Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/274ce28e-65e0-3651-b93a-d23c1acd6723.roa
File:                     274ce28e-65e0-3651-b93a-d23c1acd6723.roa (raw, json)
Hash identifier:          fw714xW5cGY4WxEj9UZx2vxG70XO1ac64IyTeqtF7X0=
Subject key identifier:   BD:3B:01:0C:78:D5:79:0C:21:F1:1A:61:1E:55:03:85:CF:C2:B3:EF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6DC1168851DFFFF94200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/274ce28e-65e0-3651-b93a-d23c1acd6723.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.2.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:6d:c1:16:88:51:df:ff:f9:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e286e7c0-75b1-4b5a-9907-d7ac0e8f3472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:ce:4c:ab:28:1a:fb:5a:5a:81:c4:12:bf:
                    2e:a2:4f:c2:24:a2:05:46:a7:8b:de:56:76:89:bd:
                    cf:a2:42:a5:63:1d:09:10:da:32:02:00:5e:b4:ea:
                    34:45:4d:a3:fa:2e:4b:65:24:eb:f4:74:c1:54:c5:
                    f1:b7:48:58:59:20:1d:c7:8b:6f:b2:47:00:0f:28:
                    f7:c6:e3:72:5f:22:3b:8b:f7:c2:bb:36:af:79:b4:
                    78:72:ac:6e:a6:04:9f:4e:4c:65:4e:6f:1c:c4:83:
                    d4:19:02:82:f3:98:67:7b:bd:3e:e6:0b:35:91:6b:
                    76:db:8a:76:c0:88:68:3d:3e:a9:ba:6c:55:b7:b1:
                    bc:48:50:e2:1b:c0:3f:3d:eb:58:ee:9d:a6:28:de:
                    64:9e:4c:31:27:21:87:e5:e6:91:23:e8:25:92:25:
                    67:2c:42:a1:ff:de:7f:57:2b:7f:8a:1a:b8:83:04:
                    b1:76:01:4c:c0:39:db:56:89:15:24:ca:78:a1:f1:
                    77:70:78:12:88:da:de:90:6c:53:c1:e2:52:18:94:
                    a3:cb:08:0d:87:68:55:04:e9:47:ae:a0:40:b3:f1:
                    23:37:6b:ed:92:8c:09:16:40:c4:26:95:6f:0a:9b:
                    62:a6:ba:d6:3c:79:c5:f3:3c:59:10:45:30:c5:92:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:01:0C:78:D5:79:0C:21:F1:1A:61:1E:55:03:85:CF:C2:B3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/274ce28e-65e0-3651-b93a-d23c1acd6723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.2.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:61:5c:e9:be:8b:55:ea:c0:69:ba:bd:ae:f8:a5:bd:7a:d0:
         4e:14:82:fb:55:c8:da:02:d9:f2:99:4e:29:72:17:a3:f6:ed:
         19:b4:26:dd:b7:73:f9:a8:47:82:c4:bc:82:4c:fe:82:f4:32:
         9d:7a:2a:2d:86:2e:73:c1:d3:e2:04:f9:45:1a:8b:3c:a5:5d:
         36:88:e0:6c:36:65:a3:36:b2:c6:0f:78:d3:78:06:52:9a:3c:
         1d:b8:0e:82:92:dc:64:dd:0f:06:68:1b:4c:ef:6e:47:15:e0:
         03:cb:81:f4:9e:e4:76:d9:00:98:ca:b1:61:f7:64:8e:64:cf:
         df:ad:97:24:8e:1c:7b:e3:c8:cb:3c:1a:80:17:2a:1e:7f:0d:
         dd:c8:76:82:d3:75:aa:da:f4:1b:e9:f6:b3:c8:09:1b:d9:12:
         6a:7b:9c:5c:35:7a:4d:1d:a1:a6:88:b8:fd:b0:da:a3:44:67:
         94:5a:dd:02:9a:ed:c2:5f:80:36:56:60:7f:14:bb:70:df:51:
         42:10:1c:9c:01:99:08:57:9a:da:aa:a3:3f:45:02:75:45:11:
         77:0b:86:fb:4d:11:dd:b2:07:47:7a:f2:d4:99:50:84:7a:16:
         b3:8b:e9:75:89:e6:f4:44:6c:16:d4:40:8b:ae:19:68:01:f2:
         95:ec:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:15 2025 by rpki-client