Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d45a7662-0f92-3405-bcef-3a6df7f74b67.roa
File:                     d45a7662-0f92-3405-bcef-3a6df7f74b67.roa (raw, json)
Hash identifier:          QgXR+orDW6YFuT+6IfS4cvZsft8dFTPE6kGfUZKWetk=
Subject key identifier:   75:83:D7:F2:48:BC:7C:1E:A9:2E:67:ED:24:6A:C6:35:C2:F2:3A:2E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DE08BDD8F1F4553919380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d45a7662-0f92-3405-bcef-3a6df7f74b67.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.33.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:e0:8b:dd:8f:1f:45:53:91:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=cf8cd3bc-466f-4331-b26d-71a97c0c9f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:3b:cc:1e:05:06:df:bc:b7:e9:0a:f4:ae:
                    5e:03:74:4f:36:4b:45:ef:50:4d:0d:94:5b:22:8e:
                    12:da:a1:8a:25:bf:eb:2a:d3:0c:cc:e1:31:da:98:
                    42:d0:f9:4e:9a:9e:49:ed:15:f6:03:aa:a9:c7:93:
                    02:40:2c:16:3b:bb:58:58:5a:c0:94:44:e1:09:4c:
                    21:ac:6f:bd:56:09:a6:d5:d0:4c:d5:a3:6e:d5:0a:
                    b9:18:c8:9f:17:c0:50:9e:b4:15:05:df:fd:e0:15:
                    1d:fc:f1:99:3c:d7:9c:12:e6:0e:3d:03:05:1a:34:
                    36:45:f8:1e:b5:b1:28:b0:72:f2:18:73:e5:29:10:
                    7c:43:82:64:fc:ca:e7:f4:47:6a:75:f5:23:d4:b7:
                    fe:ed:54:bd:e9:a9:3b:61:2e:15:58:e2:48:03:89:
                    cc:1e:12:2d:8d:d1:18:5e:cf:59:7a:ce:67:8d:0e:
                    de:2b:ec:4b:41:16:af:d6:d9:79:69:fe:2a:4e:28:
                    0b:35:b7:24:3b:b7:ad:3c:1c:68:83:2b:ef:4c:b4:
                    b6:3d:e2:67:29:52:ff:30:68:ba:f3:05:cf:f6:e5:
                    8d:f5:dd:7d:88:02:dd:a3:a7:30:fe:ca:01:06:bd:
                    5a:77:ed:75:4b:9e:69:22:1a:7d:db:de:fe:2a:f1:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:D7:F2:48:BC:7C:1E:A9:2E:67:ED:24:6A:C6:35:C2:F2:3A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d45a7662-0f92-3405-bcef-3a6df7f74b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.33.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:72:2b:e9:39:ff:69:cb:67:e6:e3:1e:27:70:75:aa:e9:5f:
         c0:10:26:dd:61:9e:ae:a4:29:8c:68:73:6e:19:71:3d:ab:b3:
         29:c1:f0:0d:33:0d:8f:69:7a:6c:51:5b:63:30:7f:bf:e8:be:
         8e:00:6b:8e:71:92:38:c4:d4:5b:ef:17:db:03:4d:f5:b4:8c:
         f0:32:a4:26:38:b6:12:e4:66:e1:b0:12:5c:3d:1b:d1:45:12:
         48:86:51:5f:2e:01:6a:c6:78:0b:fc:6b:8b:0f:1e:6d:d3:db:
         91:41:db:44:5e:54:94:5a:67:64:ae:fd:8d:99:c5:05:97:10:
         3b:1e:e8:97:31:11:fc:2d:3b:0e:a8:bb:d5:ec:f9:8b:23:f2:
         60:af:dc:10:6e:69:12:42:e8:64:a0:d2:c3:86:de:ae:34:7e:
         a0:fb:cd:27:69:4e:ae:48:a9:ac:0d:17:6c:40:36:6c:fc:13:
         16:cc:6d:d2:23:a2:fa:01:35:56:94:bd:c9:9a:95:3f:d0:4e:
         bb:97:48:40:17:ee:37:d9:38:74:9d:8e:af:bc:d0:96:b9:ce:
         e7:65:25:0f:ca:8a:39:80:05:ed:e0:99:70:d2:31:3e:4c:d0:
         bf:95:cc:27:02:3d:2c:7d:17:c8:b6:de:17:1f:c5:78:0f:ea:
         c4:d0:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:32:42 2025 by rpki-client