Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d026eda-0e0b-302a-9a81-6188d852f3e6.roa
File:                     9d026eda-0e0b-302a-9a81-6188d852f3e6.roa (raw, json)
Hash identifier:          a19t1NXhGo/H9PBazLwlb/61RHERUTTaj5dBddEJnDg=
Subject key identifier:   C9:F5:D7:60:EA:BE:35:5E:C6:20:1F:01:7A:F2:E4:60:9D:F8:93:B1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E02D7B374B77C75360000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d026eda-0e0b-302a-9a81-6188d852f3e6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.136.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:02:d7:b3:74:b7:7c:75:36:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8b0d5734-e9f6-4312-9e14-602de81f20a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:89:6c:09:0a:06:79:3a:33:64:4a:df:f4:
                    e6:4e:cb:b5:ef:66:6a:b5:1c:7c:5e:41:f7:6f:d0:
                    5c:4c:15:7e:b1:74:7e:26:9c:80:6b:ac:48:dc:f4:
                    5e:87:48:c2:c4:42:21:76:86:42:fc:ae:60:0f:75:
                    ad:2d:7a:cd:c8:69:80:ad:a7:c4:57:44:77:cf:13:
                    8d:42:4d:ce:50:51:4d:40:0b:15:fd:44:88:9d:90:
                    ee:6a:f5:2c:a0:4b:99:a4:67:8b:c7:c2:8e:29:5f:
                    22:fd:04:af:cb:9a:38:9e:66:b2:b1:5c:e8:fe:5e:
                    50:a6:18:50:97:cb:bc:15:74:de:8d:2a:05:79:54:
                    b3:99:22:5a:4a:8a:18:ee:7c:ce:4a:87:1e:1f:24:
                    42:76:e2:e6:fb:cc:b5:48:a2:97:4c:ed:25:36:39:
                    5f:a3:4c:fd:cb:cc:8e:d9:1f:1e:61:70:0e:f0:09:
                    03:fd:3b:2b:5d:8d:dd:d6:8f:60:58:17:bf:93:da:
                    4f:b0:64:2a:11:76:cf:69:04:d6:be:c7:2d:65:f4:
                    01:5f:23:12:b6:a0:93:b1:35:23:f3:6f:12:d3:98:
                    fa:56:92:b1:47:1b:19:32:91:d9:9a:03:5b:c5:7a:
                    9c:97:25:8a:3e:79:e6:38:0f:41:8c:92:2e:f6:b2:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F5:D7:60:EA:BE:35:5E:C6:20:1F:01:7A:F2:E4:60:9D:F8:93:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d026eda-0e0b-302a-9a81-6188d852f3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.136.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:23:e8:29:81:3c:29:45:eb:45:93:ba:56:a0:fe:95:60:
         da:fd:eb:15:f6:9e:ae:5b:9c:06:3a:ab:93:07:c4:91:5c:95:
         6c:95:79:e9:66:6a:04:c4:d7:ae:a6:d7:4d:60:03:97:b2:dd:
         25:c6:d1:df:ee:a3:63:cc:9c:1b:c1:f2:fa:df:77:d0:5d:6f:
         ac:e5:4c:b5:2c:eb:7d:27:b5:8a:56:45:91:51:cc:61:22:b6:
         67:92:c4:03:6c:02:5e:8d:e4:a4:f4:dc:d8:2e:fe:53:e1:d3:
         cd:66:fd:3e:a6:30:73:1c:93:e0:da:a7:7d:9a:2c:3f:e9:50:
         e1:52:45:8c:cc:f2:9e:09:96:27:44:5d:c3:35:97:ff:a8:a0:
         26:4b:f9:1d:b5:ed:53:d1:74:ce:c3:38:55:c9:b9:08:dd:f1:
         76:88:13:7c:f4:85:33:f0:46:8e:cb:c6:58:ba:d7:22:c9:95:
         e4:49:35:d4:c1:13:45:aa:e4:81:e8:a6:eb:9c:6f:8a:7e:72:
         45:ab:1e:ea:d1:b4:a8:bc:f4:01:f7:11:01:f3:56:69:41:0e:
         22:8a:52:b3:6b:2e:34:37:4f:67:94:5b:7a:a8:6d:33:0c:1f:
         53:66:2e:59:33:49:b4:4b:ee:76:14:b4:ac:2b:09:0d:51:ac:
         81:26:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:52 2025 by rpki-client