Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5aed6b5-fd0f-309a-9007-fb499aa105c9.roa
File:                     c5aed6b5-fd0f-309a-9007-fb499aa105c9.roa (raw, json)
Hash identifier:          D1ZJzp2/mNVIjLvWh3Ec9sC1Ek/uOnJRLV3e/szdTTU=
Subject key identifier:   FF:40:99:58:B9:9A:0A:6A:20:AA:F1:64:42:57:1B:DE:40:3F:D0:D6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E039FBB9FBF9094DEA440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5aed6b5-fd0f-309a-9007-fb499aa105c9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.82.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:03:9f:bb:9f:bf:90:94:de:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=bf31edd1-8776-411f-bd5f-f0072f685cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:f6:b7:b0:4e:58:79:cc:70:8a:20:de:51:
                    7c:c1:aa:66:b2:7f:c3:23:17:0e:14:20:88:c0:c9:
                    94:06:14:9b:f1:77:0f:d8:d5:6a:9f:1e:56:5d:c4:
                    ea:d4:70:a5:2e:20:e2:cb:5a:1e:15:a0:0e:09:d2:
                    53:82:35:9a:53:2c:70:cd:94:e9:3f:dc:96:48:85:
                    a0:58:e3:de:dc:bb:b3:d1:d0:3a:1a:05:c9:ef:fd:
                    ae:bd:ac:e3:8f:c5:50:66:6d:29:c7:7f:25:25:2a:
                    ef:8c:f8:ef:dd:57:8c:40:61:3d:96:d0:d4:da:44:
                    ea:09:7e:02:66:fb:49:ca:56:eb:86:79:9b:e7:0c:
                    0d:3d:02:75:a1:1f:f2:1e:f1:63:46:6a:b2:e8:91:
                    55:a2:b9:0d:69:dc:9b:55:fd:94:98:eb:dc:9f:26:
                    57:d7:c9:9a:53:54:43:bc:ff:ff:19:49:93:c6:5c:
                    2b:89:db:8a:a7:75:c9:8d:4a:5a:1d:91:f4:9b:a6:
                    16:5a:19:de:a5:be:60:5a:5f:7a:e3:8e:04:f2:61:
                    de:e6:1d:10:ce:09:55:f4:6b:ad:d0:21:dd:b3:97:
                    0b:58:59:37:a9:9e:9b:46:f7:77:ad:99:37:da:b7:
                    d9:97:bf:ab:0c:40:25:64:a2:67:16:d9:24:84:f4:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:40:99:58:B9:9A:0A:6A:20:AA:F1:64:42:57:1B:DE:40:3F:D0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5aed6b5-fd0f-309a-9007-fb499aa105c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.82.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ef:fe:37:90:6d:c0:ee:cc:b7:10:2d:10:ef:e6:1c:03:fb:
         ba:81:af:c0:03:62:c2:6c:76:eb:90:d7:5b:9e:a6:37:83:cc:
         5c:c5:13:fa:64:17:ed:8e:ba:e8:82:0e:65:32:71:47:29:14:
         44:70:b3:b9:ee:3e:c7:73:f6:fd:33:62:d9:c6:c5:66:04:b0:
         6b:45:ff:7b:32:d9:73:e3:00:20:ca:33:bb:b9:6e:28:58:8b:
         d4:e0:9f:de:a7:07:e7:a1:03:d1:6d:92:ea:cf:7a:3a:ad:36:
         cf:3a:c7:95:13:e0:bb:52:3d:2b:2b:a6:14:c8:bf:9e:d2:46:
         95:c0:61:5e:42:bf:28:38:d8:de:e4:e0:3a:45:f1:a0:52:ae:
         66:13:2f:ec:d1:0f:b3:66:ed:9c:99:6c:94:8c:73:ce:4c:c3:
         69:64:e4:cf:c1:c1:c3:1c:5e:98:e0:bb:c3:17:0b:e3:64:77:
         a6:5e:96:a0:76:90:9b:7b:b6:dc:3f:f1:99:07:05:f7:7f:74:
         09:90:13:10:12:8a:98:9c:92:f5:6c:f1:1f:65:d1:69:05:ea:
         68:46:9a:ae:a2:e9:4b:5d:09:f2:9b:a2:b6:99:42:b3:26:95:
         6f:41:f8:63:84:e8:75:6a:ca:ea:fa:31:47:b1:42:98:10:15:
         79:69:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:49 2025 by rpki-client