Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc2d0924-53d1-34de-ab42-23d32759d0a2.roa
File:                     cc2d0924-53d1-34de-ab42-23d32759d0a2.roa (raw, json)
Hash identifier:          UnVd/QePB7CnESFTftLgcwd4EdMXieR7KCuZt6WKe14=
Subject key identifier:   68:76:D6:D2:8B:DA:9A:0A:52:15:84:2B:B8:9B:BD:12:21:6F:B1:ED
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC5B996DDBECAAB846300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc2d0924-53d1-34de-ab42-23d32759d0a2.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10838
IP address blocks:        47.231.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c5:b9:96:dd:be:ca:ab:84:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=079c4618-97b7-4e8c-aae5-5e2923eb7508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:fb:b8:43:10:b7:2b:11:e9:10:59:68:58:
                    c0:33:ca:3f:9a:76:e2:75:0e:54:a2:db:77:dc:32:
                    28:5a:d9:f2:9d:97:64:f7:04:89:34:c4:c1:10:24:
                    13:b9:f6:82:5a:8b:c8:44:6b:28:63:c4:d7:10:8a:
                    87:57:c6:8d:74:2e:20:7e:f6:67:a7:c4:9e:e2:05:
                    17:60:e4:cc:43:28:5f:bf:0b:21:96:6b:7f:e5:29:
                    17:6e:89:d2:06:d8:be:99:7d:80:55:77:c7:da:1a:
                    d3:90:aa:63:1d:fb:40:3c:66:13:dc:46:03:7c:c7:
                    c9:b4:ca:9c:2d:c3:5a:27:7d:d9:5b:69:d9:47:3c:
                    05:c3:41:cb:fc:a8:17:0e:1e:ac:7a:e9:72:24:f5:
                    b0:94:88:7c:a3:12:e3:ec:f4:ca:96:47:82:74:ba:
                    54:80:5f:67:73:9e:8c:33:ce:8f:44:62:73:f9:36:
                    f1:06:b1:1d:9e:c1:6b:38:d8:14:de:3e:a8:d5:b0:
                    42:c2:e1:18:67:38:c3:93:4b:64:7c:44:b2:4d:bf:
                    a7:6d:a1:cf:45:34:a0:0f:0d:d1:ec:1f:5a:ed:31:
                    5d:2c:3e:af:51:18:ac:26:9d:47:26:41:40:7d:b4:
                    8c:6b:97:32:fd:be:2d:e1:a3:8a:cf:3f:0c:36:b3:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:76:D6:D2:8B:DA:9A:0A:52:15:84:2B:B8:9B:BD:12:21:6F:B1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc2d0924-53d1-34de-ab42-23d32759d0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:97:89:c2:82:48:82:d9:fa:33:95:e2:e0:76:e4:c1:07:
         c8:24:36:86:b9:88:7a:96:91:88:cc:8f:db:52:4f:e0:5c:35:
         17:37:02:d5:c8:0b:4e:de:ed:5a:8c:f4:d6:e9:bf:9d:cc:65:
         e0:ae:c9:02:ef:34:b9:5c:37:e4:10:fa:08:4b:33:85:25:4d:
         41:5b:c5:73:99:39:95:d8:e1:8c:67:23:a0:d8:b0:18:2f:4f:
         3a:7f:f0:ef:7f:b8:82:21:fa:06:08:83:2a:d0:27:9f:bc:11:
         c4:d2:7b:ef:aa:79:55:b8:8d:f3:d5:69:a4:b3:79:06:0a:23:
         e6:20:b8:92:2c:e2:b5:b5:d6:37:63:02:ad:a3:f0:47:10:b8:
         68:02:be:90:bd:82:ee:7f:ac:87:c6:c7:1c:00:08:24:e9:f4:
         f3:ac:52:ce:1c:88:25:40:41:bf:db:9c:58:39:99:bc:cd:60:
         5d:6d:61:9f:79:6c:9c:60:9a:e6:f1:ec:c1:6d:1a:ba:1d:b4:
         a4:b9:3d:cb:68:f6:bb:27:bc:5a:51:95:2c:b2:44:15:4d:d2:
         3a:d1:0b:3e:ca:52:27:c6:62:f2:7e:45:e2:3c:0b:b3:86:ad:
         df:4e:8f:97:6b:cd:73:c2:a8:65:a3:19:a9:6d:82:a7:21:14:
         ee:a9:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:59 2025 by rpki-client