Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fd69ae30-9c1b-37c3-ae42-77b4e7931bac.roa
File:                     fd69ae30-9c1b-37c3-ae42-77b4e7931bac.roa (raw, json)
Hash identifier:          luCp4i2SFTqQYMJmfyaUkYqgdMt7pNRLO2ymXtx/h1I=
Subject key identifier:   96:17:5C:4D:E3:81:20:4E:54:F0:70:5F:B7:BB:F6:A9:AE:E1:3E:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DDDBBF36CCAAB12D58600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fd69ae30-9c1b-37c3-ae42-77b4e7931bac.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.87.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:dd:bb:f3:6c:ca:ab:12:d5:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0720db0d-b533-40d0-bb99-029d3eabf2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:8b:82:ae:4d:76:3d:d9:3f:49:ed:2c:9c:
                    3f:4c:1c:9e:e0:6c:6c:5f:4d:03:41:d1:bc:6f:8e:
                    ca:33:6b:7a:ea:42:6f:e6:86:65:66:a6:89:65:af:
                    2a:8d:4b:b8:01:2a:f3:62:a6:d1:7d:65:19:39:49:
                    f8:5a:bd:26:59:71:3a:f5:c2:71:83:b8:a1:8c:c8:
                    f5:64:f2:c8:7c:64:11:cd:d8:2f:9a:c1:b0:b2:5e:
                    ce:07:2b:3d:e6:0a:c6:bb:4d:4b:45:4a:9d:89:04:
                    d9:3d:21:a8:9f:75:6f:42:ee:b8:a6:9c:00:66:27:
                    b5:d6:6a:8d:06:2c:eb:e0:93:1e:cc:d3:70:ea:ab:
                    ff:95:bb:fc:d5:8c:57:be:fa:e9:78:e5:da:40:99:
                    9d:b6:ef:36:44:dc:32:a5:db:9a:ef:34:ec:dc:3d:
                    1d:2c:45:10:a0:b5:db:89:13:fb:45:fd:c8:97:33:
                    38:7c:91:6b:9f:ed:82:7e:d8:8b:0c:ec:a9:75:46:
                    7b:44:d7:ac:0d:14:ce:97:19:09:b2:ef:fc:da:bc:
                    c9:17:c6:70:3b:57:ab:17:92:82:c3:e3:c8:0a:93:
                    ee:c3:48:f5:94:12:43:df:d7:95:e0:9e:26:df:c5:
                    9e:83:6b:96:73:78:25:9d:53:e8:ba:cd:58:bb:21:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:5C:4D:E3:81:20:4E:54:F0:70:5F:B7:BB:F6:A9:AE:E1:3E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fd69ae30-9c1b-37c3-ae42-77b4e7931bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:7b:64:c1:0a:b5:3f:37:61:aa:fc:f2:d9:50:c7:08:c9:
         69:1d:f7:54:11:32:ab:10:a4:3a:7d:c2:b3:89:71:12:08:a8:
         c5:0d:d9:fb:bc:04:b3:72:22:6e:3f:35:73:b6:0f:36:2d:49:
         2d:68:fe:b9:b8:ec:6f:5b:3f:c1:a8:35:fd:b4:6e:fd:9b:2b:
         c8:9b:ff:55:b8:b4:a0:1c:ee:b8:e9:fa:28:99:3f:70:79:79:
         f2:5c:47:ac:2c:0f:81:f9:b6:3f:bb:d3:dd:89:aa:cf:d3:93:
         db:05:e9:16:9d:10:b7:b4:a4:63:6f:79:3b:58:a3:ab:df:9f:
         d3:c8:a6:26:51:c9:92:0f:d6:24:c5:5e:c1:f4:2e:93:04:b6:
         03:c6:1f:66:39:7e:cd:10:80:91:4c:54:34:e4:1f:99:e7:01:
         47:4e:3d:03:50:35:98:82:4d:0f:3e:ab:a7:d0:50:78:c5:53:
         e0:b2:96:39:d1:12:0f:fe:ce:0d:bd:3b:72:67:f6:5f:e1:a0:
         09:5d:31:26:d4:cd:10:a8:f8:b4:c7:37:29:64:76:fe:93:1f:
         2d:f4:de:d6:3a:3b:89:d7:15:2f:61:76:6d:b6:be:d9:0f:df:
         11:f9:3c:82:e5:a9:7e:b7:04:91:0d:88:bb:1e:3c:4e:18:24:
         a3:11:64:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHd2782zKqxLVhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MDcyMGRiMGQtYjUzMy00MGQwLWJiOTktMDI5ZDNlYWJmMmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgweLgq5Ndj3ZP0ntLJw/TBye4GxsX00DQdG8
b47KM2t66kJv5oZlZqaJZa8qjUu4ASrzYqbRfWUZOUn4Wr0mWXE69cJxg7ihjMj1
ZPLIfGQRzdgvmsGwsl7OBys95grGu01LRUqdiQTZPSGon3VvQu64ppwAZie11mqN
Bizr4JMezNNw6qv/lbv81YxXvvrpeOXaQJmdtu82RNwypdua7zTs3D0dLEUQoLXb
iRP7Rf3IlzM4fJFrn+2CftiLDOypdUZ7RNesDRTOlxkJsu/82rzJF8ZwO1erF5KC
w+PICpPuw0j1lBJD39eV4J4m38Weg2uWc3glnVPous1YuyEZAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYXXE3jgSBOVPBwX7e79qmu4T5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZmQ2OWFlMzAtOWMxYi0z
N2MzLWFlNDItNzdiNGU3OTMxYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1dwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKq9e2TBCrU/N2Gq/PLZUMcIyWkd91QRMqsQpDp9wrOJcRIIqMUN2fu8
BLNyIm4/NXO2DzYtSS1o/rm47G9bP8GoNf20bv2bK8ib/1W4tKAc7rjp+iiZP3B5
efJcR6wsD4H5tj+7092Jqs/Tk9sF6RadELe0pGNveTtYo6vfn9PIpiZRyZIP1iTF
XsH0LpMEtgPGH2Y5fs0QgJFMVDTkH5nnAUdOPQNQNZiCTQ8+q6fQUHjFU+CyljnR
Eg/+zg29O3Jn9l/hoAldMSbUzRCo+LTHNylkdv6THy303tY6O4nXFS9hdm22vtkP
3xH5PILlqX63BJENiLsePE4YJKMRZLw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:46 2025 by rpki-client