Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa
File:                     7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa (raw, json)
Hash identifier:          v5Nt/wdglZIjiRjYJFtheGF9KF5SYsgs9+7vB21afbY=
Subject key identifier:   04:63:57:98:4F:C4:83:FC:26:24:BE:7F:DB:E0:B3:2A:A6:DF:B3:27
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D27864A04E0C9F36A64E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        47.231.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:27:86:4a:04:e0:c9:f3:6a:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f2a4a06b-cd32-4fbf-b486-5eb4bc0300d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:9b:3c:d9:b1:6c:07:14:d6:18:3b:37:1e:
                    be:e5:5b:87:98:58:30:b7:19:fb:81:fe:ef:10:c3:
                    c2:1a:c9:8d:4c:fc:9d:c6:c1:71:e9:c5:26:a5:31:
                    95:de:3b:92:35:a5:68:d8:d3:7c:4d:55:8b:1f:9e:
                    0e:50:0f:32:af:c3:28:e5:df:50:3a:04:a3:c3:78:
                    3d:32:3e:9d:0d:6a:45:f5:bc:60:3d:d5:88:c5:35:
                    88:63:e0:b7:84:d7:af:2b:0a:7d:72:e8:d7:4d:13:
                    e4:29:f6:27:62:6d:8b:17:7d:4e:7d:7f:66:a2:45:
                    78:44:f1:60:07:7d:7c:f1:3e:3b:e1:0d:f5:bd:47:
                    b5:08:e0:91:47:83:66:dc:48:b0:89:8d:a2:c4:98:
                    28:69:a6:f6:3e:a8:75:e8:03:c8:ee:13:ba:99:1b:
                    d8:cd:9e:51:06:ad:4a:f2:df:33:f6:ef:d0:e7:c5:
                    96:ae:77:02:ce:f6:62:3c:d5:d6:6a:09:a0:97:32:
                    0a:85:04:c5:47:06:08:ea:21:fd:c0:be:5e:5d:ba:
                    74:f1:7f:74:5f:43:1f:b5:80:75:5a:2e:d3:af:1d:
                    6a:48:18:87:e9:9f:50:67:68:e1:fb:c4:80:fe:1e:
                    d5:d2:02:2e:bd:48:12:24:50:1e:d2:88:9b:06:c1:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:63:57:98:4F:C4:83:FC:26:24:BE:7F:DB:E0:B3:2A:A6:DF:B3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:b0:80:f4:85:2d:5c:a6:61:75:7d:fe:9b:5a:b9:22:2d:
         74:c9:91:7c:0d:e4:55:6f:8c:b0:8a:26:e8:98:8e:08:13:ab:
         6d:e1:c8:db:78:52:d2:82:ec:9c:00:c8:20:0f:48:31:d0:c6:
         1b:a1:c9:5c:bc:ba:07:b3:5b:23:4d:2f:c3:dc:69:65:f2:62:
         93:78:b2:54:ed:db:32:77:d3:40:04:73:f8:46:6a:a1:32:5a:
         b3:f8:f5:eb:8f:48:b9:93:85:a7:81:b4:d1:a8:0f:96:f1:4f:
         0c:31:57:f2:13:f5:d4:dd:f8:c0:a4:c0:c8:69:76:ef:61:a9:
         35:2f:ad:83:03:61:5c:87:6f:e2:83:34:59:b3:c1:ce:08:cf:
         fb:10:e0:aa:44:10:4e:77:26:08:69:a4:eb:0e:11:73:51:ef:
         f7:c7:32:fe:8b:33:d6:7d:46:ca:0d:7b:75:aa:de:a2:d9:1f:
         de:28:e4:dd:1e:77:87:5f:7f:b9:a3:4a:07:86:dc:2c:ec:a7:
         ce:80:ca:17:c2:73:21:b3:c4:4e:fa:0e:e7:98:f6:f8:f9:e3:
         cd:78:e4:24:9a:3c:77:66:fa:d9:85:7b:41:c3:aa:c9:6d:25:
         d7:68:8b:95:7b:26:a9:d3:85:a9:73:1b:89:0d:ac:7b:8f:ac:
         d0:c6:ad:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHSeGSgTgyfNqZOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZjJhNGEwNmItY2QzMi00ZmJmLWI0ODYtNWViNGJjMDMwMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GebPNmxbAcU1hg7Nx6+5VuHmFgwtxn7gf7v
EMPCGsmNTPydxsFx6cUmpTGV3juSNaVo2NN8TVWLH54OUA8yr8Mo5d9QOgSjw3g9
Mj6dDWpF9bxgPdWIxTWIY+C3hNevKwp9cujXTRPkKfYnYm2LF31OfX9mokV4RPFg
B3188T474Q31vUe1COCRR4Nm3EiwiY2ixJgoaab2Pqh16API7hO6mRvYzZ5RBq1K
8t8z9u/Q58WWrncCzvZiPNXWagmglzIKhQTFRwYI6iH9wL5eXbp08X90X0MftYB1
Wi7Trx1qSBiH6Z9QZ2jh+8SA/h7V0gIuvUgSJFAe0oibBsGRHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARjV5hPxIP8JiS+f9vgsyqm37MnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzcxNWRkNjktMjhkOS0z
M2QwLTk2YTYtN2ZmOGQyZjkzYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFL+cgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByJsID0hS1cpmF1ff6bWrkiLXTJkXwN5FVvjLCKJuiYjggTq23hyNt4
UtKC7JwAyCAPSDHQxhuhyVy8ugezWyNNL8PcaWXyYpN4slTt2zJ300AEc/hGaqEy
WrP49euPSLmThaeBtNGoD5bxTwwxV/IT9dTd+MCkwMhpdu9hqTUvrYMDYVyHb+KD
NFmzwc4Iz/sQ4KpEEE53JghppOsOEXNR7/fHMv6LM9Z9RsoNe3Wq3qLZH94o5N0e
d4dff7mjSgeG3Czsp86AyhfCcyGzxE76DueY9vj548145CSaPHdm+tmFe0HDqslt
Jddoi5V7JqnThalzG4kNrHuPrNDGrZQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:19 2025 by rpki-client