Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eacb9a3d-993d-3444-8359-92b106b7f58b.roa
File:                     eacb9a3d-993d-3444-8359-92b106b7f58b.roa (raw, json)
Hash identifier:          sQZ74MSPqpDjVRIiwaKPj5KAsiE75UzB3er3oNIyIUI=
Subject key identifier:   A0:CA:27:EA:FE:C9:47:58:C5:61:D0:83:25:5B:B5:B8:1F:E0:6D:16
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7C5ADA60E804C055E920
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eacb9a3d-993d-3444-8359-92b106b7f58b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33588
IP address blocks:        47.44.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:7c:5a:da:60:e8:04:c0:55:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=98f807e2-8022-4fca-8dd8-b603dca01b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:0d:eb:b1:8a:93:ae:ad:43:3c:26:99:e8:
                    8c:9f:40:1b:2b:d8:f2:35:ea:30:49:17:08:09:e9:
                    ab:10:b1:03:d3:5f:b5:18:97:4b:36:ab:26:c2:ce:
                    88:17:54:d4:00:30:dc:a0:3e:b2:60:0f:96:1c:ee:
                    8c:ac:5a:35:d5:4d:2b:c8:80:e2:98:bb:cf:02:a9:
                    10:3a:68:b2:b5:ca:26:8e:ea:82:b9:46:d1:b8:87:
                    8c:91:84:36:d8:a0:38:a9:84:38:f7:8c:60:59:25:
                    f0:3c:3e:ff:8e:a6:e1:f1:d1:0a:bd:10:bf:d3:c1:
                    f6:e4:eb:9e:2f:9d:e9:4e:b7:fc:d6:9b:2e:d8:56:
                    b9:0d:65:31:f4:a0:f8:32:03:2a:42:9e:c4:63:8f:
                    01:63:ea:06:27:f2:66:8b:aa:fc:19:c5:3c:55:4c:
                    1c:e1:7d:ad:01:7f:fd:12:81:79:90:6f:3d:bb:f1:
                    8f:be:d5:88:2a:02:e7:e2:94:6d:e3:84:3d:ab:97:
                    7d:ed:55:ed:6f:e3:8c:78:b1:d7:43:32:7d:15:c8:
                    a5:c9:34:36:a7:a8:40:fe:eb:4d:5b:a3:ba:04:56:
                    ce:e0:f3:76:03:3c:82:cf:57:61:db:5b:77:ab:bc:
                    60:8e:e4:4b:0c:94:c6:b6:b0:0e:03:75:23:a6:e3:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CA:27:EA:FE:C9:47:58:C5:61:D0:83:25:5B:B5:B8:1F:E0:6D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eacb9a3d-993d-3444-8359-92b106b7f58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:f1:d1:50:bb:3b:2e:9f:78:28:67:06:0d:02:f5:0d:94:
         38:22:d4:41:b4:90:42:a0:97:33:d0:0c:d8:6a:fa:20:6b:24:
         04:7e:82:ce:b0:a2:c1:50:b9:e4:2c:99:5e:7f:c8:2a:11:91:
         08:7e:92:19:7c:22:d1:b5:2a:d7:cd:9f:55:d4:91:6f:56:57:
         66:92:8c:41:fb:f9:4b:54:66:3b:a3:c4:43:7e:4f:25:df:aa:
         1b:35:e9:ce:19:68:ca:b2:8c:1c:25:f6:3c:00:10:21:2f:08:
         75:b5:8e:46:9c:2d:b1:27:68:e8:4a:4f:ca:8e:f2:3d:15:d0:
         89:b6:db:fb:a6:44:fd:bb:bf:1f:9e:c1:af:9b:85:ce:5a:2f:
         a9:b7:dd:1c:dd:b9:46:1e:00:2f:9c:95:a1:68:a2:b6:41:e0:
         db:3e:46:24:4c:e9:92:81:fa:ac:cd:c8:ef:36:68:28:13:b0:
         31:e5:a7:8e:2d:6c:7e:25:35:a2:4c:60:03:8a:1a:f1:3f:0d:
         6b:c4:6d:c9:92:ed:52:65:76:4b:34:3a:16:29:0f:aa:7d:92:
         23:01:3f:cb:43:fb:5f:c5:f5:b9:dc:39:9d:66:d9:01:fc:f1:
         a3:bb:1b:9d:d8:a6:da:cd:c7:8b:ea:02:6a:60:40:db:29:7d:
         9f:e5:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:15 2025 by rpki-client