Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f8324bd-4f24-39e7-907b-9a3552172d47.roa
File:                     2f8324bd-4f24-39e7-907b-9a3552172d47.roa (raw, json)
Hash identifier:          RqMkXPKTiQJiPWZbkfggy8DhXv6Qk7IU+OH3tkFc10Y=
Subject key identifier:   5F:86:64:83:6D:85:39:10:0E:08:46:41:F0:30:DE:5A:66:A2:79:CA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E05A718918AD90C93DF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f8324bd-4f24-39e7-907b-9a3552172d47.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.87.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:05:a7:18:91:8a:d9:0c:93:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=11aa3d6b-d7fa-4202-9d7e-3ba160e10470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:f3:4e:e7:2d:f8:78:8f:44:70:98:e7:7c:
                    e4:bb:8a:12:a8:5e:0e:73:2f:60:56:5e:42:b0:b2:
                    e7:78:6d:c7:bc:79:11:13:61:9a:32:a7:c1:75:f4:
                    70:9c:7b:2d:07:fe:9a:53:17:4b:18:1a:73:78:f4:
                    12:43:9f:3a:00:9d:9a:eb:14:ff:4c:0c:b4:83:e7:
                    94:60:6c:de:a2:87:32:b9:98:c3:df:19:82:2c:1a:
                    f7:f1:fc:45:5e:e2:28:f7:4c:10:a6:52:a9:bc:46:
                    0a:26:7b:5f:58:59:b3:17:cf:e6:7d:11:d9:bd:2f:
                    8e:76:f7:32:d0:c6:9e:25:50:ac:db:d9:2d:a9:cc:
                    c3:b6:d0:4c:a9:b7:08:e3:5c:5c:54:ee:af:1d:7e:
                    82:93:79:4d:29:cc:87:82:48:50:fc:2d:00:8e:1c:
                    26:d6:e2:b2:70:e0:75:25:79:6a:ef:22:25:c1:d2:
                    c7:32:b5:31:5d:72:7e:f2:e8:ef:95:e3:4f:11:e5:
                    57:b8:9f:6b:f2:2c:cc:48:68:c0:68:7b:b7:59:b9:
                    6f:3c:10:b1:f6:ce:32:2d:0b:83:f9:3a:6e:b0:64:
                    f1:e4:71:6f:15:dd:7c:30:d9:ef:6e:a1:6a:d3:40:
                    97:45:b2:67:10:30:e4:ea:1e:76:a2:63:de:90:c8:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:86:64:83:6D:85:39:10:0E:08:46:41:F0:30:DE:5A:66:A2:79:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f8324bd-4f24-39e7-907b-9a3552172d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:73:5c:df:a8:6e:9c:bc:07:bb:d9:f7:7a:84:9a:d9:9e:
         26:24:9b:d3:0b:91:e9:b3:c0:8f:8c:3c:c1:13:24:10:81:24:
         8f:1f:e8:cd:20:59:c1:5c:1b:c2:4f:3a:74:3a:bc:16:ec:43:
         56:4a:fb:ab:2b:f1:9d:b2:15:b4:52:b6:75:50:33:eb:db:d2:
         e0:c9:84:d9:94:d9:4b:ee:3c:5d:79:cc:22:db:70:71:d0:cf:
         3c:b5:bc:51:c8:ce:94:b2:7c:c5:39:b4:97:bf:fd:57:a6:b6:
         41:a4:66:a4:53:78:9d:93:26:50:42:7e:7d:9a:e4:87:b5:bf:
         50:17:8f:38:62:66:dd:d2:fc:5e:4f:bc:02:02:6e:89:e8:02:
         ed:02:ad:1c:56:89:f2:4e:bd:4c:89:b9:6a:14:8f:9e:43:52:
         e8:10:7a:a6:85:79:8b:dd:78:8f:5c:31:03:ef:a2:40:1d:b1:
         1a:86:52:8c:1c:08:08:ab:1f:8a:d8:b7:4f:06:19:d3:28:70:
         b2:be:22:a7:95:67:f9:2a:a8:25:49:9e:44:f8:05:c0:40:9a:
         8d:70:67:e8:7b:f3:c1:49:3f:bc:1d:88:1a:87:25:c7:df:5f:
         6a:e1:56:d1:a7:3e:c8:99:16:08:6f:d9:a4:ed:fb:43:a9:27:
         dd:52:2e:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgWnGJGK2QyT34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MTFhYTNkNmItZDdmYS00MjAyLTlkN2UtM2JhMTYwZTEwNDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnXzTuct+HiPRHCY53zku4oSqF4Ocy9gVl5C
sLLneG3HvHkRE2GaMqfBdfRwnHstB/6aUxdLGBpzePQSQ586AJ2a6xT/TAy0g+eU
YGzeoocyuZjD3xmCLBr38fxFXuIo90wQplKpvEYKJntfWFmzF8/mfRHZvS+Odvcy
0MaeJVCs29ktqczDttBMqbcI41xcVO6vHX6Ck3lNKcyHgkhQ/C0Ajhwm1uKycOB1
JXlq7yIlwdLHMrUxXXJ+8ujvleNPEeVXuJ9r8izMSGjAaHu3WblvPBCx9s4yLQuD
+TpusGTx5HFvFd18MNnvbqFq00CXRbJnEDDk6h52omPekMjSwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+GZINthTkQDghGQfAw3lpmonnKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmY4MzI0YmQtNGYyNC0z
OWU3LTkwN2ItOWEzNTUyMTcyZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYVeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMRic1zfqG6cvAe72fd6hJrZniYkm9MLkemzwI+MPMETJBCBJI8f6M0g
WcFcG8JPOnQ6vBbsQ1ZK+6sr8Z2yFbRStnVQM+vb0uDJhNmU2UvuPF15zCLbcHHQ
zzy1vFHIzpSyfMU5tJe//VemtkGkZqRTeJ2TJlBCfn2a5Ie1v1AXjzhiZt3S/F5P
vAICbonoAu0CrRxWifJOvUyJuWoUj55DUugQeqaFeYvdeI9cMQPvokAdsRqGUowc
CAirH4rYt08GGdMocLK+IqeVZ/kqqCVJnkT4BcBAmo1wZ+h788FJP7wdiBqHJcff
X2rhVtGnPsiZFghv2aTt+0OpJ91SLmQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:12 2025 by rpki-client