Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
File:                     17b8cc27-ee15-3d35-a022-3b562756648a.roa (raw, json)
Hash identifier:          IaziPbJwC0yx3jwgkJrjde67QeesE9pz7sMwTxDoej8=
Subject key identifier:   9C:34:DC:27:51:09:4A:70:AE:68:6C:4A:F2:3A:3B:46:BF:52:E1:8D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDABDF2C2D2C98AFAD580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        104.159.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:da:bd:f2:c2:d2:c9:8a:fa:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fee2b935-014f-45fa-912f-f5c71308b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:6e:1f:92:d9:c7:34:fd:58:f9:3b:71:11:
                    b0:ac:a7:aa:3f:db:57:f6:13:b0:4b:14:9a:5e:95:
                    50:9f:a8:d1:ad:0e:10:bd:25:18:9f:63:46:77:f8:
                    cd:68:c8:3b:82:26:8a:db:18:98:05:ad:56:22:c2:
                    84:30:18:ad:e5:ee:58:2d:5a:50:7e:9b:9d:0f:16:
                    e1:1d:86:d8:be:2d:a1:d3:b6:50:b0:11:14:d0:0c:
                    6b:06:c1:14:80:b1:39:b4:05:9c:5d:74:7b:8b:12:
                    d0:6f:e0:8e:eb:5e:b9:02:cb:db:f6:e3:4b:85:ba:
                    a3:fe:cc:f0:ce:20:4e:b4:35:b0:41:a4:ba:72:78:
                    de:b7:14:34:1d:f2:e9:a1:3a:0a:bc:e3:66:44:c4:
                    9d:14:18:b3:6e:cd:8c:a9:5b:e5:0b:b0:f9:91:5e:
                    ef:ad:e0:cc:59:df:45:96:bd:b8:de:16:16:f4:1e:
                    50:64:2e:6e:42:3b:0d:bc:9f:9e:04:61:0e:50:c0:
                    66:4f:3a:26:4e:23:a3:48:9e:ac:b0:9d:e0:d6:31:
                    c6:4c:72:3d:b3:fe:ec:a9:64:16:da:23:92:6e:a6:
                    6f:25:ac:c0:fb:7b:18:c2:fa:ed:09:5c:eb:d1:31:
                    71:a8:40:45:7a:b0:c3:82:de:d2:fa:6e:aa:84:b6:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:DC:27:51:09:4A:70:AE:68:6C:4A:F2:3A:3B:46:BF:52:E1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.159.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:6a:ea:86:5f:22:85:64:66:5d:d3:53:d3:d1:99:ae:7c:
         56:5c:be:ba:42:e9:5b:6b:07:64:d4:aa:f7:87:a2:30:39:1c:
         f6:f1:3e:31:61:de:30:61:9d:3e:18:da:b7:1c:88:47:e3:a7:
         de:c5:05:4b:7b:83:c7:3c:ef:01:b9:14:c0:0f:d7:6e:57:39:
         49:1a:67:74:fb:a7:69:c2:07:18:39:f0:e8:27:28:ca:a2:02:
         b3:2d:09:44:3a:0a:65:f3:f3:30:94:e5:9a:52:3f:a1:86:d5:
         78:f3:75:a7:17:f4:f8:38:52:b8:b7:02:5e:ab:bf:33:7c:03:
         c5:7a:07:b2:03:16:3b:33:dd:f4:da:56:f9:79:e2:f4:94:b3:
         7c:01:1b:65:84:26:68:0c:04:47:5a:59:90:e1:c8:3b:f2:74:
         ad:b0:14:b0:0f:dc:5a:2d:f7:63:af:ff:0d:04:3b:1d:02:3f:
         33:32:5d:0f:50:cf:3e:8b:9d:33:00:b7:30:39:a2:32:66:ef:
         46:80:73:36:38:90:b7:58:30:19:1d:4b:7c:a0:97:d7:0b:8d:
         f9:db:a2:fd:fa:fe:3f:9a:87:69:cc:50:c1:74:c9:f5:c8:fd:
         74:6e:9f:7e:bc:d8:3e:a1:e2:cc:9f:9a:f6:9c:74:07:e0:29:
         df:6a:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:33:01 2025 by rpki-client