Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa
File:                     3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa (raw, json)
Hash identifier:          wDOU3WMR2uto2mecQOlCb2ldqRyOj/Pa4SPvyYgY6/8=
Subject key identifier:   F2:9E:FF:DE:6B:08:91:6C:B7:BE:E7:9F:FD:C4:9D:4A:9E:C5:72:34
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D341B738F83FD46F7BCA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.80.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:34:1b:73:8f:83:fd:46:f7:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=25911e1b-1513-4cf9-b8f9-d607e0db56a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:71:48:07:cb:ce:79:94:5b:a1:5f:03:30:
                    2a:3c:45:61:58:5f:82:dc:7e:db:75:f6:16:d2:59:
                    10:2f:23:8b:a7:9b:73:4e:44:b9:37:65:da:b3:2b:
                    c1:d2:aa:8d:bb:eb:a9:a0:8a:ad:9c:4d:d0:71:40:
                    b5:58:b2:0e:4c:07:94:55:fc:39:13:07:af:ed:40:
                    ab:ec:35:2a:d4:91:4b:65:5c:1a:6a:c6:fe:c4:d0:
                    55:dd:f0:6f:0d:0d:ff:af:6b:15:70:2f:91:97:21:
                    eb:83:42:b7:57:23:80:8d:2b:59:fa:b1:04:98:29:
                    89:50:9c:29:c3:0e:84:5f:15:3e:3b:87:11:27:72:
                    4e:ba:d7:57:ba:7c:70:fa:7f:c8:02:ef:15:6d:47:
                    48:ba:06:28:e2:94:ab:bf:98:2f:9a:a2:d4:b1:76:
                    1f:88:c8:5c:ce:df:59:33:1d:90:7f:d9:29:fe:d7:
                    78:d3:c5:21:e2:e1:12:ca:78:f7:bd:c6:e0:fd:b9:
                    95:77:21:4c:72:3f:b2:46:a7:f6:37:8f:c2:1f:71:
                    99:19:57:7f:9f:9e:01:53:3a:89:13:46:81:df:10:
                    61:f2:91:6f:c6:3a:d4:d3:9c:cf:fd:e3:36:cb:f3:
                    2b:ea:11:95:ad:33:60:87:3a:38:99:e5:e4:2d:ea:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:FF:DE:6B:08:91:6C:B7:BE:E7:9F:FD:C4:9D:4A:9E:C5:72:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.80.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:1a:04:c1:97:5d:73:a6:5f:7a:df:c5:0c:85:ad:a6:bb:
         53:f1:59:d0:35:82:8f:e8:c8:f2:c3:e5:71:b0:74:01:43:f7:
         31:7d:2c:2c:9e:e6:ca:84:ce:70:8e:6c:eb:79:51:e0:3b:59:
         c6:4a:3f:45:e2:74:3e:4d:f8:33:e1:a1:ff:94:86:42:e8:8d:
         17:27:c5:02:4a:d2:ce:e3:6b:d2:00:4a:6c:f4:95:08:5a:db:
         b1:a8:2f:e3:ce:c0:14:03:78:d2:03:03:46:cd:88:9a:99:27:
         f1:2d:3a:4d:74:c7:2c:86:b0:1e:96:cf:c4:09:5f:89:75:3e:
         bf:42:73:8b:b9:64:ae:33:59:cb:c4:63:e1:d2:e9:b4:91:90:
         40:d0:f4:02:4b:b7:5b:82:8f:dd:1f:47:62:ab:57:81:ad:ad:
         b5:5a:50:94:c0:f0:c3:9b:5c:3c:16:eb:1a:90:ab:bc:77:db:
         d2:f1:ad:7f:54:2d:65:fd:b1:b9:09:6c:ef:df:91:c2:ed:84:
         4e:44:21:e9:13:ea:9f:10:ec:12:4e:4e:33:be:35:a3:75:e6:
         23:dd:7b:12:46:79:9d:cd:95:ad:2e:79:92:dd:de:5e:3f:5d:
         ee:75:4d:32:cf:fb:02:e1:86:18:d5:0a:a8:1f:0a:1d:70:d9:
         96:9b:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:22 2025 by rpki-client