Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5726ad9-2ea4-3de9-952c-ca8b3d039a4d.roa
File:                     c5726ad9-2ea4-3de9-952c-ca8b3d039a4d.roa (raw, json)
Hash identifier:          nbSTrMk0Y1mI4OUMAJP7Pp59Z6APnInGMosXJUz7GD0=
Subject key identifier:   92:1F:32:64:6A:C6:F7:8A:0B:38:76:59:5B:5E:D6:42:C8:EE:3F:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D3AE120A9BC50C707DD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5726ad9-2ea4-3de9-952c-ca8b3d039a4d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.38.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:3a:e1:20:a9:bc:50:c7:07:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f2cdee67-cce0-4f17-858c-9b15f3e19c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:39:4f:02:ae:e9:eb:e1:ce:b2:85:b1:31:
                    b1:11:79:e8:a5:9b:89:73:2b:e5:d8:e1:f7:2d:ea:
                    af:46:ef:05:bc:67:d6:9f:ea:05:b4:30:1c:6a:ec:
                    06:f2:50:cd:e4:de:56:5e:c4:8c:21:90:ff:8a:68:
                    12:06:b5:e9:65:16:1b:ec:d2:3b:cb:cc:e8:45:72:
                    c9:19:7e:f1:0a:f1:41:ba:2d:5b:b1:6f:a0:51:fa:
                    75:5a:a6:04:4a:1e:4c:17:32:ca:74:39:2c:ab:ce:
                    c2:d5:aa:3a:23:4f:b9:22:3b:99:82:98:69:6d:c2:
                    b1:77:ee:e7:52:71:82:d4:19:3d:20:c6:b3:95:7d:
                    74:dc:00:e8:68:2d:71:44:08:65:10:d9:66:98:67:
                    c6:31:e3:67:c4:5e:0f:6e:93:64:7c:7c:95:79:b9:
                    5e:49:ee:fb:a2:67:04:31:28:84:16:1a:5b:ec:fd:
                    00:03:4e:1f:51:25:12:ff:54:7a:c3:e7:77:96:c1:
                    ec:05:1f:c7:5b:18:70:95:0c:2e:9a:b2:48:ac:84:
                    0c:a8:bf:41:11:89:5b:49:dd:0d:d7:e2:d7:38:28:
                    63:bd:89:3a:16:f3:21:30:88:27:e4:21:04:98:06:
                    6d:57:9d:66:cf:9b:b1:0c:94:0e:38:11:bc:db:c0:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:32:64:6A:C6:F7:8A:0B:38:76:59:5B:5E:D6:42:C8:EE:3F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5726ad9-2ea4-3de9-952c-ca8b3d039a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.38.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:ba:7f:ef:32:54:47:54:0b:4b:aa:20:65:29:86:05:0d:
         d3:e7:e1:a9:bb:09:e1:a8:57:d3:4e:d5:67:46:8f:e9:f3:e2:
         e7:01:43:e5:e3:b7:69:1e:78:07:1d:67:6e:b0:29:25:08:fe:
         2c:0d:34:1e:3c:15:55:3e:c7:42:be:4d:66:5e:1b:c2:d9:c7:
         c5:d5:80:89:5f:06:96:aa:c3:4d:21:af:b0:37:4d:93:48:66:
         78:66:7a:29:41:12:d6:df:29:1a:42:ff:5d:39:ea:62:26:09:
         d7:7e:2d:9f:82:ea:24:8f:63:a4:8d:2e:f6:86:fb:43:68:01:
         80:71:cf:3b:11:17:84:0a:6a:35:70:99:6f:35:4d:09:54:51:
         2e:02:81:25:fb:8d:82:47:20:7f:85:e6:1e:34:0c:bd:15:3f:
         01:b7:a9:32:4e:49:b7:25:7f:06:4c:c0:c1:34:bd:15:0e:a6:
         6c:9a:d6:23:90:ad:62:c9:af:7f:e8:20:e9:4e:23:6b:7d:76:
         b2:76:4c:31:a7:35:13:e5:43:7a:36:31:3c:65:52:fb:94:ad:
         4b:bc:77:21:be:04:74:a4:60:9f:4f:5f:e5:25:d5:2e:9f:cc:
         4a:6d:ee:f6:fb:d5:c5:bb:7e:2b:63:43:11:8b:ad:23:2f:4b:
         a8:d3:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:30:07 2025 by rpki-client