0:e5:
         45:7c:0e:0a:cc:df:47:79:5a:6e:33:38:39:39:a5:d3:17:d7:
         23:a4:34:90:fc:76:5b:2b:52:95:d3:d5:d9:c5:1b:38:ae:94:
         a3:d4:1e:ec:e4:78:34:eb:2f:bb:f8:c0:f0:da:a3:01:3c:55:
         32:3d:fd:91:0f:00:ce:94:47:3a:0a:29:3d:8c:c8:7a:fd:39:
         92:a7:09:3e:17:43:35:48:00:e1:51:55:d8:4a:f1:29:38:d6:
         08:6a:af:56:21:e0:7b:b2:ac:2f:fb:0e:18:c0:fe:4f:f3:a3:
         ce:b8:0c:0c:7d:1e:5d:2b:e9:b5:1c:8f:dd:fd:b2:73:94:e4:
         0c:4a:59:d6:1e:ae:27:4f:0e:75:91:d1:e8:a1:12:28:94:b4:
         5a:69:0f:f8:ba:11:cb:47:63:47:e6:5e:49:2a:6f:f2:7c:10:
         12:68:17:9e:4d:57:17:4f:d1:76:7f:c6:c4:ab:b6:b0:68:68:
         e1:1b:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:49 2025 by rpki-client