Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4e862e2-0949-3e98-b51c-233a7118d94c.roa
File:                     a4e862e2-0949-3e98-b51c-233a7118d94c.roa (raw, json)
Hash identifier:          0dcj8r7YbN1rSnw1uGBKMfE1xYjv0gJJrY3d154pJsc=
Subject key identifier:   63:66:24:23:17:1B:FE:BC:E0:D6:C2:85:CA:B7:53:9A:68:8B:87:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD3F2E4E6ABC31FCB6780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4e862e2-0949-3e98-b51c-233a7118d94c.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.229.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d3:f2:e4:e6:ab:c3:1f:cb:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=5a509aa4-f4c9-453f-964c-4538fea16298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:02:0d:1f:d6:6d:b3:a2:ea:60:29:82:12:
                    cf:6a:1e:25:94:3e:c2:3f:66:1e:4d:51:b9:a4:3c:
                    a8:d1:a6:70:d1:e3:3d:48:11:59:6d:2c:5e:38:46:
                    23:89:2d:d5:67:3b:dc:d4:b6:8c:d6:a7:8b:b6:00:
                    d4:01:df:9d:ff:79:3f:c3:e6:7e:ca:13:62:13:50:
                    f9:5a:18:1c:c9:08:92:dc:ea:2e:81:85:3e:46:e9:
                    da:e1:65:35:ed:61:a1:aa:c2:98:9a:5d:4c:29:cf:
                    b2:e0:e7:e2:70:5a:84:2a:db:a2:40:8e:7f:00:8f:
                    da:5e:93:ff:62:d4:36:f6:dd:99:88:be:1e:db:6b:
                    a6:87:8e:74:2d:4b:8f:8c:29:47:23:28:86:71:65:
                    3e:38:f9:e3:5b:d9:80:dc:5d:e4:0d:d0:fc:9f:c7:
                    14:db:9e:d7:e6:46:98:90:3e:98:54:a5:88:12:74:
                    3e:b3:ba:71:86:bb:de:81:85:81:43:9e:28:76:6d:
                    e4:f0:6e:56:08:38:48:f7:2f:5f:cb:a7:94:09:34:
                    c4:8a:b6:d3:e5:fc:fd:77:e3:90:de:f9:07:1d:63:
                    f1:04:c6:7d:4b:1f:c5:af:a7:11:43:3d:a9:0a:47:
                    e1:f8:24:fe:e7:68:b5:de:b7:fe:b8:a1:ea:ab:4b:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:66:24:23:17:1B:FE:BC:E0:D6:C2:85:CA:B7:53:9A:68:8B:87:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4e862e2-0949-3e98-b51c-233a7118d94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:5a:52:e4:bb:5d:37:14:5a:b0:44:03:cc:65:8b:1e:53:
         ad:69:b4:32:7c:1d:b5:66:73:4c:bc:c9:eb:35:92:e8:cd:72:
         11:50:ab:d9:72:f7:a4:6e:bc:1a:47:bb:44:8f:3e:aa:43:bf:
         b2:d5:50:e6:90:bc:2b:89:06:55:5a:5f:20:22:f5:90:e3:f9:
         60:a6:d1:a5:1d:fd:a5:b0:23:1b:72:16:75:e3:ce:cb:4f:fa:
         ee:f9:4c:62:8b:fe:25:17:12:46:23:72:e5:89:05:0b:d0:ad:
         49:a0:db:c1:9a:5b:ea:54:56:bf:91:7f:be:de:cc:27:ca:ef:
         f9:cc:b4:8a:13:15:f9:f9:57:08:a6:92:84:4e:86:e7:44:74:
         63:81:dd:74:49:be:49:12:66:3c:f1:c6:c8:5f:61:03:25:d8:
         fa:64:fe:e3:95:61:36:cc:80:19:05:9d:63:14:5d:dc:9b:df:
         dc:73:1f:5a:2a:4d:9b:ad:cc:7d:3b:41:bc:c5:53:f4:3e:23:
         15:bf:e0:b5:4a:f7:a1:ad:5a:2b:56:27:ad:d6:29:30:c5:b8:
         fc:93:a3:b3:30:02:bc:cf:02:9b:9f:d7:02:d8:c2:9e:9c:e6:
         ee:47:42:03:ae:b3:a6:84:3d:cc:7f:27:9c:14:b0:94:6d:e2:
         8c:ec:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:48 2025 by rpki-client