Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a56860f-2a97-363f-8c54-0f1bc60cc2d0.roa
File:                     2a56860f-2a97-363f-8c54-0f1bc60cc2d0.roa (raw, json)
Hash identifier:          EcKM7tNiXrxWSeW/tcTZvJ2HxSC+/Bjb9tftxj4nNnw=
Subject key identifier:   51:60:01:FB:62:7A:3F:A9:02:D0:50:8D:62:E6:85:DD:A0:B1:6B:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6000ADC99A099EE9EB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a56860f-2a97-363f-8c54-0f1bc60cc2d0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.81.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:60:00:ad:c9:9a:09:9e:e9:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=9ec35a74-f2c8-4a5d-84e1-fb986a4489eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:5d:4e:41:30:c6:19:c1:ee:a4:c5:3f:06:
                    c1:31:8f:7c:dd:92:c4:3a:3b:6a:e8:bd:b7:97:4e:
                    ca:96:66:a0:62:6a:b7:68:2f:cf:de:85:32:1f:24:
                    88:db:1f:3b:1c:41:7d:52:41:16:1e:63:ce:54:72:
                    77:9f:88:6c:c7:73:85:a1:a8:cc:58:9d:ae:85:0d:
                    af:91:0d:75:31:bc:ae:a7:36:c7:9b:b8:d9:83:f9:
                    45:5e:55:85:8b:83:ae:78:f9:dd:21:ef:11:64:48:
                    4f:aa:7d:e5:45:b9:c0:52:7b:a0:65:8f:76:db:62:
                    c2:10:00:c7:fd:89:66:aa:d6:e7:7d:fb:a2:11:30:
                    34:9d:a7:bc:e8:3d:5a:f6:76:74:ac:c6:49:72:d8:
                    5e:39:2c:f8:5b:72:54:53:05:75:a5:a3:3c:da:10:
                    4e:76:a6:83:ad:5f:da:59:32:c8:ec:6b:47:b2:6b:
                    f9:9a:18:8f:d4:70:7c:76:a1:f6:28:3c:0e:70:51:
                    3a:05:33:ec:1d:25:fd:5e:f6:b1:1e:bd:6d:83:08:
                    c7:4d:e5:b7:96:5c:51:b2:ff:41:1c:93:76:52:c0:
                    2e:1c:a0:0b:80:40:25:5d:30:ec:74:c5:86:85:86:
                    9d:2f:e7:a5:fd:e9:41:3f:40:95:27:06:9e:3e:2c:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:01:FB:62:7A:3F:A9:02:D0:50:8D:62:E6:85:DD:A0:B1:6B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a56860f-2a97-363f-8c54-0f1bc60cc2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.81.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:b7:68:08:14:60:5f:01:e0:f5:04:0c:e9:ea:02:1f:1e:ef:
         7e:f1:70:ac:e5:c1:74:ac:b2:95:68:b7:85:38:a9:3e:d1:90:
         18:63:32:c8:f1:d2:5c:1b:8e:e8:4c:23:30:89:21:39:92:4f:
         a8:ba:df:e9:46:9c:48:e6:21:b5:a2:3b:8d:13:3c:b1:1d:1d:
         e3:ac:64:12:98:b7:54:6e:5c:f0:9a:1c:74:12:5a:8f:32:bb:
         a8:fb:20:86:5e:cb:c0:71:03:24:43:5f:76:af:2e:44:cd:95:
         34:5c:5e:13:c0:53:94:fd:bb:2c:3f:fc:7e:8e:a0:6c:db:77:
         1d:0e:1e:7f:8a:b6:9c:2a:69:1a:f9:9d:1b:02:bf:31:db:1e:
         60:b7:c4:ca:35:37:6f:3d:d2:ec:2c:ee:2e:5e:e6:38:fd:40:
         0f:3b:2e:b9:8e:21:9a:21:36:91:c9:4e:e7:03:ae:39:80:75:
         c1:ae:f4:b1:0e:94:c9:89:7e:19:f2:09:30:40:cb:02:ca:2b:
         e9:5d:38:07:8a:96:90:7f:52:01:47:5f:0d:4b:06:7f:9c:8f:
         d4:1c:ed:28:92:e3:10:1c:dd:12:5e:3e:26:bb:f1:29:77:d4:
         1c:28:f6:db:5a:3e:3c:52:68:08:b0:b3:26:87:12:a8:16:43:
         41:8a:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:27 2025 by rpki-client