Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d37c6b12-c217-3c3c-a0d5-979f9dce45c6.roa
File:                     d37c6b12-c217-3c3c-a0d5-979f9dce45c6.roa (raw, json)
Hash identifier:          05kHRtTETxYS4cT1r9YVHvcWYxQEgYaBrQ42by9ikM4=
Subject key identifier:   16:89:2C:59:BA:82:AB:AB:1D:AF:28:D0:42:A9:3B:A7:74:1D:46:67
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B52A7623EAB233D4A3C1ECE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d37c6b12-c217-3c3c-a0d5-979f9dce45c6.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     22715
IP address blocks:        97.84.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:62:3e:ab:23:3d:4a:3c:1e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d4c62b42-d0bb-4d8e-a131-de941e25e862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b8:db:7c:29:c1:67:99:83:cc:4b:ce:1d:d5:
                    26:95:99:f5:87:b9:14:63:2d:74:15:94:a9:44:25:
                    32:a1:8b:84:2b:f5:a5:95:bf:e8:b6:ee:ed:1d:5b:
                    23:26:92:38:61:6a:4c:87:32:95:0b:01:32:e5:16:
                    0b:aa:53:f5:cc:a6:46:0e:4f:af:e9:93:90:f0:ea:
                    c3:5d:5b:c2:19:c0:e6:04:db:c9:06:e3:62:28:ab:
                    89:6f:32:6a:ce:5c:e1:f6:8f:ca:1b:5b:0d:50:b8:
                    cd:fb:be:4b:e5:a2:1a:36:59:91:7c:f3:2f:bd:4a:
                    6a:5a:73:46:5f:ff:0d:ea:05:ac:23:32:1b:63:e0:
                    00:fb:47:b6:7b:90:de:00:c1:fe:74:53:b3:a6:d8:
                    c3:3a:68:13:a8:49:10:82:42:82:cf:96:cb:61:fa:
                    0d:3a:c3:0e:ac:7c:3a:6f:f4:20:bd:35:22:d9:90:
                    8b:8e:c2:36:a4:7a:56:3f:ef:79:87:10:17:e0:3c:
                    01:f0:d5:38:2f:57:ee:7d:1c:1c:01:20:d1:76:25:
                    db:1a:9b:1c:a5:2e:68:23:4e:74:d5:e2:12:6c:a5:
                    6c:7e:92:0b:97:d9:d9:b1:33:6f:3d:5c:19:4f:90:
                    de:46:9b:ee:cd:df:e6:29:b4:74:ca:2d:ac:ab:fc:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:89:2C:59:BA:82:AB:AB:1D:AF:28:D0:42:A9:3B:A7:74:1D:46:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d37c6b12-c217-3c3c-a0d5-979f9dce45c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.84.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:24:ba:03:17:d7:1a:fb:db:54:0a:16:07:49:c4:b9:3c:e9:
         3e:bd:db:e4:b0:24:70:7f:12:07:be:fe:b4:29:22:32:52:88:
         b5:bb:d0:2c:13:dc:74:9d:22:83:a6:63:d8:ab:07:a2:69:10:
         d8:7b:51:f8:b4:16:20:41:ee:94:74:38:ec:33:c0:3e:a7:86:
         c2:cc:9e:4a:ed:0f:e8:9e:e0:2e:7b:6f:c8:2d:97:57:1c:e5:
         31:4f:07:d2:ae:2c:22:f9:89:5f:42:6b:63:0e:3e:7c:72:ce:
         83:cd:ca:8c:d3:96:27:94:89:25:68:21:66:b7:ea:c8:71:4a:
         d5:f9:2a:d7:22:72:53:e3:ba:06:83:e0:8a:32:be:63:52:54:
         f6:f9:60:ca:c9:6b:19:28:c0:5b:bd:48:23:6c:42:16:62:7e:
         d4:1e:3d:92:23:58:5e:71:f2:80:ad:20:fe:18:dc:6b:31:96:
         a7:b7:10:2a:4d:cb:ec:32:6a:d0:ba:b0:51:b6:d6:70:51:03:
         fc:48:27:99:ae:5d:30:65:d5:33:12:b6:83:f2:0c:59:0b:5a:
         52:bd:53:82:4e:db:53:49:f6:cf:31:89:f8:56:ed:7b:cc:c0:
         b5:19:74:a6:a9:78:d4:65:30:59:d0:a4:0a:53:39:b8:2f:c2:
         db:62:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:42:00 2025 by rpki-client