Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d97777e1-5260-3478-b649-142f77abf325.roa
File:                     d97777e1-5260-3478-b649-142f77abf325.roa (raw, json)
Hash identifier:          eK6xNqhcHtyw94MWjl3BDLjduao7UUivv/NdOJ35AdE=
Subject key identifier:   86:AB:23:81:56:CE:36:5F:C7:D1:01:12:2E:50:6F:4E:13:E2:5D:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D33677710D9330DF239D8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d97777e1-5260-3478-b649-142f77abf325.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        104.159.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:33:67:77:10:d9:33:0d:f2:39:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ac31bf01-0cff-4f71-819a-e61d0335ec88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:2c:a8:1f:c9:f3:e3:ae:01:1c:a4:c7:f8:
                    0e:9c:56:08:2e:e0:ef:ad:9d:c0:2b:ee:fc:de:39:
                    c2:88:74:16:9d:35:5e:1f:5f:e0:46:fa:cc:02:49:
                    8d:ac:aa:21:76:0f:da:59:ee:78:98:1d:1d:62:55:
                    c4:57:f2:14:e4:64:f8:df:f0:2e:45:9f:82:b4:a0:
                    2e:5b:80:f9:cd:e0:a8:54:29:9e:04:84:ce:3b:80:
                    0d:32:f3:c1:1c:16:43:b4:23:4d:ec:65:e1:f0:a1:
                    37:1e:f7:13:a1:be:da:e5:44:a3:86:21:41:2b:6e:
                    df:67:cd:14:1a:2d:ff:97:1a:9b:4e:72:ed:5d:67:
                    1c:24:f5:87:7b:21:27:54:7c:41:16:d8:21:cb:19:
                    92:e5:fd:19:91:57:40:ff:e2:4f:05:0f:0b:4b:3d:
                    04:df:73:9b:1e:89:38:7a:c2:67:7a:ab:30:0b:b0:
                    50:53:ee:e2:ec:ee:dc:6e:d8:31:75:10:9f:7b:96:
                    0d:23:fc:0e:42:10:74:e2:9a:e0:bb:59:b1:0f:b6:
                    30:39:f7:18:8d:17:dc:60:d9:7f:11:7d:00:8a:7b:
                    6e:dd:2e:d0:88:e5:bf:39:bf:58:33:18:70:a3:09:
                    0f:ad:00:54:9f:dd:3d:44:7a:d8:c3:d6:7d:fe:3d:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:23:81:56:CE:36:5F:C7:D1:01:12:2E:50:6F:4E:13:E2:5D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d97777e1-5260-3478-b649-142f77abf325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.159.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:1c:31:df:16:00:62:b2:2b:51:19:bb:45:ba:cf:75:73:d9:
         e6:7c:46:08:89:9d:89:78:0c:06:3c:a9:35:00:0e:6b:ee:f2:
         77:39:66:67:23:97:4a:35:49:fa:b5:27:59:ed:f0:4e:58:29:
         76:42:12:84:d9:1d:7c:fd:0b:74:4d:55:a8:fe:ea:29:3b:6e:
         a0:28:e6:dc:7a:cf:e5:24:4c:29:c2:25:86:7c:0e:7b:ab:70:
         df:5c:87:31:4d:8a:db:42:34:3f:d1:d8:7e:4a:fe:e1:0d:98:
         74:65:ed:aa:0c:e2:65:7d:e3:69:9b:ad:34:0a:e4:c3:5c:ab:
         90:0c:4e:52:25:ae:e5:8b:4d:66:6f:36:f1:c6:73:46:7d:cd:
         17:ab:67:07:21:d2:e9:77:b5:ef:1e:ab:fc:22:20:5c:fd:3e:
         bb:37:98:e9:a0:62:ba:5c:96:18:e9:64:96:11:6e:59:a5:39:
         50:c6:b2:60:b7:52:0b:02:47:f8:cc:07:96:1e:0e:75:47:4a:
         29:aa:88:df:54:61:eb:2c:b7:8c:ea:fb:8a:55:dd:f7:e6:10:
         6d:e1:a7:84:59:d9:ec:9d:3d:5c:6b:a2:8f:72:52:60:0a:1d:
         0d:0b:cb:1c:86:13:3d:2b:6a:c1:12:40:95:f5:48:b0:b8:88:
         fe:a3:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:51 2025 by rpki-client