Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b2fdb47-7491-3732-b074-4a6ea5bb24a5.roa
File:                     6b2fdb47-7491-3732-b074-4a6ea5bb24a5.roa (raw, json)
Hash identifier:          8153mN4INWDIV5erpEATHoSTnXk7N6eUh2bmgWtQDu8=
Subject key identifier:   A3:8C:5D:62:08:87:44:F2:FD:86:4C:E9:EF:0A:E8:11:E9:5E:6A:A3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DF003E5DA4D8EAAE49300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b2fdb47-7491-3732-b074-4a6ea5bb24a5.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        66.214.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:f0:03:e5:da:4d:8e:aa:e4:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=87955a17-3388-404f-93e3-32e92d62b822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:9d:fe:27:b9:a8:1d:b1:78:27:c6:1a:6a:
                    29:3e:c2:88:73:78:7c:de:f2:a7:23:17:8b:98:4e:
                    6d:09:c9:7f:1e:eb:22:1b:de:74:47:d0:f7:2a:cb:
                    f0:0d:b5:a2:25:8d:9a:c6:31:7c:8e:7e:0f:d3:f1:
                    4f:f9:8a:71:15:dc:d9:e4:47:74:55:96:24:2c:5f:
                    67:9f:ec:64:ce:95:d9:64:c6:bb:44:88:82:a5:fa:
                    8a:45:32:73:3d:23:61:db:fb:c9:2c:11:5f:3d:1f:
                    0d:a7:19:ed:43:22:ec:b3:d9:d9:ad:18:d6:9f:70:
                    7e:b0:c5:f8:d8:94:c5:4f:14:71:ca:55:c6:0f:df:
                    4d:5b:b1:77:6a:90:bf:4e:e1:d8:a6:c1:e1:e8:08:
                    65:3c:9f:b6:ca:00:e1:84:49:e5:19:c8:d2:ba:71:
                    e2:ef:4e:cb:b6:1e:cb:3a:76:ef:4d:68:e4:12:9b:
                    67:84:88:3c:a6:3c:6f:f3:d4:28:56:56:38:d4:69:
                    3a:1e:f7:2d:74:44:1d:23:8a:6d:d2:09:f0:ce:ee:
                    66:70:43:f1:20:be:12:09:35:31:6f:74:05:59:c6:
                    cb:f4:b9:82:e8:dc:33:c6:9d:69:e6:a7:93:22:49:
                    b6:38:52:24:d3:8d:60:c8:93:3e:b7:61:c4:8b:67:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:5D:62:08:87:44:F2:FD:86:4C:E9:EF:0A:E8:11:E9:5E:6A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6b2fdb47-7491-3732-b074-4a6ea5bb24a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.214.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:5b:38:c9:77:66:a7:42:cb:29:94:fb:5b:cc:7f:2f:b8:
         55:e4:e2:ce:03:b6:de:db:b8:8f:7e:da:7e:af:7b:bc:03:a2:
         5a:e8:30:48:85:6f:57:a7:2d:01:16:f0:c9:9f:ba:9d:8b:d2:
         a3:75:9f:8d:44:85:37:06:dc:c4:a9:5b:52:4b:d3:26:6a:4e:
         db:68:1d:3a:57:16:ba:61:0b:9b:8f:69:59:71:16:d0:c2:9a:
         5d:8c:3f:84:d7:e5:01:09:88:39:5c:e3:e9:b5:cb:7e:f6:75:
         81:1b:af:b3:4f:a9:14:c8:a5:3a:cf:3c:e7:2a:fd:3c:c8:4c:
         29:8d:a0:d5:a8:a0:0e:fd:17:92:2d:7e:2e:8c:83:24:ba:4b:
         47:1b:78:a0:ef:53:5f:b0:da:42:a1:28:f0:74:54:1f:f5:02:
         5d:2e:e3:95:d7:f8:f6:a2:91:20:47:66:17:72:71:49:a1:a4:
         4d:5c:17:42:f0:83:a4:74:4e:43:90:58:03:35:30:b3:c3:91:
         68:aa:bc:0a:55:39:f9:e4:00:56:52:80:94:09:a1:4c:58:de:
         a1:36:33:73:84:3b:79:e0:6a:b4:e5:83:f8:a6:2b:dc:52:16:
         79:5c:32:90:3d:d9:7b:f1:66:8f:7c:cb:d8:38:c2:45:8b:7c:
         8d:bf:9b:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfAD5dpNjqrkkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ODc5NTVhMTctMzM4OC00MDRmLTkzZTMtMzJlOTJkNjJiODIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3id/ie5qB2xeCfGGmopPsKIc3h83vKnIxeL
mE5tCcl/HusiG950R9D3KsvwDbWiJY2axjF8jn4P0/FP+YpxFdzZ5Ed0VZYkLF9n
n+xkzpXZZMa7RIiCpfqKRTJzPSNh2/vJLBFfPR8NpxntQyLss9nZrRjWn3B+sMX4
2JTFTxRxylXGD99NW7F3apC/TuHYpsHh6AhlPJ+2ygDhhEnlGcjSunHi707Lth7L
OnbvTWjkEptnhIg8pjxv89QoVlY41Gk6HvctdEQdI4pt0gnwzu5mcEPxIL4SCTUx
b3QFWcbL9LmC6Nwzxp1p5qeTIkm2OFIk041gyJM+t2HEi2eRbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOMXWIIh0Ty/YZM6e8K6BHpXmqjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNmIyZmRiNDctNzQ5MS0z
NzMyLWIwNzQtNGE2ZWE1YmIyNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6WWzjJd2anQssplPtbzH8vuFXk4s4Dtt7buI9+2n6ve7wDolroMEiF
b1enLQEW8Mmfup2L0qN1n41EhTcG3MSpW1JL0yZqTttoHTpXFrphC5uPaVlxFtDC
ml2MP4TX5QEJiDlc4+m1y372dYEbr7NPqRTIpTrPPOcq/TzITCmNoNWooA79F5It
fi6MgyS6S0cbeKDvU1+w2kKhKPB0VB/1Al0u45XX+PaikSBHZhdycUmhpE1cF0Lw
g6R0TkOQWAM1MLPDkWiqvApVOfnkAFZSgJQJoUxY3qE2M3OEO3ngarTlg/imK9xS
FnlcMpA92XvxZo98y9g4wkWLfI2/mwc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:53 2025 by rpki-client