Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec5cd03d-1581-30d2-a3a5-adb01c2ada0f.roa
File:                     ec5cd03d-1581-30d2-a3a5-adb01c2ada0f.roa (raw, json)
Hash identifier:          puQy4aPkza5tgYJyVK2iIaODaAlFgd3yAFh4oNCIq6c=
Subject key identifier:   D4:26:1E:7D:82:C5:14:A1:30:4A:A0:E6:B7:22:C4:29:D7:C6:08:E2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B6367407DDAA7187A5FC757D4
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec5cd03d-1581-30d2-a3a5-adb01c2ada0f.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     10796
IP address blocks:        168.148.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:40:7d:da:a7:18:7a:5f:c7:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=17b7750b-47c5-4a06-ae6d-ee15188a40f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:12:17:6b:f0:27:65:bd:89:fb:76:3c:f6:
                    f4:ec:c0:55:b8:ee:88:1d:80:73:55:ed:43:2e:33:
                    a5:31:77:dd:14:52:da:9e:b4:a6:dc:1d:69:d9:e3:
                    20:b4:15:a5:cd:fb:90:4b:c0:49:6e:39:ab:0f:64:
                    7c:8b:e3:52:96:39:8e:11:9d:fa:90:d3:63:b0:34:
                    97:65:c8:df:f7:02:b1:a6:5f:b0:ff:aa:2f:d8:da:
                    e1:22:7b:c8:09:4d:aa:69:5e:ac:ab:53:ba:3d:0f:
                    9f:ea:36:dd:d1:9b:f3:d1:18:b8:0a:05:e9:ac:02:
                    a7:49:44:13:85:53:55:99:85:6c:15:ff:77:00:77:
                    d7:52:68:96:bf:74:24:be:2e:9a:2b:fe:56:7b:6d:
                    5e:63:8f:b4:75:31:a1:43:46:74:f6:a5:aa:53:95:
                    c4:05:41:c0:d5:26:97:d5:f5:57:7b:f9:c6:ba:9f:
                    74:9e:2d:e7:4e:cb:b5:9f:e3:36:06:a5:fe:e5:2b:
                    a0:32:d6:14:31:3d:5a:11:a4:54:39:e1:af:b0:62:
                    10:87:84:93:b4:b1:89:56:62:0b:54:f2:5f:ee:0f:
                    3f:6d:61:4f:b5:29:f5:35:58:f8:f4:60:62:33:9c:
                    9d:d1:37:bc:b2:7d:5d:9f:4b:ce:43:0d:e7:30:88:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:1E:7D:82:C5:14:A1:30:4A:A0:E6:B7:22:C4:29:D7:C6:08:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ec5cd03d-1581-30d2-a3a5-adb01c2ada0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.148.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:86:93:d5:c1:c5:66:24:5c:ed:5f:d1:70:e7:76:02:c3:f5:
         5b:34:46:5b:ce:9d:9d:17:fe:3a:b2:35:40:7e:07:48:26:a5:
         f7:c6:ce:b7:d7:04:af:12:63:2e:e6:eb:07:ba:19:45:38:22:
         c6:a4:18:db:ee:51:52:e9:a8:04:a3:af:b9:05:9a:36:0e:c7:
         6f:ac:5b:ad:09:57:5c:b0:5d:0e:1b:24:7b:4e:f7:4b:dd:1f:
         67:d8:27:37:7f:bc:37:03:53:5c:07:a0:78:63:10:e4:a5:0d:
         12:e5:10:1e:3d:f6:62:cf:83:9d:ca:57:f9:fd:a0:ee:e6:de:
         b3:57:e9:8d:53:2d:a0:32:91:96:80:e3:d1:60:02:de:01:43:
         82:91:0e:35:58:1b:dc:1b:ad:e2:99:52:7f:bd:12:3e:ce:28:
         3c:9c:09:ee:69:e1:d5:c2:fe:8d:56:a4:40:57:cd:e6:d8:c7:
         4c:70:bd:98:92:99:83:de:70:b7:96:e4:f8:c7:9c:5f:1b:77:
         9a:5e:29:4d:eb:b4:c6:92:cc:e0:2b:d6:a7:99:ba:27:5b:37:
         bc:7b:1d:99:47:dc:95:c9:4a:04:dc:4b:eb:8b:e7:ad:1e:66:
         8d:f2:e2:b0:8b:f4:3b:74:13:87:e5:78:e1:01:c3:b6:db:3a:
         6a:33:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:10 2025 by rpki-client