Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa
File:                     bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa (raw, json)
Hash identifier:          Y3PTDZYLKH9EzoM2mBTXNautgO0D3pkHxlLoLIws7CY=
Subject key identifier:   52:4E:C6:C4:07:81:09:65:BE:51:4D:36:05:E5:65:21:1E:D7:32:39
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E1A4E30DEF3F4AABA49C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33588
IP address blocks:        47.28.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:1a:4e:30:de:f3:f4:aa:ba:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=bf9eef51-f4d5-463d-b9c6-3435fc28123b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:78:00:1a:fa:98:cf:9f:a8:45:b1:69:31:
                    58:a6:c3:e4:94:37:0c:d0:1b:77:8d:8f:b1:2b:d6:
                    12:90:72:9b:24:2b:48:07:72:fd:78:bd:bf:bc:16:
                    3f:1e:4c:0d:c7:da:b4:8f:89:78:ab:11:d8:fc:f9:
                    c1:f4:a0:34:3d:5f:f2:41:dc:7c:70:77:a7:7c:d2:
                    71:a4:9c:75:64:c0:05:1a:0d:50:78:3a:5b:dd:bf:
                    ae:07:db:69:9d:d7:00:f6:f3:ab:5f:20:e0:a9:1f:
                    24:c6:b9:17:ab:d3:bb:ea:57:42:38:3d:fd:d8:4d:
                    63:30:e1:39:6b:24:90:51:d2:d9:20:3d:4b:88:ea:
                    ea:01:d5:16:0f:1c:fd:ab:9f:e1:3f:1b:ff:1d:bc:
                    a9:ed:51:d1:09:09:f1:81:bb:1c:aa:d2:7d:2c:1a:
                    e1:f2:9d:b2:53:9e:60:b4:ca:25:ef:1c:91:a5:b8:
                    32:fb:1d:6d:f6:e8:82:0b:9e:ae:ed:bd:1c:f8:68:
                    93:7a:00:ee:c0:8e:71:73:96:7b:e7:0c:d3:9a:f1:
                    86:2f:bc:13:ae:06:8b:f5:f9:7d:c6:ff:bd:17:00:
                    a6:2f:84:e0:02:4b:1c:cd:ae:ee:32:bf:6c:47:ea:
                    77:77:7d:b0:b8:e5:03:87:60:9f:84:ec:db:8e:48:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4E:C6:C4:07:81:09:65:BE:51:4D:36:05:E5:65:21:1E:D7:32:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.28.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:0d:ec:7d:56:34:91:ce:3e:f6:68:9f:be:72:a4:e5:21:f9:
         45:e1:91:c9:dc:d0:2a:90:30:18:4e:84:5e:5d:35:8d:8a:62:
         e4:7d:25:53:b6:47:13:fe:eb:3e:73:74:0c:6a:28:b3:9a:a3:
         7b:ad:01:1f:13:22:9e:7c:3c:3f:e0:5a:67:8c:16:f6:2c:56:
         76:e0:21:14:17:8c:41:e3:57:a4:a0:a5:fb:00:09:0b:fc:66:
         b1:5f:4b:95:ee:ba:65:7b:05:8c:1b:8c:32:fa:33:5c:1d:17:
         ec:d6:e6:80:e2:11:74:84:af:f5:4d:fd:16:02:77:15:97:bf:
         68:de:18:fc:72:e2:e0:e4:d0:be:3c:61:5f:34:ee:fb:7d:25:
         97:b0:24:5b:ca:ea:cc:98:2d:7c:14:6d:27:69:4b:12:4a:4f:
         cc:1e:7d:ed:7f:98:05:a4:ea:fc:39:d6:d5:0c:0b:d6:09:ae:
         5a:74:01:d7:01:43:c1:e5:9e:a0:eb:9d:26:34:75:e0:81:3a:
         5e:3b:9b:a4:11:52:7a:8f:49:3d:ff:dd:00:5a:e4:3d:39:38:
         0f:0a:2b:f0:90:93:c3:73:72:a5:7b:ea:8a:b7:ed:08:95:6b:
         a0:d1:0e:26:d6:5e:ce:52:b4:9e:98:a5:f2:4a:cb:6b:3a:65:
         7c:62:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:18 2025 by rpki-client