Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fce3282c-5633-3a29-b161-b72d0cde5cc1.roa
File:                     fce3282c-5633-3a29-b161-b72d0cde5cc1.roa (raw, json)
Hash identifier:          PtWpVCKIdr/BD3DQgaqnZsg1b4fozY9th6a+i7np86Q=
Subject key identifier:   6A:62:42:28:7A:EE:29:AF:5D:9A:1C:EB:46:0E:C0:C7:2D:07:DC:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D5156199DB194521ADF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fce3282c-5633-3a29-b161-b72d0cde5cc1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.94.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:51:56:19:9d:b1:94:52:1a:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0055e2ae-e727-49cc-87f2-ca340979f988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:30:06:bb:c5:02:3f:ef:db:d2:56:43:2b:
                    59:c4:a2:6f:98:1f:b7:db:6e:16:8e:70:ed:15:b8:
                    65:7d:e5:44:c1:ed:48:a8:c7:d4:9e:b2:b4:37:44:
                    2e:92:bb:24:90:86:14:26:70:b1:12:b0:11:52:7e:
                    7b:08:de:57:2d:93:eb:90:07:69:96:f2:99:72:ea:
                    92:51:46:75:b1:7c:5c:2c:16:2a:8d:8f:fa:dc:49:
                    e3:80:b3:65:90:07:fd:5f:d6:ee:d0:c8:9d:86:6a:
                    af:99:63:91:69:8e:70:9b:77:de:bb:b4:1e:a7:61:
                    60:ec:83:a2:f8:4d:97:09:1c:5e:e1:ec:39:23:dd:
                    ae:9e:43:c7:8b:41:f3:45:a6:5f:72:f7:f9:0c:bb:
                    13:63:ea:be:88:bd:f4:b0:a7:93:31:08:ba:bf:b3:
                    f9:fd:b0:92:62:6c:7e:09:fe:80:46:38:f8:bc:d5:
                    95:d9:b7:84:1d:b9:a5:90:e7:10:85:72:11:af:da:
                    ba:ec:a9:d8:60:67:54:fc:07:d0:d4:0f:5b:d9:ff:
                    6a:13:6b:b9:a4:7f:5c:4f:8c:ef:5d:67:e2:b3:79:
                    e1:ed:d1:05:e5:f0:0c:fe:51:fc:3a:71:09:34:00:
                    15:fb:90:b9:fa:94:00:8b:82:4d:00:2a:82:76:f1:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:42:28:7A:EE:29:AF:5D:9A:1C:EB:46:0E:C0:C7:2D:07:DC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fce3282c-5633-3a29-b161-b72d0cde5cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.94.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:ff:be:a5:fb:43:05:ed:2b:ab:57:f5:94:d0:e7:47:1c:dc:
         2e:2e:e7:be:11:5d:0d:c0:e4:ba:8b:c1:72:a8:4f:5d:8d:a7:
         af:c4:ab:d8:48:99:a6:a6:6c:fb:37:34:a0:fa:7f:a9:91:63:
         d4:da:98:01:c5:4a:7c:10:3a:fe:e6:d8:56:5e:ee:18:3b:95:
         ab:1c:33:b2:61:10:a4:62:be:f9:77:37:91:d3:e3:00:72:58:
         b5:40:e8:f3:fd:f9:19:1e:23:72:ec:ab:01:98:f2:40:0a:b0:
         b4:d0:7d:6d:dc:9f:3f:1e:f4:db:63:9d:ef:38:b2:4f:bb:a5:
         7c:6d:10:af:73:a4:b9:94:12:9f:29:ce:9e:75:ed:55:1d:48:
         1d:c6:a1:c8:fa:de:83:3b:bd:76:58:cf:d2:94:b5:dd:0a:9c:
         1d:10:0e:08:a8:ea:e4:f1:c6:29:e1:b6:2a:b3:df:91:a4:ee:
         58:d6:6a:1a:33:54:dd:d8:ed:12:2d:ca:5d:19:ef:7f:b7:59:
         2d:a2:9f:6d:5a:d2:0d:c9:27:56:6c:24:9a:46:8c:03:64:2b:
         2d:e5:bc:74:62:6d:b9:e7:87:93:a2:c2:ef:6f:42:05:91:c7:
         ea:e7:35:69:33:24:04:33:ff:32:53:15:d3:17:d2:ed:01:bf:
         db:1c:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:34 2025 by rpki-client