Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f183d84-0841-3816-9fde-eea9b3a4c8a0.roa
File:                     8f183d84-0841-3816-9fde-eea9b3a4c8a0.roa (raw, json)
Hash identifier:          brn0d5zU9wVg3ahUeGJqOWygyoykDRtXxlvfVfJJf18=
Subject key identifier:   CC:CD:1D:41:25:CA:DB:A5:98:59:91:8C:61:D1:96:01:D7:45:2E:F4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D5BAB851C849995D71300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f183d84-0841-3816-9fde-eea9b3a4c8a0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.14.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:5b:ab:85:1c:84:99:95:d7:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f08234fc-76d9-4d30-9465-0407853167d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:89:29:74:52:cc:83:36:72:d9:00:84:40:8e:
                    be:cb:a7:1f:97:82:30:3b:25:4f:a1:ec:b8:e9:d3:
                    15:ec:07:85:06:b5:cb:9e:d7:f5:e8:88:16:2c:52:
                    b7:67:1e:e5:51:a7:0d:af:fe:7c:86:d6:05:9e:c8:
                    b5:ea:24:a8:d1:bd:b6:1d:89:76:0a:62:4e:ba:91:
                    91:df:d0:ec:ba:34:28:52:2c:df:1d:40:c1:df:da:
                    14:e3:8d:42:2d:23:3b:95:5b:cb:8b:e5:59:b1:95:
                    c7:d9:09:5d:bc:d9:6e:62:1c:94:08:35:8b:ad:f3:
                    6c:9d:57:6f:23:d0:df:4e:8b:74:f1:a4:45:62:50:
                    86:ac:32:15:68:f9:e0:fe:ff:78:87:97:a2:20:f4:
                    32:ed:d6:aa:c5:c2:fa:e9:ae:81:f8:a0:82:7a:70:
                    d4:a1:d3:ef:1b:20:38:ee:84:f0:b6:b2:00:8d:cd:
                    b3:06:7e:78:52:1d:15:c2:56:a2:d2:48:8c:3e:a8:
                    6d:03:63:35:9d:36:d2:15:89:04:d9:a5:e9:c6:22:
                    41:cd:ec:ed:f6:63:8a:85:40:25:79:fa:db:05:35:
                    20:88:ab:ad:b1:27:16:9b:c2:4d:82:c7:f5:95:a9:
                    09:0c:3e:f3:08:a0:51:8e:84:97:ae:cd:16:eb:51:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CD:1D:41:25:CA:DB:A5:98:59:91:8C:61:D1:96:01:D7:45:2E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f183d84-0841-3816-9fde-eea9b3a4c8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.14.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:2e:e9:19:1d:e1:d8:24:f2:71:45:0e:92:bb:ba:7a:b3:
         81:43:e8:4e:31:b6:0a:b8:9b:10:1d:0e:27:4c:67:d3:4b:f1:
         d2:13:cb:7d:0d:96:cc:bb:e4:a1:25:fc:ff:36:57:c6:e7:5b:
         b2:cf:88:6e:9a:8c:39:88:3c:ef:60:db:19:81:85:4f:ea:9a:
         2e:20:93:fd:f3:19:b9:96:cd:05:fb:fb:44:0b:71:24:5e:76:
         f5:b9:33:80:62:90:a0:94:7f:c1:8a:5e:58:82:42:08:c3:c4:
         a8:e6:8e:de:ed:57:e7:b4:f3:b9:56:51:dc:c7:3a:74:49:0c:
         cf:c4:17:c3:f1:0e:97:2c:22:40:e2:2d:4e:7f:03:a3:2f:70:
         4a:ef:b5:a3:3c:d6:29:60:27:b2:6d:49:11:af:14:fa:eb:6e:
         f8:59:16:2a:97:1c:d8:15:c5:7d:3c:34:ce:2b:fa:38:6c:9f:
         9d:09:e9:e0:ac:65:b3:eb:02:a0:d6:c5:7a:77:bd:1c:e7:c0:
         05:2a:44:fd:1c:bf:c5:71:6e:d2:1d:f4:e2:21:3f:e7:57:23:
         c5:fc:2f:a7:fd:87:d4:91:8b:c6:54:5a:23:99:16:93:12:d4:
         49:fb:6e:a3:26:07:4c:c9:86:08:03:36:dc:2b:ac:a6:e4:2d:
         d7:71:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:15 2025 by rpki-client