Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d22029bd-983c-32c2-a564-d324a8904c1d.roa
File:                     d22029bd-983c-32c2-a564-d324a8904c1d.roa (raw, json)
Hash identifier:          XjHNdoP2VsIPUHbdO8n6xmVEWWc/VvJ5k+y8GfH34jE=
Subject key identifier:   12:DB:56:7B:F2:A4:51:70:07:1D:CF:C0:3B:11:F4:DC:20:F8:B0:6D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D2EEE074FEFEB7176F000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d22029bd-983c-32c2-a564-d324a8904c1d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.4.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:2e:ee:07:4f:ef:eb:71:76:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2b0e5563-e257-45b7-8823-c2f13f73bc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:f7:ad:00:d0:8c:98:f6:fb:14:23:85:c6:
                    ed:bb:7c:d5:af:20:6d:15:32:ac:b1:82:23:e7:b9:
                    1f:a7:14:50:c2:fd:be:31:1b:7f:2a:58:b4:5b:2f:
                    78:37:2e:de:75:cc:31:b0:60:7c:d8:f7:b5:9c:09:
                    68:a6:37:da:15:1e:52:6d:0c:4f:4e:3f:dc:9d:d2:
                    f2:ba:57:49:00:26:15:cc:26:00:9e:16:c7:a0:d2:
                    74:e7:5b:8a:72:74:a9:24:3e:c6:03:00:36:fc:8c:
                    d2:8f:c3:aa:6b:46:e0:2b:41:e7:5f:a2:0b:74:56:
                    aa:f3:8a:a2:99:8a:59:0d:30:ad:57:9f:dc:16:cf:
                    25:cd:62:fb:8f:a7:30:21:86:73:d8:ce:49:91:61:
                    9a:91:88:79:e4:a9:ae:fd:a1:d8:aa:a0:99:6d:78:
                    b2:20:9d:80:c2:67:bd:f8:55:73:6a:dc:c0:de:28:
                    4c:47:d2:30:58:82:bf:50:6b:9b:23:b6:ec:f8:17:
                    e7:86:81:ce:e3:8a:88:95:0d:17:c4:37:9a:64:68:
                    ad:c3:d1:f0:f9:d6:07:94:06:85:27:de:6f:ac:b2:
                    99:f4:c8:be:c4:e9:06:d3:38:d1:cf:13:4c:f0:db:
                    34:45:1c:25:28:1f:60:b9:c4:e7:10:ab:93:be:cc:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DB:56:7B:F2:A4:51:70:07:1D:CF:C0:3B:11:F4:DC:20:F8:B0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d22029bd-983c-32c2-a564-d324a8904c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.4.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:4f:a4:61:f9:80:d0:cd:95:d5:cc:d6:d6:55:48:44:15:
         aa:df:1a:41:d7:ab:75:24:fb:8f:cb:19:48:0a:82:7a:2c:87:
         cf:86:d9:31:78:7f:b9:b6:78:03:94:f4:6c:74:2e:dc:44:52:
         c8:7d:b8:a9:db:6f:d6:a3:06:f4:74:4b:6a:b7:bd:a4:8b:f0:
         25:02:22:9e:c0:a3:99:1a:09:f5:92:f3:00:e4:59:e6:4a:71:
         bb:17:ff:52:4b:0e:35:de:70:94:f0:be:9f:6b:80:6a:16:36:
         42:3c:6d:f0:91:26:c7:2c:26:cd:68:0a:e5:23:29:ba:a8:1e:
         78:6e:70:9e:15:f9:9b:55:97:a6:8d:8b:d6:4f:c1:9d:d5:b3:
         2d:b0:3f:72:91:99:1d:61:32:fb:2b:63:30:3c:2c:6a:cc:46:
         10:8e:87:8c:09:0f:41:0e:41:e1:86:c6:f9:e0:c9:ef:dc:82:
         46:25:3a:89:ff:dc:9f:78:99:37:e7:1d:b8:43:4b:f4:42:e6:
         d9:b1:95:da:2a:bf:59:2b:b8:66:0e:28:3a:77:ba:06:fd:ab:
         68:56:1c:75:4e:ed:58:59:de:97:42:bf:21:b5:39:89:bb:39:
         85:50:db:d3:9a:c5:35:7d:30:4a:68:0d:a8:fd:c0:08:63:58:
         1b:c0:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:47 2025 by rpki-client