Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35e72579-a130-3a21-a84b-5934c4ea20ed.roa
File:                     35e72579-a130-3a21-a84b-5934c4ea20ed.roa (raw, json)
Hash identifier:          39KoJ1Z/JrAvkSIeik/wK2mPlLyHMr5e3pRraZP4Sxo=
Subject key identifier:   8C:75:12:84:D0:71:51:24:FA:4D:C4:35:99:88:1F:55:B0:09:60:6D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D502228199994777AF240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35e72579-a130-3a21-a84b-5934c4ea20ed.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.13.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:50:22:28:19:99:94:77:7a:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8d35a955-fa76-40a5-8cbf-f44302a0a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:6d:0e:42:de:06:26:52:f4:7a:4b:7e:f4:
                    fd:ec:e0:0e:ea:da:fc:78:d9:7b:20:3e:af:b1:e0:
                    9d:2a:16:70:7a:48:8e:fc:82:cc:b0:c9:84:e3:e3:
                    b6:1a:a3:89:84:14:6f:67:e5:95:61:e6:e4:6a:f5:
                    34:05:b8:27:06:de:4e:6b:f4:4b:3c:78:66:2e:91:
                    c2:0c:95:c5:05:c0:d5:d7:0c:1c:69:b5:21:9f:8d:
                    e7:99:6d:98:59:83:3b:3a:d0:9d:be:15:c5:1a:09:
                    93:a1:a7:2c:25:9c:2c:c0:78:b1:5f:ca:d0:cc:3a:
                    e6:cd:1e:df:91:f6:c4:ad:b3:f5:59:61:2b:a9:ed:
                    d3:74:6f:40:4a:13:44:79:05:e0:bc:cb:63:b6:e6:
                    7e:f0:8c:9d:c3:19:f5:8d:9e:92:b1:e2:5f:34:99:
                    72:9f:1b:11:ab:07:51:93:0f:3b:2b:34:c7:c3:13:
                    22:0b:67:70:fb:65:89:84:1d:d8:d4:91:fd:27:7a:
                    bf:69:28:cd:4c:4c:65:7f:e9:7e:ad:9a:66:44:72:
                    9c:5f:a8:25:73:62:6b:83:4b:6a:4a:a7:a1:95:29:
                    25:2b:51:00:f0:4b:5e:62:6a:e0:42:8f:a0:22:6d:
                    9d:56:f0:b5:e1:db:5d:d0:6a:63:12:71:e0:ec:63:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:12:84:D0:71:51:24:FA:4D:C4:35:99:88:1F:55:B0:09:60:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35e72579-a130-3a21-a84b-5934c4ea20ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:63:8e:a5:5a:51:98:9b:43:ad:78:ac:47:84:de:93:f2:ba:
         fd:18:4b:01:1a:bd:39:af:a9:49:21:43:6a:b3:c5:f1:ff:2d:
         7d:50:c7:bd:7f:08:99:a4:c8:ed:d7:4f:df:cd:e4:7b:f7:da:
         75:2c:6e:1e:77:61:df:60:b8:dd:f0:1e:d7:77:7c:e1:ff:f8:
         63:da:ae:16:9c:c2:d9:61:2a:32:1f:eb:cd:db:bb:01:b9:c7:
         ec:72:51:b8:83:82:2e:a4:06:22:8d:44:43:36:84:29:5c:99:
         14:85:79:55:0b:bb:8b:f0:21:2d:95:a5:15:f9:96:0a:09:c6:
         0f:54:09:5f:42:1a:9d:5d:34:bc:77:30:71:95:1a:09:10:69:
         df:e7:ba:6f:a1:9a:21:ef:8e:12:2e:62:50:da:27:64:8d:c4:
         91:3a:01:f5:82:80:78:a1:1e:44:b9:1a:b9:25:d6:86:bc:8f:
         6b:8d:07:4d:b9:34:d6:9d:24:71:f1:30:ce:83:49:3f:dd:bc:
         f2:c8:4f:7d:f7:7f:58:8c:e8:85:2f:16:af:07:7d:89:6d:45:
         a6:60:72:c4:30:b4:9b:2c:1f:94:6e:60:e0:ec:f7:76:a6:aa:
         cd:05:64:31:f0:80:47:13:fa:b9:0f:e5:26:32:34:90:eb:38:
         55:20:01:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVAiKBmZlHd68kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
OGQzNWE5NTUtZmE3Ni00MGE1LThjYmYtZjQ0MzAyYTBhMjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh5tDkLeBiZS9HpLfvT97OAO6tr8eNl7ID6v
seCdKhZwekiO/ILMsMmE4+O2GqOJhBRvZ+WVYebkavU0BbgnBt5Oa/RLPHhmLpHC
DJXFBcDV1wwcabUhn43nmW2YWYM7OtCdvhXFGgmToacsJZwswHixX8rQzDrmzR7f
kfbErbP1WWErqe3TdG9AShNEeQXgvMtjtuZ+8Iydwxn1jZ6SseJfNJlynxsRqwdR
kw87KzTHwxMiC2dw+2WJhB3Y1JH9J3q/aSjNTExlf+l+rZpmRHKcX6glc2Jrg0tq
SqehlSklK1EA8EteYmrgQo+gIm2dVvC14dtd0GpjEnHg7GN3RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIx1EoTQcVEk+k3ENZmIH1WwCWBtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzVlNzI1NzktYTEzMC0z
YTIxLWE4NGItNTkzNGM0ZWEyMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARw2TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhjjqVaUZibQ614rEeE3pPyuv0YSwEavTmvqUkhQ2qzxfH/LX1Qx71/
CJmkyO3XT9/N5Hv32nUsbh53Yd9guN3wHtd3fOH/+GParhacwtlhKjIf683buwG5
x+xyUbiDgi6kBiKNREM2hClcmRSFeVULu4vwIS2VpRX5lgoJxg9UCV9CGp1dNLx3
MHGVGgkQad/num+hmiHvjhIuYlDaJ2SNxJE6AfWCgHihHkS5Grkl1oa8j2uNB025
NNadJHHxMM6DST/dvPLIT333f1iM6IUvFq8HfYltRaZgcsQwtJssH5RuYODs93am
qs0FZDHwgEcT+rkP5SYyNJDrOFUgAck=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:32:34 2025 by rpki-client