Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa
File:                     d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa (raw, json)
Hash identifier:          bC0f6pzlovCpvAhR3qXNlycimBn18Ek3LoGAQThC7WY=
Subject key identifier:   76:D5:59:EF:9F:E8:3C:97:EB:BC:FC:85:5A:00:D1:6E:DE:27:34:0C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6FEBA18829EFCB81F060
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        47.231.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:6f:eb:a1:88:29:ef:cb:81:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=04cb71ed-2e18-4e15-a9bb-82892e2b678b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:05:f5:90:6d:fa:36:2e:1f:6a:67:f5:80:
                    85:b8:1b:d5:49:3e:4d:13:71:48:9e:0e:c2:a2:1d:
                    d8:2f:eb:48:4a:c8:c7:38:ef:f1:da:ad:68:d3:ae:
                    4b:30:80:6d:22:dd:3b:be:b9:0c:0f:06:26:1a:ce:
                    60:62:33:fd:c2:2f:1d:da:9e:db:58:51:19:24:72:
                    01:96:4b:6c:fa:18:1e:fb:f7:36:d2:42:02:cc:fe:
                    23:4a:18:7e:0b:2f:bc:fd:ca:66:6b:58:84:2e:a9:
                    44:4f:5c:17:d7:c1:4b:95:85:2b:f4:88:9b:c5:f1:
                    0a:32:a5:e0:ac:21:28:10:f9:5f:69:6e:87:1d:77:
                    5b:dc:87:3b:59:ea:9a:dc:17:bc:76:14:cc:32:e6:
                    4b:65:98:7c:fc:07:d1:8e:61:86:5e:43:b3:7a:7e:
                    24:82:9e:5f:8d:50:55:7b:74:40:c2:82:d3:84:f4:
                    df:ca:79:d3:40:cf:04:7a:9f:54:d2:dd:0c:25:4e:
                    8b:a7:ea:60:8f:a0:50:49:01:c9:ed:19:52:ba:f1:
                    af:96:c4:96:e0:c7:7f:0a:46:9c:de:d8:a4:6f:74:
                    c5:fd:e6:2e:71:00:cf:e5:8b:c6:b8:5d:15:39:14:
                    1e:af:d3:15:a5:b3:a6:c6:85:ab:44:94:65:3c:e6:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D5:59:EF:9F:E8:3C:97:EB:BC:FC:85:5A:00:D1:6E:DE:27:34:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ce:93:11:6e:eb:d7:76:e4:2e:5a:fe:bc:95:3c:c6:a9:99:
         9c:50:f4:c7:9a:8f:0b:d5:31:69:21:71:72:6a:04:07:40:e2:
         be:d3:90:4b:e6:0c:25:44:3a:78:bf:7d:72:e8:36:f8:6b:56:
         af:48:8a:e6:2e:c2:a0:61:1f:53:1f:bd:88:f1:4c:13:5b:7d:
         3b:01:e9:3f:3e:21:ba:8f:46:db:bf:60:1d:d4:f8:40:68:a0:
         93:69:0f:e0:a0:f2:fd:9f:41:a6:e6:d5:b5:8b:e2:a1:e0:14:
         e9:99:f0:af:05:59:b0:ad:55:97:ac:f7:ab:df:25:a0:4f:2d:
         a5:c5:24:75:4e:ce:ca:50:ea:55:fb:14:15:af:95:03:b0:18:
         64:dd:1f:98:03:c9:44:0e:d5:b3:da:6a:8d:b3:45:dc:e3:1e:
         ce:6a:2d:e4:a1:3e:98:58:31:32:62:9a:22:e8:15:c0:cf:0f:
         88:4b:a1:6e:e5:22:d5:a5:fa:03:a2:b9:ba:21:a0:a1:70:a3:
         85:54:ff:24:00:d4:ed:9d:5f:05:7c:2b:98:4b:5a:aa:63:6c:
         60:9e:39:5a:27:81:b9:02:8b:61:58:ec:34:d9:a2:bf:90:76:
         ef:05:9d:2a:e5:ff:17:3d:0d:35:07:cb:d0:82:55:1b:c5:29:
         a2:24:ed:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHW/roYgp78uB8GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MDRjYjcxZWQtMmUxOC00ZTE1LWE5YmItODI4OTJlMmI2NzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAsF9ZBt+jYuH2pn9YCFuBvVST5NE3FIng7C
oh3YL+tISsjHOO/x2q1o065LMIBtIt07vrkMDwYmGs5gYjP9wi8d2p7bWFEZJHIB
lkts+hge+/c20kICzP4jShh+Cy+8/cpma1iELqlET1wX18FLlYUr9IibxfEKMqXg
rCEoEPlfaW6HHXdb3Ic7Weqa3Be8dhTMMuZLZZh8/AfRjmGGXkOzen4kgp5fjVBV
e3RAwoLThPTfynnTQM8Eep9U0t0MJU6Lp+pgj6BQSQHJ7RlSuvGvlsSW4Md/Ckac
3tikb3TF/eYucQDP5YvGuF0VORQer9MVpbOmxoWrRJRlPObS5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbVWe+f6DyX67z8hVoA0W7eJzQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDk1MjI5NDMtYmUzMS0z
ZjkyLThmZDktYjFkOWQzYmUxZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBL+fyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPOkxFu69d25C5a/ryVPMapmZxQ9MeajwvVMWkhcXJqBAdA4r7TkEvm
DCVEOni/fXLoNvhrVq9IiuYuwqBhH1MfvYjxTBNbfTsB6T8+IbqPRtu/YB3U+EBo
oJNpD+Cg8v2fQabm1bWL4qHgFOmZ8K8FWbCtVZes96vfJaBPLaXFJHVOzspQ6lX7
FBWvlQOwGGTdH5gDyUQO1bPaao2zRdzjHs5qLeShPphYMTJimiLoFcDPD4hLoW7l
ItWl+gOiubohoKFwo4VU/yQA1O2dXwV8K5hLWqpjbGCeOVongbkCi2FY7DTZor+Q
du8FnSrl/xc9DTUHy9CCVRvFKaIk7X8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:34 2025 by rpki-client