Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948b4dc5-6277-3214-ab00-f2b5873cd796.roa
File:                     948b4dc5-6277-3214-ab00-f2b5873cd796.roa (raw, json)
Hash identifier:          IW8ml27X355MguwTlTArex99sMoO1qGlakCABEmY9p4=
Subject key identifier:   BE:2C:79:30:03:C4:78:CA:83:B6:E1:33:35:0D:43:5B:42:0F:08:35
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6952761EE0BE261B4180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948b4dc5-6277-3214-ab00-f2b5873cd796.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:69:52:76:1e:e0:be:26:1b:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d8981688-1c1c-404c-b0ce-7c67e81c85c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:8b:1a:6b:08:87:cf:a8:16:12:4a:d8:38:
                    37:55:89:37:10:64:2a:76:07:90:03:82:92:c7:2e:
                    71:98:25:84:8f:3e:ed:97:04:1c:c7:c8:8e:e3:6e:
                    32:3f:6e:f1:18:fd:e5:f2:1e:24:4a:7f:81:f8:b7:
                    43:05:9e:1a:26:6c:4c:92:28:2e:f2:f7:eb:a4:ea:
                    14:09:ba:66:2d:d9:41:b5:2b:d2:ec:1b:bf:bc:06:
                    12:66:79:3d:b5:28:88:ed:13:50:65:bc:30:dc:7b:
                    91:83:4a:a6:4e:53:a4:d3:56:5e:87:28:e1:5d:63:
                    05:7e:be:e7:37:37:a5:b7:92:48:f2:4d:42:ea:fe:
                    f4:a3:b7:e3:ca:50:e7:c9:c7:59:ea:00:88:60:8a:
                    f3:7e:98:3a:11:2d:22:93:cd:d6:6a:43:3f:d8:81:
                    69:1d:11:01:64:d1:66:bd:00:c3:08:95:da:a7:08:
                    a1:ec:7d:17:d3:ee:1d:4d:16:22:b2:79:3e:3a:94:
                    e4:bc:de:81:05:47:ee:29:3c:4b:6d:34:c4:ca:af:
                    55:3d:6e:3d:e4:60:50:5f:62:8a:06:10:de:14:cd:
                    b2:74:3f:d1:14:56:ee:ca:6e:c7:6b:8a:8f:25:6c:
                    da:56:61:90:8f:35:f6:5f:8c:29:f1:21:89:4f:e0:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:79:30:03:C4:78:CA:83:B6:E1:33:35:0D:43:5B:42:0F:08:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/948b4dc5-6277-3214-ab00-f2b5873cd796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:7f:10:e4:bf:6b:56:5e:e2:45:d9:db:b9:e5:ec:f7:62:
         3e:81:83:a0:b4:6d:0b:69:8e:3e:db:d7:fc:52:c3:c3:0c:4f:
         ff:23:49:8f:80:79:8f:22:58:7e:50:db:df:04:27:cb:67:a9:
         9a:c3:b3:97:82:e5:fa:e7:af:27:a7:f8:76:c8:f0:3a:31:58:
         5c:37:6f:45:de:64:bd:e7:0c:c0:ad:56:18:28:2c:ef:0a:6f:
         46:82:2e:bd:c4:99:9b:4a:74:f0:ba:82:22:e9:fa:95:5b:78:
         0a:54:b1:3c:c1:8e:ca:51:d8:15:90:fe:15:c0:bc:a3:d4:25:
         13:b4:f0:fb:14:7d:96:ef:80:14:42:8b:e7:7f:73:05:12:2d:
         b5:33:5d:46:96:af:70:94:14:7c:da:34:d4:96:fd:ad:dc:88:
         91:01:44:65:9d:43:e3:4f:b5:66:a9:83:65:32:f7:bc:3b:b8:
         72:dd:66:23:4e:ed:b4:2f:5e:df:55:c7:f7:d0:7f:0b:03:db:
         77:9b:ee:2d:6d:b4:9c:05:49:a1:12:11:33:c5:d2:ff:77:42:
         9a:35:0c:db:7f:c1:57:d8:60:d0:bb:ce:59:2d:c2:7e:3b:bc:
         4e:7f:c3:5a:4e:2a:b7:c9:42:a5:24:c7:fc:d0:c9:71:85:21:
         a3:36:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:36 2025 by rpki-client