Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3d31cbc2-36ee-350e-bd05-17b3b3a7887b.roa
File:                     3d31cbc2-36ee-350e-bd05-17b3b3a7887b.roa (raw, json)
Hash identifier:          0MfA0ndYNdDdJBMlVk/1LOK39K9IjM/zkhEv0CVtS7Y=
Subject key identifier:   9B:DC:40:0A:98:20:63:6B:A0:01:D1:F9:58:20:7B:EE:66:C9:DC:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D5F52265E443472F73400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3d31cbc2-36ee-350e-bd05-17b3b3a7887b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        96.35.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:5f:52:26:5e:44:34:72:f7:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ee0310ec-d691-4491-aafb-3d2d575926a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:2b:ea:2c:56:01:e5:26:9c:2a:c3:02:88:
                    b8:22:7b:e4:f9:7f:a6:d9:58:53:62:ed:73:44:9f:
                    8b:a6:f5:0a:63:f5:9f:a3:8d:79:ed:cc:fc:85:4d:
                    5c:2e:9d:40:9c:7e:72:c8:9f:94:1c:e1:23:15:25:
                    c4:18:0f:36:e1:b3:1a:59:98:49:55:8f:f3:c3:fd:
                    c1:d6:92:c3:c0:d7:e1:ab:b0:0f:25:09:31:5e:5e:
                    04:42:3f:6e:80:3a:c0:6e:e8:2f:8c:57:8e:9c:a9:
                    47:21:21:1a:ee:8a:3e:7c:29:28:df:d0:fe:f1:78:
                    26:6c:a2:9f:f9:5a:7c:ac:c4:99:73:71:0c:33:8c:
                    24:76:c6:1d:33:f6:06:29:55:ec:b4:a2:c5:10:ae:
                    ea:37:ce:3f:63:5b:32:df:8a:61:dd:28:2f:b3:c1:
                    9d:92:68:f3:e8:8f:13:a3:9a:d6:7b:5c:bd:d5:31:
                    04:68:7b:61:0a:63:23:67:0d:fa:e5:23:26:76:0d:
                    34:4d:bc:c1:6c:d2:fa:c3:dd:a4:a6:69:11:5d:ed:
                    cf:cf:97:21:19:10:eb:e0:76:37:77:d8:db:14:0a:
                    3a:4f:bf:71:32:52:70:7d:92:b1:3f:7b:62:4b:1c:
                    f7:51:67:d1:35:e5:b1:d0:71:99:79:50:be:ff:5e:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:40:0A:98:20:63:6B:A0:01:D1:F9:58:20:7B:EE:66:C9:DC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3d31cbc2-36ee-350e-bd05-17b3b3a7887b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.35.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:2d:2e:40:43:b6:ca:31:f1:4a:51:de:f0:18:9b:f0:7f:eb:
         50:e8:d4:89:a7:e3:ed:4a:3b:46:1d:0d:2f:45:17:45:47:5e:
         0b:2c:ca:bd:c5:91:1a:d6:1e:9b:53:40:09:5b:7b:40:e6:a1:
         55:47:34:00:75:28:2a:4a:37:62:5f:a0:64:b1:db:8a:20:1d:
         9b:3f:40:62:ad:17:cc:8e:1b:e4:27:6d:14:8c:ef:b5:df:00:
         b4:c3:a7:cc:6c:0d:5c:50:ec:e1:e9:b9:12:0f:af:89:bc:cd:
         4b:6a:30:62:db:b3:c6:a3:70:0e:18:bc:51:db:c4:a8:97:e9:
         5d:5b:a6:c1:37:57:3e:a5:94:c1:50:04:8f:97:1d:3a:79:eb:
         fb:9e:3a:37:1d:7b:04:80:c4:d1:97:a9:c5:0d:9c:70:4c:e6:
         13:b9:7f:e9:67:ec:94:29:b3:87:f7:c1:15:1a:b3:5f:e5:67:
         51:5a:a2:c4:77:c6:ae:30:30:1b:ee:fa:b6:4c:13:d8:62:6e:
         f3:9c:62:98:4d:a8:57:53:24:54:ba:14:74:3e:09:d3:3c:89:
         bb:4c:d0:28:8d:3a:a4:f9:f2:77:63:0e:5e:6e:1f:9b:20:9f:
         42:3a:13:0e:a7:75:f7:b0:fc:fc:e8:68:a9:2a:50:da:51:29:
         bc:4f:93:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHV9SJl5ENHL3NAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZWUwMzEwZWMtZDY5MS00NDkxLWFhZmItM2QyZDU3NTkyNmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQr6ixWAeUmnCrDAoi4Invk+X+m2VhTYu1z
RJ+LpvUKY/Wfo4157cz8hU1cLp1AnH5yyJ+UHOEjFSXEGA824bMaWZhJVY/zw/3B
1pLDwNfhq7APJQkxXl4EQj9ugDrAbugvjFeOnKlHISEa7oo+fCko39D+8XgmbKKf
+Vp8rMSZc3EMM4wkdsYdM/YGKVXstKLFEK7qN84/Y1sy34ph3Sgvs8Gdkmjz6I8T
o5rWe1y91TEEaHthCmMjZw365SMmdg00TbzBbNL6w92kpmkRXe3Pz5chGRDr4HY3
d9jbFAo6T79xMlJwfZKxP3tiSxz3UWfRNeWx0HGZeVC+/17HwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvcQAqYIGNroAHR+Vgge+5mydwtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2QzMWNiYzItMzZlZS0z
NTBlLWJkMDUtMTdiM2IzYTc4ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCOOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMItLkBDtsox8UpR3vAYm/B/61Do1Imn4+1KO0YdDS9FF0VHXgssyr3F
kRrWHptTQAlbe0DmoVVHNAB1KCpKN2JfoGSx24ogHZs/QGKtF8yOG+QnbRSM77Xf
ALTDp8xsDVxQ7OHpuRIPr4m8zUtqMGLbs8ajcA4YvFHbxKiX6V1bpsE3Vz6llMFQ
BI+XHTp56/ueOjcdewSAxNGXqcUNnHBM5hO5f+ln7JQps4f3wRUas1/lZ1FaosR3
xq4wMBvu+rZME9hibvOcYphNqFdTJFS6FHQ+CdM8ibtM0CiNOqT58ndjDl5uH5sg
n0I6Ew6ndfew/PzoaKkqUNpRKbxPk3A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:13:29 2025 by rpki-client