Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7aebabdc-d93c-344f-89cd-b48dd4e78223.roa
File:                     7aebabdc-d93c-344f-89cd-b48dd4e78223.roa (raw, json)
Hash identifier:          2zx8fm765H5yTswWAs8gsOBDGpoZEtJKGXOf2qKXE7A=
Subject key identifier:   F7:05:AE:4E:32:23:EA:AB:B5:2A:59:1C:54:26:1F:CC:08:C7:51:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A58CAFC599C4B66B0A8314500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7aebabdc-d93c-344f-89cd-b48dd4e78223.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.34.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fc:59:9c:4b:66:b0:a8:31:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=c487470f-c1b1-4038-abe4-ef6378c9ae9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:6c:c9:31:f8:60:65:cb:ec:52:85:aa:c0:
                    ad:41:a4:fe:d0:a6:57:89:ce:8d:91:82:99:97:7e:
                    ba:33:22:2f:97:f5:60:ee:f8:52:36:a8:14:d8:35:
                    89:1a:2e:32:ee:ef:0f:6e:28:2f:85:e3:c0:41:bd:
                    1c:bf:4a:61:03:ca:62:9a:54:ae:c5:aa:a0:0f:19:
                    dd:83:6b:60:00:df:7a:b2:59:28:fa:cc:9d:08:a5:
                    b8:8d:4a:c8:81:27:a5:9b:50:72:9f:c2:a0:53:39:
                    fb:47:9c:fd:64:fb:9f:96:bb:7b:1e:5c:ff:f4:ae:
                    50:3f:3c:95:3a:2e:96:4c:ee:95:21:e7:c6:03:07:
                    c4:dd:e0:e9:b6:cb:4e:8f:68:30:2c:3a:a3:29:ac:
                    a9:e0:d6:d2:a5:d9:d1:79:0d:91:e8:b5:5a:91:ff:
                    fa:97:2f:c3:96:b9:f6:52:b7:ff:32:e7:05:40:7d:
                    38:fb:d4:d4:71:f7:7d:c8:fb:75:96:e2:3f:8d:fb:
                    6d:32:7c:94:76:87:b8:24:2b:de:bc:18:96:ed:8c:
                    c9:bf:47:a3:40:4f:c6:1e:11:ee:11:1e:90:77:a4:
                    b1:b4:d0:d2:5f:64:42:64:a7:74:cd:27:d4:df:11:
                    84:54:65:68:a1:35:14:cb:97:81:34:4d:6f:25:f2:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:05:AE:4E:32:23:EA:AB:B5:2A:59:1C:54:26:1F:CC:08:C7:51:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7aebabdc-d93c-344f-89cd-b48dd4e78223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.34.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:73:49:98:31:ad:77:b6:3f:9f:5e:2c:bf:9c:f2:6d:60:
         25:99:ff:f2:9c:35:2c:f6:eb:b6:00:31:35:a6:9d:75:4c:f6:
         ad:5a:53:3e:d7:3d:0f:7c:27:d2:af:72:40:0a:dd:c2:87:c3:
         33:98:90:10:65:14:96:24:6b:16:16:56:ae:1c:84:1a:d1:e8:
         bf:65:73:28:0a:e3:c1:42:8c:26:db:01:d9:76:e7:3f:bb:85:
         d4:cb:6e:74:c1:84:92:69:10:b5:79:29:3b:a0:ef:9d:3c:22:
         44:89:df:7c:88:f4:c8:3b:2b:98:bf:cb:1e:f7:5f:8c:d4:17:
         32:1b:c7:ec:55:df:9c:0c:d7:fa:92:6d:fe:0b:27:4e:99:ad:
         a7:7a:96:89:10:0d:c3:60:7c:f4:1b:94:85:52:f9:0f:1e:f1:
         bd:c8:ce:ef:bf:f0:97:08:ec:44:53:c3:7e:a6:11:12:c2:e4:
         21:db:6a:3a:e3:8e:0d:e7:d2:37:b6:49:3c:af:42:7b:24:c8:
         5b:a2:f3:e4:1d:71:02:b4:e1:81:11:0d:ca:4f:7e:e9:b4:80:
         c0:de:3c:ab:48:dd:84:fd:54:22:71:5b:39:fb:05:3d:70:cb:
         dd:ef:dd:a3:19:20:a3:b3:e5:fa:3d:09:1e:4f:96:eb:6f:d7:
         35:cb:60:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyvxZnEtmsKgxRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
YzQ4NzQ3MGYtYzFiMS00MDM4LWFiZTQtZWY2Mzc4YzlhZTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt1syTH4YGXL7FKFqsCtQaT+0KZXic6NkYKZ
l366MyIvl/Vg7vhSNqgU2DWJGi4y7u8PbigvhePAQb0cv0phA8pimlSuxaqgDxnd
g2tgAN96slko+sydCKW4jUrIgSelm1Byn8KgUzn7R5z9ZPuflrt7Hlz/9K5QPzyV
Oi6WTO6VIefGAwfE3eDptstOj2gwLDqjKayp4NbSpdnReQ2R6LVakf/6ly/Dlrn2
Urf/MucFQH04+9TUcfd9yPt1luI/jfttMnyUdoe4JCvevBiW7YzJv0ejQE/GHhHu
ER6Qd6SxtNDSX2RCZKd0zSfU3xGEVGVooTUUy5eBNE1vJfLVpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcFrk4yI+qrtSpZHFQmH8wIx1HwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2FlYmFiZGMtZDkzYy0z
NDRmLTg5Y2QtYjQ4ZGQ0ZTc4MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCJIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwZc0mYMa13tj+fXiy/nPJtYCWZ//KcNSz267YAMTWmnXVM9q1aUz7X
PQ98J9KvckAK3cKHwzOYkBBlFJYkaxYWVq4chBrR6L9lcygK48FCjCbbAdl25z+7
hdTLbnTBhJJpELV5KTug7508IkSJ33yI9Mg7K5i/yx73X4zUFzIbx+xV35wM1/qS
bf4LJ06Zrad6lokQDcNgfPQblIVS+Q8e8b3Izu+/8JcI7ERTw36mERLC5CHbajrj
jg3n0je2STyvQnskyFui8+QdcQK04YERDcpPfum0gMDePKtI3YT9VCJxWzn7BT1w
y93v3aMZIKOz5fo9CR5Plutv1zXLYM4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:27:55 2025 by rpki-client