Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f25f1021-226d-3464-9771-b8f59416d040.roa
File:                     f25f1021-226d-3464-9771-b8f59416d040.roa (raw, json)
Hash identifier:          1YkUXDPLdBvhO5IClahFHJyWC2S04xxDOhn5Oo+95XI=
Subject key identifier:   ED:5A:30:C9:CD:4F:26:A9:AB:39:D5:0D:C2:FC:62:45:44:91:40:A5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161D233DC13417CDB46AA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f25f1021-226d-3464-9771-b8f59416d040.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        144.253.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:d2:33:dc:13:41:7c:db:46:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4e7172a8-575f-4a0c-b04b-b44fa130663d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cb:94:5c:31:10:15:75:b9:7a:2c:04:30:89:
                    7c:64:97:46:b5:a0:37:d7:5a:62:0e:f2:6d:ba:a0:
                    34:a4:ea:fc:5c:e7:21:fc:de:52:da:4f:5b:2b:1d:
                    d6:9f:f6:8f:2d:c7:9b:62:8a:20:c4:24:c2:6e:00:
                    2b:d9:f1:f9:64:0c:c4:aa:bb:35:78:5c:06:55:ae:
                    11:7f:eb:bf:bb:1a:38:63:b8:a6:49:8c:75:e6:2d:
                    25:90:54:8b:1f:32:5d:a7:2e:3b:55:c7:6c:c8:a0:
                    9f:e5:37:30:a8:94:c6:51:16:a4:3c:bd:2f:57:c1:
                    9c:9a:bf:af:4b:71:a0:1d:04:84:99:5a:5c:26:27:
                    c6:0a:aa:55:08:4e:9f:26:0f:3e:d6:77:5c:6c:aa:
                    08:8d:41:a3:8e:65:82:67:ac:b1:b2:f7:0b:8f:e2:
                    86:27:75:37:22:61:20:d7:17:d3:fa:a6:07:8c:b1:
                    b4:d3:3b:f0:6f:d3:97:9d:ca:f3:47:71:f5:7f:1a:
                    34:ea:4b:f5:ab:dc:83:3c:13:5b:44:72:40:df:65:
                    ca:02:b4:3c:ad:ec:30:89:53:7e:03:ea:29:74:05:
                    bc:3f:43:4b:e9:fc:33:ef:eb:0e:7e:75:3d:ed:3d:
                    24:0c:73:c7:b0:7a:ba:96:95:5d:d6:43:85:c4:93:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5A:30:C9:CD:4F:26:A9:AB:39:D5:0D:C2:FC:62:45:44:91:40:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f25f1021-226d-3464-9771-b8f59416d040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.253.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:82:21:fe:0a:6d:a6:78:9e:a4:61:78:b6:0d:c4:56:db:
         79:00:9a:d6:70:33:ca:ab:84:95:30:08:96:21:2f:ab:24:eb:
         1e:53:85:41:d5:62:06:69:bd:3b:63:58:f6:1e:6f:a6:69:1c:
         42:65:06:38:33:b3:3a:99:91:3f:5d:9f:c6:ce:a1:d6:24:e3:
         5b:b2:bf:00:2d:9e:51:2f:ed:92:99:ec:6a:1d:49:67:35:0e:
         0c:d5:bd:7e:30:38:07:07:21:fd:5d:ed:a1:bd:5f:03:04:1a:
         e1:9b:03:79:fa:44:dc:30:f5:15:be:07:c7:0d:f1:a4:ae:a1:
         b7:1b:19:25:67:fc:c1:c4:f9:20:3a:4e:8f:75:22:a2:9d:8b:
         5b:97:3d:66:4d:c5:e9:04:96:f4:28:b9:3a:00:be:04:64:11:
         c4:1b:a6:b2:94:30:85:2a:62:c7:38:3d:89:d0:d5:d7:45:d8:
         02:df:3b:a0:e1:f2:71:ef:81:d4:3f:50:3e:56:be:9f:5b:31:
         54:cd:7d:8f:68:25:f0:02:a4:12:15:39:6e:3a:e5:7f:93:d1:
         33:64:a4:0d:5c:79:a1:01:72:c4:a2:57:6f:1e:1e:e1:c1:66:
         a3:d0:e3:13:f6:40:04:f1:e3:e9:f9:63:a9:8b:b5:ef:e0:11:
         6c:8e:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:58 2025 by rpki-client