Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa
File:                     c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa (raw, json)
Hash identifier:          uLtDFqLK0Ihwm3Dj9To/AcLLVqTlgZ4Jma/yU0HgEoQ=
Subject key identifier:   49:D1:A9:59:9B:3F:B7:CE:B6:D4:56:78:73:8A:41:51:D3:05:2E:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D617C24A51A3104953440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.131.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:61:7c:24:a5:1a:31:04:95:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fa21aaf1-4288-4987-a4a2-998210050b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:d4:6d:fb:6c:19:d8:a1:65:e1:e0:55:c2:
                    ab:98:c9:fe:89:b2:b8:d7:98:4b:05:5d:dd:f3:47:
                    5b:47:b9:d6:a1:5d:3f:c7:59:ff:9b:75:b0:10:9c:
                    7d:8a:41:cf:de:ea:0f:34:cc:6a:a1:38:57:66:3d:
                    aa:c8:4d:e5:0d:7c:1b:21:75:b1:e8:ea:af:f6:d4:
                    49:c8:e7:e6:66:49:dc:cf:28:59:b3:69:57:37:7d:
                    86:b9:ee:bf:b0:01:a1:15:46:b4:05:f1:f3:26:f8:
                    91:df:3a:8f:ef:7a:ce:4e:f2:24:8a:26:d7:71:b9:
                    29:15:6a:7b:f1:85:dd:a6:e5:e0:4b:76:1e:53:f7:
                    bc:32:82:2b:29:6d:e8:e9:49:71:de:24:92:13:18:
                    09:f1:21:29:06:c1:2d:cd:7b:10:80:35:b1:79:25:
                    09:2d:e9:29:d2:b3:5c:26:61:13:a0:a8:19:b5:85:
                    f1:0c:52:27:43:7e:75:42:11:b6:5f:bd:77:0b:a6:
                    b0:bd:95:7a:32:88:9f:42:fd:0c:eb:bb:99:cd:62:
                    11:ac:d9:af:f7:98:87:e5:a0:57:b7:a7:59:42:2f:
                    7f:26:01:9c:f8:1e:a3:df:43:30:89:82:4d:17:bc:
                    4d:dd:5a:04:3d:4f:1e:a3:67:99:c6:b3:31:a9:f5:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:A9:59:9B:3F:B7:CE:B6:D4:56:78:73:8A:41:51:D3:05:2E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c125b0a8-3dc2-3d97-9246-1d369b5d62b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.131.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:3d:a5:4d:5b:60:94:a8:82:7c:dd:f2:8c:f8:39:cf:47:34:
         bb:e1:c9:20:79:d1:b7:f6:07:28:68:f5:85:76:82:bc:9e:0f:
         47:af:63:f2:b1:f8:38:97:5c:39:80:ae:69:9c:d3:51:76:61:
         40:ee:35:1e:6a:6a:62:ce:e1:31:fe:af:5d:ff:8b:d4:67:86:
         f2:be:7a:2e:2d:23:85:fd:8f:e1:1f:62:b0:9e:87:a4:54:09:
         ea:c8:4f:09:9f:36:1c:e0:04:40:20:9a:69:e5:13:1e:35:d3:
         d9:ba:f3:0e:d8:21:eb:a2:6c:1f:67:3c:35:12:d6:23:0c:56:
         b2:48:ab:5b:7e:a8:0c:c6:32:91:e5:3a:e5:bf:79:1f:55:ae:
         3f:5e:85:39:02:31:f4:10:53:c2:35:5e:f5:77:8c:96:a3:0f:
         85:9f:54:3f:f8:c0:a2:9a:da:8f:f4:35:fe:5a:63:7a:eb:d1:
         60:96:4f:2e:de:8b:c7:80:5d:ef:93:bb:c7:32:9b:62:b7:65:
         aa:d2:f7:7d:58:02:e7:76:89:c3:b1:e1:67:c0:16:be:de:07:
         7b:a6:aa:f4:d7:82:ca:ad:35:67:22:ef:ab:f3:04:7b:e5:95:
         e8:80:e6:2e:db:2b:c5:08:ea:0e:4c:35:ff:7a:79:ef:13:26:
         7d:90:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:31 2025 by rpki-client