Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42ff6e7d-e1c8-3e53-9226-e0d411bb803a.roa
File:                     42ff6e7d-e1c8-3e53-9226-e0d411bb803a.roa (raw, json)
Hash identifier:          li+GcbNbY77nd7Has+Kv5Ho0pg98Ffm7NCALcf+l2cE=
Subject key identifier:   DB:92:25:FD:60:1D:0F:92:59:5B:27:04:DA:55:92:3B:5B:7D:10:94
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D64CE2C47C089870C8980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42ff6e7d-e1c8-3e53-9226-e0d411bb803a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.92.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:64:ce:2c:47:c0:89:87:0c:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6cf5672a-3ccc-44b5-a2ae-c3df858471de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:98:ad:c6:5b:db:c0:85:c1:c4:b8:83:f7:
                    89:e0:5b:e7:7d:fd:91:4e:a3:d8:d4:23:fa:6c:08:
                    19:ae:7c:dd:25:5e:36:3b:2d:3d:e6:4c:75:35:29:
                    2b:8c:e7:0c:da:2c:02:73:16:8d:50:cc:62:b6:cb:
                    99:b9:de:38:95:b1:c7:d4:38:0f:31:98:3c:79:cc:
                    2a:6b:98:0e:8e:46:5c:79:ff:a2:9e:81:b9:37:5e:
                    c5:09:91:95:a3:c0:66:e1:d8:8b:1c:6b:91:39:5d:
                    b1:13:c0:6d:4c:ad:e6:a5:42:2e:4b:2f:08:ce:c6:
                    9d:57:7e:d9:5c:b8:54:b7:70:f8:03:aa:c0:b9:27:
                    fb:7b:60:bd:35:a1:57:17:33:35:f1:a6:ef:fe:b3:
                    75:e3:25:01:04:2e:16:f4:23:42:92:7d:6c:3f:6b:
                    5f:4e:5e:36:7a:24:be:44:e1:75:0e:d7:4f:67:93:
                    25:a0:f1:9b:f9:0d:18:1b:5b:7b:8b:7b:f9:e4:be:
                    76:3a:f3:aa:27:8a:86:84:aa:82:d2:4f:56:1a:ac:
                    40:aa:9a:af:52:e1:0c:12:34:cd:3e:38:fd:32:12:
                    87:4a:17:de:ca:7e:3a:95:15:c1:0b:62:a1:5a:57:
                    99:05:fe:c9:50:c0:f8:1c:44:4f:68:21:85:54:e0:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:92:25:FD:60:1D:0F:92:59:5B:27:04:DA:55:92:3B:5B:7D:10:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/42ff6e7d-e1c8-3e53-9226-e0d411bb803a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.92.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:4f:ad:41:81:f2:e4:a9:95:10:85:87:6d:f9:8d:d2:92:
         ca:e3:f7:fb:e3:97:a8:85:a7:96:2c:c8:0c:7d:43:56:bb:ea:
         2f:3b:9b:70:b1:30:dc:3d:45:a9:de:0c:62:54:ae:ed:76:a3:
         77:79:b2:58:ed:a3:e4:31:34:a4:55:ac:b1:0f:f6:4b:ce:1b:
         c8:8f:b0:59:45:19:bb:29:62:83:ec:87:2e:3b:63:f9:21:e8:
         60:4e:14:2a:e8:47:e7:8f:a1:ee:df:1a:31:3a:77:0b:37:ab:
         e7:a1:66:11:3a:00:f5:cc:ef:b2:54:84:64:57:bc:bd:ed:ad:
         1f:db:62:f8:87:37:be:37:8e:51:18:5f:b6:bb:b0:f9:89:ed:
         db:11:28:88:2a:70:4d:d9:25:ae:5d:67:bd:23:29:fd:c2:f2:
         81:95:13:a1:b5:b9:7b:20:71:16:e8:5e:be:e3:f1:4f:95:9c:
         22:29:ca:54:4c:db:f6:06:10:84:a2:40:c3:b1:2b:93:96:c8:
         9e:0b:76:c9:31:00:bf:f7:ab:b3:69:39:73:dc:9b:3d:2d:8d:
         9b:b1:43:2f:f3:31:16:ff:18:ae:94:3f:5b:2d:48:4e:3e:78:
         91:bf:52:d9:43:10:fb:c8:b0:95:7b:7d:85:fe:18:05:7b:13:
         41:fd:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:01 2025 by rpki-client