Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa
File:                     a31df491-aa9e-398f-8bf2-7d7490005044.roa (raw, json)
Hash identifier:          3Xw3Epfm2xGG6tfVlKnJjgD46rp9nmvIyyb9rExEcik=
Subject key identifier:   08:F8:69:74:FB:F9:FA:5E:76:93:77:6B:B5:E9:FD:DF:1D:2F:6F:28
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B92DCFBB3D6741979A5A0C980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     15085
IP address blocks:        66.168.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:fb:b3:d6:74:19:79:a5:a0:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=8a0b5b95-8d12-457e-b9a4-ca0f6bd2c847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:26:be:bc:30:68:8a:dd:20:14:34:31:7c:
                    e9:bb:fe:4b:68:e1:c5:71:78:f7:d9:93:3a:f9:eb:
                    9e:f9:b8:16:a0:64:cf:b0:9b:ec:1a:dc:97:54:93:
                    9b:6a:d8:dd:dc:45:f8:89:2c:b0:5d:dd:19:7c:8f:
                    ad:77:d6:f2:b5:84:4f:a5:67:d2:97:83:7f:42:71:
                    4b:64:c0:6c:4c:3f:a5:a3:0c:61:36:af:4c:68:18:
                    e8:3a:cd:83:20:e4:67:22:08:6c:5c:a6:4a:a8:1a:
                    67:1d:d3:15:d9:5e:7e:23:fa:ec:bf:aa:c8:c2:0d:
                    85:6e:eb:12:5f:27:38:7b:8a:a2:24:a5:de:68:85:
                    d2:58:4f:d6:16:67:82:50:20:df:da:66:76:16:2a:
                    a4:ea:1c:65:31:6a:54:8f:3f:f3:dc:80:c0:e0:e3:
                    4e:5f:ef:ed:f4:b2:a5:5a:ab:9d:5a:1e:6b:48:ff:
                    15:14:2c:e0:1e:27:00:b8:74:06:96:f3:82:d0:83:
                    32:00:20:9e:26:e4:80:16:91:f4:3a:16:20:35:a9:
                    de:a8:32:c2:e3:83:86:3d:67:66:71:5a:76:e5:10:
                    f3:90:e5:1b:08:5a:b8:7c:fa:49:90:48:af:68:ed:
                    df:94:8a:f6:3c:01:13:6a:86:4f:c0:4e:ae:1c:76:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F8:69:74:FB:F9:FA:5E:76:93:77:6B:B5:E9:FD:DF:1D:2F:6F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:48:c5:d6:40:aa:8d:34:cc:13:04:f4:13:fa:5e:27:ac:2a:
         ef:fd:a3:33:9b:7e:61:76:32:86:2c:03:54:95:5b:a3:cf:65:
         ba:7c:cf:ab:73:8f:49:9e:09:a8:0e:c1:db:ce:90:4a:65:ab:
         a7:fc:10:1f:e7:31:9e:2e:d9:82:90:da:62:ea:38:e2:59:c9:
         da:61:27:00:c7:cd:e8:68:48:22:df:01:30:95:22:cc:bb:d6:
         03:59:91:2f:c5:ae:0a:e5:bd:3f:74:42:38:e9:18:4e:bc:98:
         8f:90:bb:11:fe:9b:a0:27:63:01:e1:09:76:bf:a5:6b:09:31:
         8e:cf:02:dc:cd:81:cf:50:04:26:ec:03:49:b8:6b:c7:01:35:
         5a:b9:c5:53:83:20:d9:85:ed:c3:69:8b:57:de:6f:6f:f5:34:
         6b:75:d4:35:8e:16:d9:be:0b:1a:03:72:4a:63:f4:00:02:34:
         91:a7:fc:55:fa:f7:9c:61:46:93:9d:f4:c6:66:75:d0:ec:1e:
         2c:1e:cd:ad:f1:66:96:e3:4f:62:b4:00:79:cb:7e:9e:81:cc:
         78:2c:60:ab:84:f9:01:ed:71:bb:b5:c2:e9:18:e7:ed:ed:79:
         ab:ad:d7:69:52:f0:9a:cd:57:6c:82:8c:84:9c:36:e5:c6:18:
         16:39:79:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Puz1nQZeaWgyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
OGEwYjViOTUtOGQxMi00NTdlLWI5YTQtY2EwZjZiZDJjODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRkmvrwwaIrdIBQ0MXzpu/5LaOHFcXj32ZM6
+eue+bgWoGTPsJvsGtyXVJObatjd3EX4iSywXd0ZfI+td9bytYRPpWfSl4N/QnFL
ZMBsTD+lowxhNq9MaBjoOs2DIORnIghsXKZKqBpnHdMV2V5+I/rsv6rIwg2FbusS
Xyc4e4qiJKXeaIXSWE/WFmeCUCDf2mZ2Fiqk6hxlMWpUjz/z3IDA4ONOX+/t9LKl
WqudWh5rSP8VFCzgHicAuHQGlvOC0IMyACCeJuSAFpH0OhYgNaneqDLC44OGPWdm
cVp25RDzkOUbCFq4fPpJkEivaO3flIr2PAETaoZPwE6uHHadIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAj4aXT7+fpedpN3a7Xp/d8dL28oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTMxZGY0OTEtYWE5ZS0z
OThmLThiZjItN2Q3NDkwMDA1MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqgmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK5IxdZAqo00zBME9BP6XiesKu/9ozObfmF2MoYsA1SVW6PPZbp8z6tz
j0meCagOwdvOkEplq6f8EB/nMZ4u2YKQ2mLqOOJZydphJwDHzehoSCLfATCVIsy7
1gNZkS/FrgrlvT90QjjpGE68mI+QuxH+m6AnYwHhCXa/pWsJMY7PAtzNgc9QBCbs
A0m4a8cBNVq5xVODINmF7cNpi1feb2/1NGt11DWOFtm+CxoDckpj9AACNJGn/FX6
95xhRpOd9MZmddDsHiweza3xZpbjT2K0AHnLfp6BzHgsYKuE+QHtcbu1wukY5+3t
eaut12lS8JrNV2yCjIScNuXGGBY5ecQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:05 2025 by rpki-client