Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1cebcf49-86bd-3509-9f3d-4de1890bb4c8.roa
File:                     1cebcf49-86bd-3509-9f3d-4de1890bb4c8.roa (raw, json)
Hash identifier:          wdDvbSFHebtwJaeT9c1DcYJWyRwvn1Fn/TyfPCk4/40=
Subject key identifier:   23:47:AC:B3:90:F2:DE:55:96:C7:66:EF:30:63:C8:D5:79:71:6B:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E0631E11707A383CC8500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1cebcf49-86bd-3509-9f3d-4de1890bb4c8.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        96.37.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:06:31:e1:17:07:a3:83:cc:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b8424c37-ed75-4b89-b3f2-1da35c07a7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:0a:7a:ce:17:25:a9:57:40:1a:43:9e:f5:
                    42:2f:13:ce:ec:81:ff:44:81:04:4b:42:6b:12:47:
                    03:ee:6f:54:70:4d:d2:15:24:8a:34:e1:b5:b8:6d:
                    aa:bb:f5:7d:10:a3:cd:1d:fa:fe:aa:a2:ce:63:34:
                    2d:63:9c:7f:68:03:db:9d:62:3b:5c:98:88:8d:7f:
                    e6:a1:f7:32:4d:b6:76:e6:61:5d:68:35:71:e0:15:
                    0d:e7:1e:47:2e:cd:03:56:79:41:81:ad:79:9d:a1:
                    9d:28:e8:cb:df:f1:be:9e:48:c2:8b:6a:e2:f5:55:
                    d2:3c:12:58:92:7b:06:cf:91:88:7b:50:66:da:5a:
                    33:54:1b:4e:f6:63:ab:47:d6:29:86:70:48:77:67:
                    27:4a:bc:44:ab:cd:fb:63:91:90:4f:39:16:7d:cf:
                    f0:01:dc:cc:de:a7:13:b3:7c:95:49:f5:a7:70:aa:
                    eb:da:fc:45:31:6c:da:ae:75:fd:e9:7e:83:36:4d:
                    b6:59:4a:94:9b:5c:da:84:65:28:57:1e:db:0d:91:
                    aa:fb:f3:7a:c0:7b:c5:82:4b:4c:8f:60:7b:62:ef:
                    48:f3:3f:20:df:b5:ee:fd:52:4d:fb:12:05:d9:a4:
                    46:69:24:8b:1e:80:a1:af:e0:e8:c5:95:b7:94:ba:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:47:AC:B3:90:F2:DE:55:96:C7:66:EF:30:63:C8:D5:79:71:6B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1cebcf49-86bd-3509-9f3d-4de1890bb4c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.37.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:48:5a:97:d7:97:91:c3:94:6f:50:5b:01:3f:f4:2f:a5:20:
         a1:3b:b5:18:66:67:70:4b:35:53:bc:23:07:7f:45:b9:02:02:
         30:e8:ef:6a:ff:b6:a3:5a:db:8a:25:42:2b:f5:ab:9e:99:7a:
         e6:65:08:e8:2e:d5:58:1f:92:a4:fe:3d:fd:99:54:b2:1d:18:
         ff:a3:fb:0c:3f:cd:d5:8d:6e:dd:1e:75:40:3f:f1:7b:dd:b4:
         85:2d:37:f8:72:df:91:69:f3:ae:22:54:a9:9b:98:8c:bb:bb:
         73:03:c0:c2:7b:fe:96:f0:37:2f:4e:1c:96:e1:84:da:83:80:
         45:c5:0f:2e:3e:30:c9:c2:20:03:fa:97:d4:ce:5d:6c:c2:0f:
         fa:4a:47:30:19:34:6b:82:f8:e3:39:27:5c:ae:c3:39:a4:6d:
         e6:e3:f5:f1:2d:f3:79:99:93:59:0b:79:2e:d1:04:18:1f:b1:
         14:5d:c3:f3:40:85:66:22:9d:85:99:30:fd:e2:1f:e7:e2:d2:
         ac:e0:a9:fb:23:89:76:e1:63:73:f6:6a:1e:df:72:30:28:02:
         41:8e:96:ad:a3:8b:ff:7a:9a:f6:07:d1:d4:fd:e8:f6:91:81:
         a6:c2:31:00:9b:cd:9b:5a:0c:2c:5f:eb:32:1e:31:d7:16:e9:
         f4:51:29:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgYx4RcHo4PMhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
Yjg0MjRjMzctZWQ3NS00Yjg5LWIzZjItMWRhMzVjMDdhN2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsoKes4XJalXQBpDnvVCLxPO7IH/RIEES0Jr
EkcD7m9UcE3SFSSKNOG1uG2qu/V9EKPNHfr+qqLOYzQtY5x/aAPbnWI7XJiIjX/m
ofcyTbZ25mFdaDVx4BUN5x5HLs0DVnlBga15naGdKOjL3/G+nkjCi2ri9VXSPBJY
knsGz5GIe1Bm2lozVBtO9mOrR9YphnBId2cnSrxEq837Y5GQTzkWfc/wAdzM3qcT
s3yVSfWncKrr2vxFMWzarnX96X6DNk22WUqUm1zahGUoVx7bDZGq+/N6wHvFgktM
j2B7Yu9I8z8g37Xu/VJN+xIF2aRGaSSLHoChr+DoxZW3lLr9hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNHrLOQ8t5Vlsdm7zBjyNV5cWvdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWNlYmNmNDktODZiZC0z
NTA5LTlmM2QtNGRlMTg5MGJiNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYCXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJIWpfXl5HDlG9QWwE/9C+lIKE7tRhmZ3BLNVO8Iwd/RbkCAjDo72r/
tqNa24olQiv1q56ZeuZlCOgu1VgfkqT+Pf2ZVLIdGP+j+ww/zdWNbt0edUA/8Xvd
tIUtN/hy35Fp864iVKmbmIy7u3MDwMJ7/pbwNy9OHJbhhNqDgEXFDy4+MMnCIAP6
l9TOXWzCD/pKRzAZNGuC+OM5J1yuwzmkbebj9fEt83mZk1kLeS7RBBgfsRRdw/NA
hWYinYWZMP3iH+fi0qzgqfsjiXbhY3P2ah7fcjAoAkGOlq2ji/96mvYH0dT96PaR
gabCMQCbzZtaDCxf6zIeMdcW6fRRKXE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:29 2025 by rpki-client