Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2bcfc174-d156-3df0-b84f-0b6ce0f832ce.roa
File:                     2bcfc174-d156-3df0-b84f-0b6ce0f832ce.roa (raw, json)
Hash identifier:          TbSfrQptsWnMGUTcEV8TFkKyVbCoJ8pbNTF7lMB+lPk=
Subject key identifier:   A6:91:43:9D:3D:B2:FF:BE:2E:E9:CA:60:75:93:42:33:38:D0:3C:9E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E178AC4A9E818A0F6EA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2bcfc174-d156-3df0-b84f-0b6ce0f832ce.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.232.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:17:8a:c4:a9:e8:18:a0:f6:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=eb55ea48-015b-41c8-8ebb-42eb6aea01b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:21:e5:35:e2:7c:2e:6a:f6:7e:66:94:c0:
                    74:12:11:52:10:5c:87:74:81:91:c6:b9:f8:40:02:
                    7b:f4:32:5d:9f:b8:2c:e4:73:0b:a0:36:3e:50:e4:
                    ad:b1:17:9c:99:61:2f:26:2b:a1:48:8f:81:59:26:
                    07:68:9e:bf:02:08:24:97:a9:e2:9b:61:9b:ba:0e:
                    98:cc:27:a9:95:46:39:29:d1:b0:b2:98:e2:4a:7c:
                    b8:ab:f0:b5:7d:ff:d1:57:56:f2:be:d5:b4:fc:3e:
                    48:39:bb:32:6e:46:6b:c0:07:66:c2:f7:87:9f:ae:
                    36:2f:7c:d3:a4:65:2b:d4:28:16:59:1e:24:c2:82:
                    e0:2d:8f:67:fe:4c:bd:f8:96:c7:1b:fc:55:46:a8:
                    49:77:d0:c7:8b:bc:a0:70:5f:2d:ef:f7:b2:75:92:
                    2f:57:7d:8e:34:89:10:27:98:a2:5c:70:49:45:c7:
                    7c:06:aa:9e:9a:da:87:b4:bf:8f:ba:0d:d0:de:28:
                    6b:b7:d7:d0:8a:30:ba:70:36:69:c7:8a:17:29:9f:
                    ef:31:70:24:40:a7:61:ff:12:7e:e3:dd:2f:36:6b:
                    b1:9a:32:45:03:85:2d:dc:7e:a2:70:1f:99:8e:59:
                    14:a6:a2:d2:46:32:f6:2c:61:d2:08:24:f8:be:96:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:91:43:9D:3D:B2:FF:BE:2E:E9:CA:60:75:93:42:33:38:D0:3C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2bcfc174-d156-3df0-b84f-0b6ce0f832ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.232.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:7e:3f:3f:64:38:a0:f4:44:59:ab:b7:f8:39:38:3d:39:
         d7:3b:1e:a7:6e:46:13:7d:a4:8d:b8:31:e6:ea:e8:f8:9e:a2:
         b1:34:8c:84:93:41:03:d7:5d:10:fa:e1:33:a3:08:9f:b1:ff:
         26:27:7e:f3:3b:4b:ca:24:34:63:78:3e:eb:6e:b9:d7:fd:ee:
         0e:79:05:c2:6f:7d:de:f7:36:91:41:a4:e0:53:22:57:f8:c8:
         6d:a0:82:03:a1:9c:1f:66:30:7d:3f:e7:0b:08:0b:7c:be:fb:
         7a:1f:18:7a:52:ec:bd:9a:86:fb:fc:8b:ea:57:3a:23:2e:bc:
         a6:cb:cf:c0:73:b1:2f:7f:f1:ba:3f:0a:53:ae:5c:77:aa:42:
         6e:a7:13:74:6f:3f:2f:eb:9d:e0:03:fa:72:54:b2:bd:92:58:
         b4:a8:9b:0e:8e:c6:b2:d3:0a:a6:45:36:41:c8:7a:a4:a0:b1:
         d6:53:a5:0e:2b:72:17:8b:3f:e8:4e:19:6a:aa:94:b3:88:69:
         28:7e:7f:b2:91:3b:32:3a:f9:5e:97:d5:4f:40:92:0f:a6:05:
         a5:8e:7f:0b:1b:b9:22:89:e6:56:51:cf:29:fb:be:a2:fe:30:
         e6:98:f5:c2:f5:ac:10:b9:7b:52:75:af:44:e2:aa:11:cb:5b:
         a1:cb:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:51 2025 by rpki-client