Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc2c1a97-392a-37e4-95b8-a699b610566a.roa
File:                     fc2c1a97-392a-37e4-95b8-a699b610566a.roa (raw, json)
Hash identifier:          VZP/Zxvgc05TZMkwhKw75LAe90sZiSWNIS2+AbfbETA=
Subject key identifier:   B0:B6:D1:CA:11:29:4C:17:F8:95:85:20:AD:F2:70:CA:26:1F:92:20
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E07FA49552FE8D666AC70
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc2c1a97-392a-37e4-95b8-a699b610566a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.134.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:07:fa:49:55:2f:e8:d6:66:ac:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=3a284693-abdd-47d6-ad98-74f53daaf7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:1b:33:30:52:28:27:6a:b1:3a:35:75:eb:
                    56:6b:57:f3:ea:03:86:64:7c:15:ec:ba:bd:5b:32:
                    1a:99:0b:68:01:00:49:ab:87:32:ef:f8:a8:8f:0f:
                    e1:a6:fb:26:3e:a1:c6:19:63:b6:bf:dc:43:ac:11:
                    0b:d1:1b:73:56:e6:19:0a:3f:8f:d1:83:04:4c:3b:
                    b3:6c:40:49:82:c6:ed:db:7b:39:30:05:93:86:5c:
                    2b:7e:61:94:59:dd:56:ff:cf:5b:ec:9c:bd:b4:d4:
                    0a:d0:05:bf:fc:38:d5:c1:c5:d4:c7:96:93:8b:3b:
                    63:68:71:95:81:89:ff:cc:95:96:bf:d7:08:21:bb:
                    6b:8e:d4:ef:c1:4d:78:8e:9f:90:f9:9b:1d:fb:a3:
                    b1:f8:04:8a:72:01:52:d1:0f:16:63:34:5a:d0:d9:
                    9e:ec:5e:64:20:a2:1a:11:4d:59:b0:43:10:5e:e1:
                    22:73:0d:4d:f9:e5:c5:57:a2:f1:93:bf:83:d0:f8:
                    4c:ea:d1:84:d0:15:dd:16:70:21:f4:ec:c4:dc:31:
                    f2:0e:a4:84:17:e4:81:21:76:1d:47:c5:f2:2a:52:
                    81:ee:68:55:af:00:f0:bd:c6:a1:c2:56:d6:8f:b3:
                    57:4d:0c:41:3f:74:d3:e7:13:db:6c:5d:35:79:f2:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:D1:CA:11:29:4C:17:F8:95:85:20:AD:F2:70:CA:26:1F:92:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc2c1a97-392a-37e4-95b8-a699b610566a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.134.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:03:4e:d0:99:2b:fa:0f:77:55:a7:2d:ae:b3:13:72:d3:
         03:e8:08:44:04:b6:d6:ea:53:8b:9c:35:59:04:2b:99:fc:c8:
         78:e9:f5:62:93:7a:36:e6:9c:87:1c:59:df:5b:dd:14:41:ea:
         9d:49:93:4d:47:ed:7e:d1:d2:b6:42:c7:a3:8b:16:ea:c8:55:
         51:1d:06:10:1d:f3:3d:03:2a:8e:87:2b:34:6f:08:52:96:d0:
         c8:19:36:8d:be:ce:09:0e:95:c4:40:63:61:18:2a:79:11:63:
         50:79:d6:8c:15:6a:28:d1:48:d3:0d:17:19:30:72:88:72:7d:
         23:9e:35:a3:41:df:c0:ae:3c:14:a2:79:da:ce:76:8f:73:9f:
         62:dd:f3:df:3d:b7:f8:aa:f9:3b:02:32:7b:32:87:61:b5:45:
         e1:6f:97:e6:9c:48:b2:ed:14:5b:ff:8c:95:bf:7e:2c:bd:58:
         c2:4f:a2:31:f3:05:78:d5:b9:4c:63:8a:53:0c:e4:0d:a0:93:
         47:5b:44:c3:32:2d:a6:f1:b1:cf:95:ea:e5:37:ea:8f:2e:68:
         b3:b0:16:44:f0:41:80:58:24:4b:e2:0e:2f:6f:c8:0d:db:fa:
         3c:5b:52:33:40:05:22:e9:a5:f3:03:50:58:bf:e4:6d:fa:f8:
         7c:8e:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:03 2025 by rpki-client