Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f6e321a-849c-3568-864f-736eba2c0808.roa
File:                     7f6e321a-849c-3568-864f-736eba2c0808.roa (raw, json)
Hash identifier:          j+bjI+knMgR/1j1cncrXBdAnv3z7a1KT/KhjfO9Xg4s=
Subject key identifier:   72:8F:99:64:C9:69:57:1B:E6:39:DB:C5:B3:1B:85:D7:33:93:17:36
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E0C1ADBBE1261D8638B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f6e321a-849c-3568-864f-736eba2c0808.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.89.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:0c:1a:db:be:12:61:d8:63:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=bda1d66a-ae2a-4f3b-bde4-dc31fb0fcd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6e:29:5a:21:07:bf:99:5f:f5:c8:5b:96:28:
                    9f:d1:94:db:ac:db:55:87:08:f5:6b:b8:cf:c0:a8:
                    46:78:cc:23:ce:ea:55:88:b1:c2:ba:98:c5:b1:bf:
                    1f:8f:b5:43:e6:c3:90:02:15:21:10:e8:fb:9e:b2:
                    d0:20:05:a8:5f:1e:e6:67:53:71:23:32:f3:e7:e6:
                    cb:ec:fb:b0:d7:cc:7f:00:89:eb:f9:dc:3f:9f:1a:
                    36:d1:f2:ef:30:bf:2a:77:2b:5c:18:ba:24:f7:76:
                    f4:76:7e:f9:e4:45:8b:56:e2:9b:52:e7:e8:61:b1:
                    af:32:0d:27:8d:e5:18:db:19:28:9d:4a:b0:53:16:
                    f0:88:f0:38:19:5d:44:00:9c:9e:2c:f9:dd:21:0a:
                    9b:04:e9:57:2f:5a:e5:d1:7a:4d:1f:93:94:34:04:
                    74:d1:05:f0:d4:d1:7e:df:ff:b3:ae:0b:4e:95:07:
                    dc:42:50:c9:26:25:ab:89:fa:4e:20:11:fb:8f:05:
                    cc:27:e7:97:4a:da:01:6b:bf:e0:68:ab:6d:4f:5c:
                    77:2c:60:bb:cc:4f:40:2e:e6:38:12:7c:38:09:1c:
                    0b:25:13:42:79:6f:65:dc:aa:99:2c:60:37:27:5d:
                    9f:03:86:06:f2:dc:0c:57:f5:d4:0a:4d:ed:b9:87:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:99:64:C9:69:57:1B:E6:39:DB:C5:B3:1B:85:D7:33:93:17:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f6e321a-849c-3568-864f-736eba2c0808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.89.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:62:70:2a:ae:72:81:d0:6a:15:62:f8:28:fc:ef:02:5a:cf:
         f9:a5:1c:76:aa:f8:79:0a:82:bb:ba:c8:ce:96:ae:77:ca:f2:
         7c:e1:2f:e0:60:5d:08:d6:bc:38:64:0e:b7:25:d7:76:17:42:
         9c:2e:9c:b9:2a:aa:91:a3:9c:66:e2:a8:48:f0:0f:ee:1e:45:
         d7:f4:09:9f:19:ba:3a:11:9a:26:22:dc:da:41:58:10:81:81:
         77:81:65:f5:db:04:aa:3f:de:07:99:14:54:2e:8b:89:2d:b2:
         a4:9b:0c:50:fc:6f:f4:0d:eb:77:2a:cd:2e:74:5a:12:63:d0:
         75:4a:01:4b:7d:01:31:37:10:7f:f5:1c:dd:e4:52:ac:f5:9a:
         66:46:10:95:a1:c6:b9:3e:80:37:84:85:52:b7:e3:ce:76:82:
         8c:61:69:50:e9:b6:82:20:89:3d:02:7d:a9:35:c5:7c:56:e5:
         6c:94:91:ef:18:f0:3b:6f:85:fe:ac:45:13:82:22:e5:0d:86:
         ca:18:1a:57:6e:ff:df:a6:3e:3a:f1:d8:af:67:ff:4c:a2:39:
         18:cb:a9:78:a7:82:1a:01:fe:fe:c9:1d:30:33:ad:e5:b9:e7:
         2a:34:ea:cc:a9:30:95:0a:9f:d4:b7:0e:61:49:70:ce:ec:f1:
         21:c6:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:26 2025 by rpki-client