Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0af3eaf-4873-393c-a1f3-97cd9e125ee0.roa
File:                     a0af3eaf-4873-393c-a1f3-97cd9e125ee0.roa (raw, json)
Hash identifier:          N5vsEcFhKoxhaouvwwidegQb/j/OWmj47084v6NjQlc=
Subject key identifier:   D1:06:64:BB:8E:CF:C1:BD:B4:4B:90:F9:33:2B:F0:96:F1:B2:1B:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E0982C8AB086DDB20C880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0af3eaf-4873-393c-a1f3-97cd9e125ee0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.134.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:09:82:c8:ab:08:6d:db:20:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=4566bd29-2d0a-4aae-9460-a5531a6a008c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:22:12:69:3d:0d:2b:b9:88:9f:4f:53:8c:
                    6a:a9:fc:64:db:f1:c9:ae:5c:2c:13:91:91:de:95:
                    e9:a8:b1:75:f1:ba:9c:2b:1b:6f:ff:d0:7d:61:4b:
                    7c:34:4d:09:6b:4d:b3:a4:5f:08:a6:47:db:66:7f:
                    be:c2:65:af:b1:9e:a7:10:42:4e:49:a5:9c:84:ad:
                    a9:bf:b5:18:a5:c0:19:24:15:2a:d7:3b:fc:13:50:
                    e8:79:7c:ed:4f:0a:0e:38:10:ed:c4:f8:1a:13:67:
                    eb:ca:e6:f4:4a:9e:17:4e:d4:d2:c0:69:0e:01:47:
                    3e:a4:a3:5b:b8:ff:a5:c6:62:d8:31:d2:39:9b:58:
                    1c:fd:8d:bc:77:2b:4e:f9:43:cd:e7:65:bc:63:80:
                    2e:48:33:7d:cd:95:99:0e:d5:81:09:1f:24:05:02:
                    31:01:bc:c5:be:dd:25:26:e8:6c:9e:8d:c7:e0:b0:
                    33:78:5b:1b:d2:97:27:b6:14:66:28:ec:c4:57:6b:
                    49:16:3c:f6:47:25:09:dd:0c:ae:f5:2c:9c:b9:23:
                    aa:c9:4b:68:2d:01:0e:32:da:dd:7a:68:25:69:63:
                    7a:88:5f:82:a6:f4:59:3a:d5:61:4c:2b:97:13:69:
                    f7:57:ef:e8:d2:f7:dc:c6:e1:9a:d4:2c:d1:a5:73:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:06:64:BB:8E:CF:C1:BD:B4:4B:90:F9:33:2B:F0:96:F1:B2:1B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0af3eaf-4873-393c-a1f3-97cd9e125ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.134.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:05:32:e0:aa:30:6e:a1:80:37:40:1d:6b:d5:e6:96:09:45:
         66:ad:0e:c1:dc:ef:eb:32:9b:95:07:fb:6a:a6:d1:ef:83:96:
         c7:f3:10:e4:2f:d4:d7:55:7b:cc:81:ac:ed:54:00:d2:b3:35:
         f4:1d:57:87:a9:e9:8c:0b:14:f6:a9:96:c7:4e:3c:cd:57:3a:
         2d:d6:4e:f8:42:69:3b:a4:0f:ec:ea:c4:e5:84:a4:bc:a0:6c:
         ed:31:06:35:d1:55:b1:e9:a2:b1:82:14:be:f6:62:d9:27:eb:
         6c:5b:b9:44:b5:15:0c:df:90:b3:f2:0f:00:5d:bc:1f:f8:4d:
         cd:88:b7:37:1f:fe:cd:59:ec:84:95:22:3b:f5:6d:71:47:86:
         48:1c:2f:cb:8a:d7:31:2d:a4:8d:72:46:54:21:74:00:b3:99:
         b0:fc:09:a7:de:38:3c:59:a9:72:dd:11:78:b2:22:57:4c:d2:
         04:0e:b3:85:9c:d7:76:af:bb:65:db:87:79:0d:f4:54:11:65:
         b6:8f:d2:b0:d9:31:d8:cd:b6:56:34:99:5e:07:e5:22:2c:e8:
         e1:d8:79:12:3f:7f:8c:d8:4c:22:e0:70:3c:dd:a2:c5:ca:70:
         65:d1:96:3e:0e:b3:4a:4e:fa:3d:7d:16:d4:36:12:62:7e:9d:
         28:01:76:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgmCyKsIbdsgyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NDU2NmJkMjktMmQwYS00YWFlLTk0NjAtYTU1MzFhNmEwMDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC0iEmk9DSu5iJ9PU4xqqfxk2/HJrlwsE5GR
3pXpqLF18bqcKxtv/9B9YUt8NE0Ja02zpF8IpkfbZn++wmWvsZ6nEEJOSaWchK2p
v7UYpcAZJBUq1zv8E1DoeXztTwoOOBDtxPgaE2fryub0Sp4XTtTSwGkOAUc+pKNb
uP+lxmLYMdI5m1gc/Y28dytO+UPN52W8Y4AuSDN9zZWZDtWBCR8kBQIxAbzFvt0l
Juhsno3H4LAzeFsb0pcnthRmKOzEV2tJFjz2RyUJ3Qyu9SycuSOqyUtoLQEOMtrd
emglaWN6iF+CpvRZOtVhTCuXE2n3V+/o0vfcxuGa1CzRpXPGTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEGZLuOz8G9tEuQ+TMr8JbxshuuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTBhZjNlYWYtNDg3My0z
OTNjLWExZjMtOTdjZDllMTI1ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES4ZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUFMuCqMG6hgDdAHWvV5pYJRWatDsHc7+sym5UH+2qm0e+DlsfzEOQv
1NdVe8yBrO1UANKzNfQdV4ep6YwLFPaplsdOPM1XOi3WTvhCaTukD+zqxOWEpLyg
bO0xBjXRVbHporGCFL72Ytkn62xbuUS1FQzfkLPyDwBdvB/4Tc2Itzcf/s1Z7ISV
Ijv1bXFHhkgcL8uK1zEtpI1yRlQhdACzmbD8CafeODxZqXLdEXiyIldM0gQOs4Wc
13avu2Xbh3kN9FQRZbaP0rDZMdjNtlY0mV4H5SIs6OHYeRI/f4zYTCLgcDzdosXK
cGXRlj4Os0pO+j19FtQ2EmJ+nSgBdn4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:08 2025 by rpki-client