Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b01d7707-f7e1-37c6-bb83-698feb15d020.roa
File:                     b01d7707-f7e1-37c6-bb83-698feb15d020.roa (raw, json)
Hash identifier:          v7t9pH7A2Yu0ChKyZdZdRihQoitzIYf2pHRY1456Cco=
Subject key identifier:   94:46:09:A4:16:4D:FD:6B:97:3D:B5:0C:97:1A:02:E0:43:63:59:D4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D410280AE5EE1E114CD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b01d7707-f7e1-37c6-bb83-698feb15d020.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.44.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:41:02:80:ae:5e:e1:e1:14:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=257a5607-8e3f-4c34-b869-d8569c5cff60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:a4:4d:c9:e8:2a:1e:b7:7c:75:fb:de:ed:
                    5c:84:db:fd:73:3d:1f:64:47:96:01:73:ee:f7:0c:
                    68:92:64:d4:bc:34:af:f6:c2:01:b7:12:ae:aa:e4:
                    8e:39:4f:e8:93:10:7f:8d:a6:0e:4b:aa:9f:ca:fd:
                    24:84:4b:b3:13:bb:20:49:9f:1a:e1:d4:84:3d:c2:
                    23:56:bf:6b:5e:f7:89:96:d6:5d:5a:03:cd:18:b7:
                    a5:10:2d:8e:6d:0d:bf:c3:44:fd:d2:cf:9e:fb:91:
                    94:3f:04:46:9e:17:bd:0c:c7:8f:75:52:16:7f:6f:
                    d3:fc:78:36:30:a2:2c:93:e6:5b:20:da:81:d4:00:
                    1e:c0:6f:30:40:52:2f:a0:8f:99:3d:79:63:c7:ae:
                    4e:95:fb:e3:69:42:2c:e7:0b:f2:84:67:48:71:dd:
                    08:97:0b:77:72:09:fd:dc:e9:e3:fd:60:27:5d:6b:
                    72:ae:0b:ed:9c:0d:ae:ba:cc:3b:85:3c:5c:29:92:
                    a6:34:8c:7b:0a:88:a1:7e:b1:40:3c:3b:18:84:ec:
                    b0:9b:15:31:ba:d6:db:f7:94:77:45:bb:81:c1:33:
                    f7:57:29:e5:57:f8:27:41:9a:82:fe:5c:0b:a1:f4:
                    96:59:58:fe:4f:b6:98:66:84:7e:aa:62:dd:2a:db:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:09:A4:16:4D:FD:6B:97:3D:B5:0C:97:1A:02:E0:43:63:59:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b01d7707-f7e1-37c6-bb83-698feb15d020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:76:04:d5:e0:dd:50:86:21:36:c7:20:70:79:e7:b4:f9:ee:
         23:8b:75:a8:ed:fb:19:49:ad:f8:15:75:f3:58:c7:15:73:c4:
         e2:b0:5f:a5:d4:72:0e:44:ce:ca:55:dc:44:ce:ba:fa:89:9b:
         94:bd:31:75:39:b9:01:9e:02:31:20:02:8a:d5:3a:65:0f:28:
         23:82:31:c2:b3:9d:9b:91:35:c1:be:43:c8:24:bb:33:30:a8:
         24:96:96:bf:e7:ec:7a:12:9b:0e:3a:38:40:e8:ec:cc:53:01:
         67:ca:b8:0b:8e:4b:7a:6e:30:93:48:63:6a:3b:46:1a:30:57:
         60:ce:2b:a4:24:49:85:1b:ae:0e:0c:ac:e1:c9:6e:a0:96:9f:
         5a:7d:c1:0c:ce:da:c2:cb:8f:ce:eb:8b:9f:ab:ff:0d:c6:cf:
         b7:4b:c0:a2:b5:b5:e6:4a:85:24:dc:eb:ea:ff:ac:d4:6c:6c:
         0a:7c:60:40:e6:e6:cc:d1:06:63:c7:4f:3b:3a:06:38:7b:f7:
         dc:e4:4f:19:de:79:28:4a:80:4a:5c:65:59:13:4d:ea:91:9d:
         8d:dc:92:ce:b4:15:44:55:d0:82:84:1b:6e:ed:0c:cf:bf:b6:
         0c:97:48:69:45:05:d9:bc:f0:cf:c3:57:e8:53:72:26:67:97:
         b3:aa:a8:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUECgK5e4eEUzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MjU3YTU2MDctOGUzZi00YzM0LWI4NjktZDg1NjljNWNmZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxCkTcnoKh63fHX73u1chNv9cz0fZEeWAXPu
9wxokmTUvDSv9sIBtxKuquSOOU/okxB/jaYOS6qfyv0khEuzE7sgSZ8a4dSEPcIj
Vr9rXveJltZdWgPNGLelEC2ObQ2/w0T90s+e+5GUPwRGnhe9DMePdVIWf2/T/Hg2
MKIsk+ZbINqB1AAewG8wQFIvoI+ZPXljx65OlfvjaUIs5wvyhGdIcd0Ilwt3cgn9
3Onj/WAnXWtyrgvtnA2uusw7hTxcKZKmNIx7CoihfrFAPDsYhOywmxUxutbb95R3
RbuBwTP3VynlV/gnQZqC/lwLofSWWVj+T7aYZoR+qmLdKtviLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRGCaQWTf1rlz21DJcaAuBDY1nUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjAxZDc3MDctZjdlMS0z
N2M2LWJiODMtNjk4ZmViMTVkMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLyykMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALF2BNXg3VCGITbHIHB557T57iOLdajt+xlJrfgVdfNYxxVzxOKwX6XU
cg5EzspV3ETOuvqJm5S9MXU5uQGeAjEgAorVOmUPKCOCMcKznZuRNcG+Q8gkuzMw
qCSWlr/n7HoSmw46OEDo7MxTAWfKuAuOS3puMJNIY2o7RhowV2DOK6QkSYUbrg4M
rOHJbqCWn1p9wQzO2sLLj87ri5+r/w3Gz7dLwKK1teZKhSTc6+r/rNRsbAp8YEDm
5szRBmPHTzs6Bjh799zkTxneeShKgEpcZVkTTeqRnY3cks60FURV0IKEG27tDM+/
tgyXSGlFBdm88M/DV+hTciZnl7OqqMw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:46 2025 by rpki-client