Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da419d26-de78-36b1-a5d4-a13b8aa97f55.roa
File:                     da419d26-de78-36b1-a5d4-a13b8aa97f55.roa (raw, json)
Hash identifier:          nVJKzK2kv5gsM1mFPyd84Iiyl6CXCK7uVstRwPiF87I=
Subject key identifier:   4B:30:E6:12:90:A9:1F:B1:E0:41:3C:E2:EC:E3:29:9F:91:97:77:3A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC62C85316301AAF8F700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da419d26-de78-36b1-a5d4-a13b8aa97f55.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        192.60.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c6:2c:85:31:63:01:aa:f8:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=9e7c77ab-a4e6-44ff-bf07-06574818f5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:dd:60:37:4e:eb:8d:e8:6b:ce:a6:fd:b3:
                    45:13:85:52:d2:75:b6:a8:65:8d:20:ea:f7:1c:2c:
                    19:3c:51:ef:de:1c:5a:aa:2d:c8:3c:c1:ed:f8:cb:
                    57:67:3c:5b:d4:bb:ec:9c:42:c6:3f:9e:1f:cd:4d:
                    49:ac:37:c2:de:36:06:02:37:67:8a:fc:ba:48:d7:
                    f3:05:33:b0:41:dd:96:97:e6:ae:d0:ea:ca:c0:25:
                    d3:c7:8e:19:9a:90:11:48:e1:20:d1:a4:c1:1f:cb:
                    d9:16:ad:bf:a3:f3:46:ac:d0:36:54:e7:92:f7:ed:
                    01:e9:78:a0:7e:00:5c:fc:bc:ee:a2:81:a1:95:f8:
                    29:cb:da:5d:5b:28:d8:a8:ae:e6:58:24:d8:84:19:
                    2a:74:4a:1a:ef:b4:bb:7a:26:1e:15:81:6e:9c:b7:
                    9d:e1:72:61:d3:72:2c:35:26:52:11:23:11:16:3f:
                    c3:b0:3e:0f:b8:32:11:13:cb:3d:82:89:91:57:ef:
                    b3:26:d5:7b:50:b4:95:6e:5f:f3:21:b6:41:5b:78:
                    28:ac:9a:38:0f:11:cc:9f:2c:d0:ef:58:71:c2:93:
                    ba:b4:5c:51:a3:d8:96:4e:ce:d9:c1:c5:e0:9f:82:
                    c9:5f:ed:91:52:cd:c2:2d:55:b9:ae:15:2d:8c:0f:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:E6:12:90:A9:1F:B1:E0:41:3C:E2:EC:E3:29:9F:91:97:77:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da419d26-de78-36b1-a5d4-a13b8aa97f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.60.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:70:99:f5:0c:ed:da:8b:0b:86:06:05:72:7c:90:97:14:48:
         bb:fd:7d:70:a1:35:65:f0:eb:75:ec:78:50:31:3b:8b:af:c4:
         6a:cf:e5:53:9c:f8:73:cb:94:9d:91:47:af:fd:a5:ac:e8:39:
         70:71:76:5f:ba:f8:21:e1:f6:a9:a9:55:c1:29:81:ef:29:7d:
         74:5e:9a:af:3f:a3:4e:e7:63:e7:20:73:b2:ba:e3:cc:1e:7d:
         cd:1e:1b:04:72:5c:92:74:05:e7:e0:95:15:8e:82:ed:69:6a:
         1b:7d:a2:c8:fe:ea:77:de:c9:40:4d:be:13:51:d0:98:d8:1f:
         95:54:c6:e4:9f:db:9b:69:c9:1a:9c:1b:07:05:0b:a9:38:64:
         80:64:29:21:2b:ce:3a:4b:82:2d:0a:ce:2b:5e:44:30:0a:b8:
         ef:95:7a:45:b7:1c:86:a5:1a:9a:da:6b:a6:c5:c9:bb:de:da:
         8e:1c:6c:55:a7:fd:28:63:a6:ce:14:39:9a:6c:9a:29:a9:33:
         e5:4e:ed:2e:24:7d:54:40:9e:dc:79:56:f1:a8:ab:e8:ae:eb:
         05:7f:a8:9b:53:a4:94:52:b5:f0:e2:13:c8:c8:ac:a0:e8:98:
         fe:cd:3c:fb:0b:ae:2c:31:a0:cb:7f:b6:86:26:30:29:59:f7:
         3f:59:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:44 2025 by rpki-client