Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69f946af-6b6e-3012-9a9d-8a2b773b83a0.roa
File:                     69f946af-6b6e-3012-9a9d-8a2b773b83a0.roa (raw, json)
Hash identifier:          coSTiZFSd3Tg62drQgt1te9MV2OladN86Gr0CeAy24g=
Subject key identifier:   2D:50:54:72:2D:10:36:4A:EB:89:B1:F9:08:5A:CD:D1:D1:B3:33:4B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D63D55B90E42D4EBA3100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69f946af-6b6e-3012-9a9d-8a2b773b83a0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.86.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:63:d5:5b:90:e4:2d:4e:ba:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=abf01d5c-864a-4464-ae60-97ad8c2881d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:6b:8c:09:b3:cc:f7:6c:35:c2:0e:f1:10:
                    28:d7:65:4b:76:d9:40:8c:22:c3:6e:9a:64:68:8f:
                    81:bc:82:6e:26:e6:5e:3d:08:a1:29:ea:68:25:80:
                    d8:e4:16:48:bb:fe:c7:39:8a:c3:59:2c:5a:a5:a0:
                    6f:4b:cc:71:f2:7e:7d:a5:64:7b:80:bd:de:ba:5a:
                    a9:1e:fd:12:7c:d6:f3:06:1c:74:78:78:28:72:52:
                    5f:89:7b:6e:1f:05:71:a9:72:9f:67:2e:9d:75:08:
                    db:51:4c:04:89:48:cc:51:6d:75:02:7d:45:52:f7:
                    05:d7:68:cb:b6:17:e3:f2:87:a8:79:0f:75:5c:bc:
                    c9:b9:50:ae:ef:1e:49:15:60:90:04:8e:68:f2:f4:
                    68:1f:29:a1:41:85:79:43:19:c7:f9:5f:7a:4f:ab:
                    b5:12:db:5c:9d:ae:d8:55:5e:5d:57:db:4a:b7:50:
                    40:8c:25:72:9b:47:8b:c0:69:e1:8d:1f:fb:ce:4b:
                    aa:86:2c:76:35:e8:f9:5a:31:3c:a5:01:53:0d:5e:
                    aa:5f:39:a1:25:cd:2b:5d:e4:eb:00:1f:40:a1:2d:
                    eb:99:0d:41:5f:80:d1:0a:c9:1a:c0:c1:ac:43:09:
                    ab:28:cb:62:e7:4a:9f:4b:cf:f9:b1:f0:e8:d1:c2:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:54:72:2D:10:36:4A:EB:89:B1:F9:08:5A:CD:D1:D1:B3:33:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69f946af-6b6e-3012-9a9d-8a2b773b83a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:74:78:32:2d:09:14:c0:fd:9e:3f:60:06:07:28:30:1c:36:
         6f:f0:95:cf:49:5e:73:34:44:3a:5c:a3:00:79:23:42:3d:6d:
         32:39:6a:93:51:9c:b8:95:31:d6:46:e3:3f:25:9c:3f:16:d7:
         9a:00:00:60:6c:96:43:07:60:50:c1:03:3b:2a:ed:21:40:2c:
         aa:6b:d9:ea:fc:70:63:b4:e6:67:27:8d:10:39:3b:55:12:fa:
         ce:bb:6c:74:ae:1e:13:cc:72:b1:cf:74:f4:7e:cb:89:4a:d3:
         7b:23:39:97:fb:1a:17:6e:e5:1c:f1:d4:36:16:07:de:6e:d1:
         c5:45:23:f0:cb:a9:2b:67:5f:a7:a4:71:c6:67:29:94:6a:f4:
         1a:e0:63:2b:7a:fb:f2:8a:b9:f3:3f:1c:50:2e:be:cc:36:f7:
         9d:d5:4b:8c:7e:66:f0:0e:cf:4c:17:2b:89:f6:7b:8a:c0:35:
         8f:71:2b:d5:da:ad:1f:74:dc:9b:43:0e:d2:e7:ea:d6:37:c7:
         f5:e3:9f:69:f6:1d:22:4d:39:c9:51:24:01:73:4b:08:a1:a7:
         57:47:ff:15:68:e5:3a:1e:f5:52:a3:f6:06:a3:9a:94:35:72:
         3e:3d:69:eb:62:31:f9:2f:27:54:5a:93:d7:90:62:06:6d:a4:
         2c:fb:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:23 2025 by rpki-client