Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5abfa35-8c96-3b11-97f4-0147e295eb37.roa
File:                     f5abfa35-8c96-3b11-97f4-0147e295eb37.roa (raw, json)
Hash identifier:          f5ENh+uZfn34gB6SZ+vRuYpIN9ugEk8NmNX+C/i3Vhs=
Subject key identifier:   ED:72:9F:B5:CB:D1:DB:A1:D7:3D:D0:0F:B1:17:E4:74:39:52:E5:5B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E0C6FFDCF2279B9680700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5abfa35-8c96-3b11-97f4-0147e295eb37.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        97.92.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:0c:6f:fd:cf:22:79:b9:68:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fee413b8-cf8c-4d9b-aa9b-4a1415fdc0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:e9:e8:a3:20:34:b9:16:2a:86:75:e4:b8:
                    41:13:28:09:bc:9d:7a:c4:e8:c8:70:4e:e1:05:0c:
                    95:3a:02:d8:2f:6b:4c:b4:c8:da:ee:97:2c:1f:de:
                    76:45:4c:1c:2f:e1:55:b1:9e:1d:65:19:e8:64:43:
                    da:d5:d7:dd:f8:18:5b:e4:db:9d:70:dd:a2:bb:7a:
                    68:53:da:50:55:b0:9a:54:04:05:23:ee:2d:ac:c7:
                    89:d3:9c:66:14:f1:c5:9d:9b:3e:a2:29:7e:62:bb:
                    ca:67:8c:85:48:ab:c3:f3:a4:88:fa:bf:fb:3a:d6:
                    68:a7:92:39:95:66:27:a3:68:6f:c0:f3:af:cc:f8:
                    2b:3f:74:20:55:20:7f:90:03:0c:90:39:7d:4c:6f:
                    62:3a:c7:87:9a:a0:33:06:5d:c3:ed:cf:2b:83:ba:
                    b9:ec:99:d8:c3:37:79:ae:27:8f:4a:91:ca:e3:27:
                    ed:87:e6:6c:b6:33:ae:11:9a:69:ca:5a:06:ed:0b:
                    d2:7d:a2:83:79:c4:96:6f:fb:48:5c:6a:65:d2:a4:
                    84:58:05:f2:b6:eb:7b:34:87:64:c4:55:89:b1:50:
                    2c:30:e9:28:18:65:e9:fd:9b:67:fe:56:ba:60:d7:
                    e2:87:aa:ae:3d:0c:da:51:fd:79:76:f0:f0:3a:7d:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:9F:B5:CB:D1:DB:A1:D7:3D:D0:0F:B1:17:E4:74:39:52:E5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5abfa35-8c96-3b11-97f4-0147e295eb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.92.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9c:63:6f:20:cd:48:6a:d4:1a:89:fc:f9:6d:28:3f:f3:84:
         d7:7d:4d:4b:6b:38:b1:8e:33:69:8a:d4:dd:b1:d8:f2:78:65:
         07:0e:9a:3c:42:1e:c1:59:6c:e9:87:de:3a:6e:62:68:20:3a:
         7c:c2:d0:78:df:02:fa:98:7f:06:ac:10:f4:d1:bc:f5:bf:e3:
         44:40:3c:82:7b:7a:1f:83:67:1d:e4:78:cf:4d:c2:29:b2:20:
         53:43:7a:af:82:71:13:b6:33:71:ea:29:7b:44:5e:b4:0e:07:
         03:d4:03:ef:ad:9b:60:16:12:1e:0e:56:1d:dd:43:01:d3:85:
         51:06:fa:22:fc:bc:27:77:5e:b0:3e:0b:9c:f1:e0:ee:39:8d:
         37:ba:2b:bc:49:20:b5:1c:78:d4:a0:60:53:ec:27:a9:b4:b0:
         bf:bb:bd:3d:90:7f:70:1d:86:71:47:6c:38:04:db:9b:cc:27:
         f6:f5:de:d8:06:c2:11:36:c2:97:92:af:ce:a7:72:4d:54:58:
         b7:c4:fb:f9:2b:7e:c6:1b:98:3d:69:e0:33:f4:10:61:4d:93:
         c3:aa:30:c3:20:52:bc:f3:7c:ac:82:d5:91:cc:7a:68:82:32:
         cc:77:3d:6e:78:2d:1e:fc:3d:85:b8:8b:60:e5:fe:25:0c:b7:
         98:9f:d5:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgxv/c8iebloBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZmVlNDEzYjgtY2Y4Yy00ZDliLWFhOWItNGExNDE1ZmRjMGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXDp6KMgNLkWKoZ15LhBEygJvJ16xOjIcE7h
BQyVOgLYL2tMtMja7pcsH952RUwcL+FVsZ4dZRnoZEPa1dfd+Bhb5NudcN2iu3po
U9pQVbCaVAQFI+4trMeJ05xmFPHFnZs+oil+YrvKZ4yFSKvD86SI+r/7OtZop5I5
lWYno2hvwPOvzPgrP3QgVSB/kAMMkDl9TG9iOseHmqAzBl3D7c8rg7q57JnYwzd5
riePSpHK4yfth+ZstjOuEZppyloG7QvSfaKDecSWb/tIXGpl0qSEWAXytut7NIdk
xFWJsVAsMOkoGGXp/Ztn/la6YNfih6quPQzaUf15dvDwOn2QrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1yn7XL0duh1z3QD7EX5HQ5UuVbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjVhYmZhMzUtOGM5Ni0z
YjExLTk3ZjQtMDE0N2UyOTVlYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKcY28gzUhq1BqJ/PltKD/zhNd9TUtrOLGOM2mK1N2x2PJ4ZQcOmjxC
HsFZbOmH3jpuYmggOnzC0HjfAvqYfwasEPTRvPW/40RAPIJ7eh+DZx3keM9Nwimy
IFNDeq+CcRO2M3HqKXtEXrQOBwPUA++tm2AWEh4OVh3dQwHThVEG+iL8vCd3XrA+
C5zx4O45jTe6K7xJILUceNSgYFPsJ6m0sL+7vT2Qf3AdhnFHbDgE25vMJ/b13tgG
whE2wpeSr86nck1UWLfE+/krfsYbmD1p4DP0EGFNk8OqMMMgUrzzfKyC1ZHMemiC
Msx3PW54LR78PYW4i2Dl/iUMt5if1Zo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:58:48 2025 by rpki-client