Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d40ec699-3210-3c79-90aa-43adf9ca7586.roa
File:                     d40ec699-3210-3c79-90aa-43adf9ca7586.roa (raw, json)
Hash identifier:          F6KGpbKr49Vbb5UlHSntqY2cNJxVOwJFZKHA7a8gewM=
Subject key identifier:   C1:4E:A1:8E:F3:15:7E:67:3D:85:82:E3:DC:59:0C:60:A9:2C:39:21
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DFC354D480059403197C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d40ec699-3210-3c79-90aa-43adf9ca7586.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.15.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:fc:35:4d:48:00:59:40:31:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6fb5f2cc-4d1e-435d-b574-3602a4a752f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:f0:ad:d9:58:c1:b9:a3:80:e6:45:32:19:
                    42:3d:7d:29:52:a5:14:ba:e9:ed:ba:b7:77:4b:f4:
                    d4:e9:20:42:c3:5c:7f:65:d5:29:05:6b:f1:e8:dc:
                    77:0e:8a:69:56:f6:c4:e6:71:c7:99:10:c3:e9:90:
                    8d:7d:26:93:d9:2b:7a:3a:a8:91:9f:35:f3:8c:17:
                    a1:38:3c:e6:fc:4e:f3:b6:fb:39:a2:77:c7:52:7b:
                    23:44:36:11:cd:4f:97:e2:37:5b:0f:db:10:11:de:
                    fe:02:35:6d:d4:6f:40:bd:e6:df:84:53:89:23:35:
                    d1:e7:92:dc:e8:4d:5f:73:18:1e:02:d3:ae:d2:c4:
                    ec:0c:72:5f:b9:48:41:12:a1:b1:99:0f:83:6d:f4:
                    fb:f9:ac:8f:33:c1:8b:d4:df:26:47:76:93:37:e2:
                    98:1f:7c:91:f3:1a:c5:d9:ec:77:d9:57:99:95:8c:
                    22:04:61:35:c1:a8:84:06:6d:d2:e2:96:ea:40:96:
                    73:2d:1b:82:89:df:a4:13:a9:8f:ae:80:6b:a9:05:
                    d8:df:7d:7a:2c:ed:75:94:9a:cf:c8:bf:3f:5a:8f:
                    61:4b:9f:1b:78:38:31:cf:5b:17:1f:cb:58:17:ef:
                    69:f9:be:3c:a3:95:5e:0b:c0:45:8b:d0:80:43:10:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4E:A1:8E:F3:15:7E:67:3D:85:82:E3:DC:59:0C:60:A9:2C:39:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d40ec699-3210-3c79-90aa-43adf9ca7586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:1f:59:35:8b:49:70:79:75:30:cd:36:e4:d4:b5:33:57:
         1a:6b:b4:bd:c1:50:32:5d:e5:bb:91:36:aa:6d:65:c3:14:5c:
         9d:33:8d:6a:57:fe:4a:1d:a7:ff:c3:e7:90:c9:d2:23:0e:1b:
         46:2b:50:c4:6f:59:71:26:be:57:ef:41:cd:3a:e0:ea:19:6c:
         25:33:ac:7a:32:60:1e:a5:28:b3:56:bc:14:3e:ad:19:0c:e3:
         63:0b:79:a8:97:1f:29:12:83:1f:d6:f4:b4:df:ce:88:1f:07:
         ac:db:ca:1a:96:f2:69:af:9a:57:53:34:2a:5a:df:a1:12:36:
         ff:0e:bb:29:8d:ed:17:41:31:14:ad:f2:b1:aa:85:f7:5b:d9:
         99:19:64:3a:0a:e6:9c:44:95:c3:86:2d:43:66:5c:37:fa:af:
         ed:13:70:fa:10:bc:7b:1b:04:f7:ab:cc:7b:3c:e2:69:9b:37:
         3b:19:d7:06:2c:22:07:a4:0e:3c:68:17:20:a7:b1:09:6e:d6:
         12:6d:22:42:bf:54:19:b1:65:65:19:fb:b2:4c:f2:bf:70:f1:
         aa:13:ad:e4:99:52:28:f4:17:a6:e1:27:e7:9d:e3:77:f1:61:
         03:d2:9b:10:1c:fe:68:39:ea:67:55:58:9b:fd:44:93:a2:b5:
         b6:c3:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:52 2025 by rpki-client