Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72435104-3c50-3bec-aa7a-4c6c66406ea9.roa
File:                     72435104-3c50-3bec-aa7a-4c6c66406ea9.roa (raw, json)
Hash identifier:          JekLLjHs+SNtqEBuErRcLLbEjAg1aA4bZt4BJoJLO1U=
Subject key identifier:   32:B1:6C:A3:26:51:D2:A5:EC:72:C6:A7:FD:EF:0B:83:ED:69:6C:39
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E0AE0F7A062441C428EE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72435104-3c50-3bec-aa7a-4c6c66406ea9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        96.36.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:0a:e0:f7:a0:62:44:1c:42:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f232a01a-dc57-4e08-9a07-25fb7b9bdcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:f1:3c:29:17:ee:56:74:0a:7c:51:8a:a1:
                    e7:a8:70:1e:7e:3a:d5:b6:d4:ff:dd:87:d4:a9:c4:
                    63:fd:2b:6c:91:70:61:a3:89:55:73:c7:14:e7:8c:
                    53:af:63:d7:fb:eb:9a:bf:2c:60:b0:9e:ae:9c:15:
                    f3:72:c4:61:ff:b5:b6:13:4f:66:b4:80:0b:dc:a6:
                    0a:6d:83:fb:31:30:f0:f9:9a:75:0c:ed:9f:2a:2c:
                    3d:c6:9d:58:62:4f:25:2e:d9:22:cf:ee:69:fb:72:
                    6d:d9:a3:54:47:e6:68:20:81:b7:1b:0c:15:81:25:
                    e6:51:68:6c:44:dc:95:93:35:f1:24:e4:3f:64:4e:
                    9d:30:43:7e:8c:1d:ee:85:91:75:21:ba:5e:f3:eb:
                    7d:f7:fe:af:4f:66:c9:de:e4:c4:17:a3:3a:6a:a4:
                    f6:ac:17:b8:b3:cc:dc:ab:a6:bb:d5:ad:9d:f2:d1:
                    0f:bf:ab:d7:f8:64:40:0b:f2:e2:8d:4b:17:15:de:
                    27:3e:05:92:ec:14:a7:8b:90:df:17:6b:14:69:35:
                    ff:f3:04:aa:c5:b0:24:75:08:5c:33:32:74:c2:8f:
                    de:c9:ae:9c:ad:e8:ce:14:0c:80:b7:5e:b6:2a:a6:
                    65:13:43:3e:75:8d:fb:c4:e4:8c:6b:de:a0:73:e1:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:6C:A3:26:51:D2:A5:EC:72:C6:A7:FD:EF:0B:83:ED:69:6C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/72435104-3c50-3bec-aa7a-4c6c66406ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:03:7c:19:23:cf:22:25:4e:0d:e0:ca:87:56:c1:d8:13:8b:
         fc:00:22:2c:cf:e2:3d:79:61:0c:1b:e3:89:8d:d5:71:4f:62:
         20:57:a1:d8:62:66:6b:c8:9b:1f:6d:6c:77:03:60:e4:35:42:
         f2:45:c7:72:7a:56:29:65:7c:14:6d:92:cc:2e:8d:c6:0e:b5:
         b6:62:f0:0b:4f:56:cd:c1:bd:fd:dd:f6:7a:29:2b:89:ca:c8:
         6d:93:6d:7b:a8:8b:33:bf:a8:78:94:81:52:e8:ea:1d:12:79:
         62:ac:ac:ad:b3:30:9c:02:26:bf:4a:f9:43:21:16:ce:95:3d:
         55:b5:4e:dc:f4:09:2f:04:7c:15:dd:5e:20:50:4a:6a:71:1a:
         6d:f9:e4:ac:ce:63:39:ac:bf:72:30:57:ef:3f:ac:6a:b4:ac:
         20:a7:bd:f8:08:31:40:29:e3:2e:61:5e:d7:52:83:ee:6a:7f:
         19:3d:da:7f:f9:a6:12:3c:e3:7d:35:f5:96:63:8a:8a:01:ae:
         77:e9:53:2d:4e:72:ce:4b:0e:16:be:4f:c2:86:e9:c1:42:51:
         51:60:7c:cf:fc:d6:07:fe:63:86:5e:f8:43:cf:ae:18:be:76:
         01:6c:c9:d7:ce:d2:22:dc:7c:fc:c3:3a:fa:6a:fe:76:91:f1:
         04:69:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:04 2025 by rpki-client