Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/48f2ae8b-7a7e-3a27-9258-e54b4e39edb8.roa
File:                     48f2ae8b-7a7e-3a27-9258-e54b4e39edb8.roa (raw, json)
Hash identifier:          EUIBEhagPPw+DYCtzPf1dBzLgLmGTJNf+jzjuT7QSac=
Subject key identifier:   63:76:E4:A7:9F:03:CC:A6:E9:78:41:B0:CB:A9:8D:E5:C0:BF:88:6A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6139755812413D2BAAE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/48f2ae8b-7a7e-3a27-9258-e54b4e39edb8.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.129.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:61:39:75:58:12:41:3d:2b:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=016bd846-84fa-4837-b1f3-3c238d9a2217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:53:5d:93:b2:9f:47:56:3a:24:ec:77:79:
                    2a:0f:a3:48:23:c0:b0:c9:73:87:7e:e4:c3:dc:38:
                    31:38:4d:8c:a7:9a:65:80:c6:d8:04:62:09:01:82:
                    e8:ab:8a:cc:19:a0:f8:08:9b:9a:a5:af:b0:93:aa:
                    10:25:e8:d3:3b:e5:be:de:49:6c:04:c4:38:d5:7c:
                    ff:95:39:71:2d:08:6a:f3:86:77:f9:a7:fb:5d:26:
                    61:37:bc:5e:1b:95:9d:de:4d:c1:fb:26:1f:59:29:
                    84:15:72:27:23:7f:f6:e8:9a:09:83:98:fa:a2:ed:
                    7f:02:13:94:e6:04:71:29:05:8a:a5:3a:ac:5b:f5:
                    a5:cb:8c:b1:c0:9e:00:db:86:7f:c9:f4:ec:e5:af:
                    3a:cc:47:55:14:7b:f8:e0:2a:5e:7a:e8:b8:34:ee:
                    76:a3:72:b6:ff:f6:90:5b:0b:04:f7:99:1c:17:ce:
                    40:3d:26:96:37:32:86:a9:20:c1:0a:86:2a:d4:73:
                    93:42:76:41:6d:f5:0d:92:3c:b2:23:d7:29:d9:68:
                    01:b2:bd:9e:b7:4b:a6:b1:5b:15:30:26:de:c7:08:
                    21:91:fa:2f:6a:1d:15:5b:0e:be:9c:81:54:20:09:
                    76:61:5c:23:89:ea:d6:54:f1:85:02:98:c1:dc:20:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:76:E4:A7:9F:03:CC:A6:E9:78:41:B0:CB:A9:8D:E5:C0:BF:88:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/48f2ae8b-7a7e-3a27-9258-e54b4e39edb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.129.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:bf:de:98:99:91:85:16:85:57:23:dd:8a:3a:6c:5f:5d:
         12:e9:c4:5b:0b:9c:9e:e1:4b:fe:9d:86:14:f1:4a:fd:c8:fa:
         d2:18:e5:d6:6c:65:c7:9e:b7:b1:b7:ce:e9:b6:66:10:28:16:
         72:d4:5d:86:36:67:8f:1b:c8:0c:64:f5:02:88:9d:14:92:b6:
         a2:f1:3b:ca:52:80:9d:09:23:9b:16:1f:e8:7a:da:ed:dc:14:
         7c:77:c3:7b:36:2f:1a:9b:00:ee:9b:03:21:84:8a:9d:81:5e:
         87:50:ba:a8:35:0c:9e:8d:b7:8e:51:47:ff:9d:5e:ee:dd:dc:
         53:fc:13:39:c3:88:ce:f4:e6:ed:7c:79:43:0d:39:9f:6e:02:
         f3:d0:85:77:7c:2b:14:38:21:fb:36:29:a1:01:da:c3:7a:58:
         c3:89:50:5d:83:62:1c:90:2a:1d:63:91:cd:e6:bb:1b:7d:b0:
         9a:0c:fd:48:21:e4:89:b3:4c:12:32:85:97:81:80:5d:c3:e4:
         a8:ba:ec:2d:4f:dd:81:0f:b8:cc:8b:e6:03:97:7a:f4:5b:b9:
         e2:0b:6e:b6:93:3d:8f:24:16:82:c8:ef:89:e8:65:b2:43:7f:
         2f:24:ce:e4:57:fd:77:8d:77:1d:c8:ae:32:e8:4c:0b:aa:52:
         77:82:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:10 2025 by rpki-client