Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af725dd5-a85e-3102-ab2f-ae98264036b7.roa
File:                     af725dd5-a85e-3102-ab2f-ae98264036b7.roa (raw, json)
Hash identifier:          S4qV4J6TZB94daSmzw5DpaHHzweo0kpYp60DXY+u8U4=
Subject key identifier:   83:A1:74:11:F6:70:29:CB:2B:28:AD:B7:D7:8E:75:E0:8C:05:5D:AF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DE26E4FDF39B708F7DE00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af725dd5-a85e-3102-ab2f-ae98264036b7.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.94.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:e2:6e:4f:df:39:b7:08:f7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c9b71e38-c959-4fbb-aa78-2aae076be786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:43:f1:68:70:68:ef:24:e4:c6:d5:ab:bc:
                    2b:77:95:ac:5f:5f:8a:f7:6a:e4:e2:ae:d2:29:b1:
                    a4:64:34:c7:68:91:1f:8b:06:ac:a1:d2:c3:38:e0:
                    ee:38:f2:6a:78:4a:2c:0e:bf:88:5e:d9:af:f3:6a:
                    c3:49:85:ef:70:30:ee:f9:e4:2b:de:4c:bd:21:39:
                    ec:0d:91:b3:8f:bd:2b:db:b8:4b:8d:18:62:50:a0:
                    04:3c:4e:2e:4a:44:db:ed:82:d8:a2:6d:39:6b:f4:
                    22:7f:ee:88:33:00:9b:37:40:c1:f1:77:e1:54:f0:
                    42:cf:26:4d:58:48:be:85:e7:90:61:bd:2c:fa:86:
                    03:09:bc:2d:26:76:c1:20:11:4d:b7:27:2c:f3:62:
                    25:33:d6:69:64:19:37:3d:d4:66:42:95:2d:15:51:
                    6e:f6:9a:c5:91:a9:51:cd:02:ac:0e:dc:6f:de:e4:
                    2b:d8:c9:74:12:28:65:9b:ac:f6:9d:26:a7:48:2d:
                    b2:cb:a4:09:4f:80:fa:2d:e6:77:f0:75:c1:42:ae:
                    91:e6:0f:2a:7d:18:1b:eb:e1:4d:21:cb:20:12:e3:
                    15:b3:7b:ae:e5:d5:d2:97:7c:99:be:c1:96:bc:f4:
                    24:b6:eb:37:c0:a5:d7:ff:99:a7:0c:ff:26:ec:73:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:74:11:F6:70:29:CB:2B:28:AD:B7:D7:8E:75:E0:8C:05:5D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af725dd5-a85e-3102-ab2f-ae98264036b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.94.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:b7:e9:4a:4f:27:61:e5:ae:ab:69:d5:b0:60:67:cf:19:
         38:1d:4a:15:35:0c:16:62:f9:03:ed:98:36:69:47:4d:55:a8:
         f2:af:7e:8c:74:b7:50:38:06:75:77:d1:1a:66:dc:39:84:c8:
         c6:ca:6b:8c:03:53:07:10:30:bf:6f:2e:8b:ac:00:e6:16:b9:
         3c:f4:6e:7f:5b:91:b4:4a:d6:d8:f9:9a:67:7e:d1:e7:f6:3a:
         c0:3b:f3:4e:4f:4c:6f:7b:2e:75:41:84:f0:0f:99:3d:e2:68:
         d5:eb:c2:67:58:40:99:57:94:1b:03:f8:b8:1e:f1:b7:dd:93:
         5b:de:8a:03:2b:66:a8:7a:e3:9e:99:d2:f6:f0:48:54:d1:88:
         5b:69:07:74:c0:12:cd:91:d8:5d:12:28:8d:f7:56:8f:be:71:
         02:31:6f:e4:09:f5:17:06:b4:e7:14:1c:af:57:d5:19:4f:d1:
         cf:3d:72:5d:1a:ee:cf:9b:0d:c3:c8:3f:10:f1:db:d4:90:9a:
         01:d1:c4:3b:4b:01:25:d9:d0:9e:61:59:2f:94:49:19:ec:2a:
         97:eb:14:ac:aa:3c:64:e3:4f:5a:57:12:e3:2a:54:11:04:3f:
         32:70:2c:5c:f2:bf:de:df:2a:bf:45:41:72:fb:16:a1:23:9b:
         92:aa:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:01 2025 by rpki-client