Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa
File:                     fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa (raw, json)
Hash identifier:          ehjvcrofiHaYfNShnC+S5+5Egk4O1xXJfIIOfKDjMCk=
Subject key identifier:   C8:16:0F:96:88:73:5C:38:40:C8:40:DB:EC:0B:2B:72:A6:04:90:9B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DD94E6C9EDD9EB9D8C500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.84.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:d9:4e:6c:9e:dd:9e:b9:d8:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c601400f-94c0-4672-a79e-5f866bf3f2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:f7:26:38:65:3e:77:9c:a8:e0:63:4e:55:
                    ad:73:ed:f4:ef:d9:6c:44:79:27:81:d3:0a:a2:5e:
                    d1:64:3b:b8:f8:20:b4:38:07:c1:09:a9:5a:83:59:
                    e5:51:6e:57:fe:e6:f7:09:e6:63:51:ac:bf:43:a7:
                    05:8d:04:7f:f8:01:40:25:f9:07:ed:d6:9f:46:96:
                    dc:37:a7:90:29:e3:a9:4d:c8:b7:8c:de:1b:46:0a:
                    00:d7:a6:64:c5:77:94:cf:91:3c:41:ba:c8:99:99:
                    d7:d4:ab:fe:b3:10:9a:78:4a:9c:eb:03:10:11:59:
                    10:28:c7:a2:dd:a3:5d:a6:ce:b2:52:c3:76:b9:ce:
                    14:41:3f:df:11:ae:27:a9:c7:23:4e:5c:7a:e5:44:
                    07:f8:5d:a6:5c:7a:6b:96:92:09:bd:a2:66:e8:59:
                    65:d2:59:5c:94:c5:7b:13:35:cb:eb:d6:b6:0d:30:
                    22:24:18:5f:89:50:6b:1b:78:00:6b:3a:ce:2b:4d:
                    12:90:57:22:12:1e:01:f0:e8:4e:19:e5:0c:02:67:
                    cd:ee:5e:3a:49:f8:5f:45:65:43:b8:dd:e9:0c:9c:
                    a4:a7:fc:68:78:fc:92:b3:c6:dc:d5:e9:33:bf:c0:
                    7f:74:00:ae:da:4b:c7:8b:49:f3:11:1a:03:a8:d5:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:0F:96:88:73:5C:38:40:C8:40:DB:EC:0B:2B:72:A6:04:90:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe8b070e-8fb1-351e-947a-6e8f9dde6a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.84.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:03:fb:c7:ab:8b:4b:c8:72:9d:90:59:d0:03:3a:56:ae:e9:
         79:37:d5:5f:24:4f:6e:2c:70:7e:c0:d9:a7:ae:21:bd:65:01:
         11:e8:cd:35:aa:ca:04:75:10:63:02:d8:69:80:b8:c8:81:36:
         a7:33:a8:ba:8a:d5:2e:ef:cf:c2:85:c6:e6:70:8e:6c:1b:79:
         6c:4b:82:96:1f:68:d4:48:c3:55:62:14:dd:65:63:53:cc:5b:
         96:2d:e4:7b:7a:80:c4:9e:57:f7:20:2b:02:ea:dc:fe:f0:6e:
         1f:dc:bd:e4:38:b9:e9:1e:e5:b9:e1:61:a8:7c:7c:af:c3:65:
         c2:e5:58:f3:fe:2e:39:70:6c:68:18:2c:a2:41:df:e9:a0:f1:
         11:ef:c0:31:78:ce:fb:3d:4c:4b:5d:e8:8a:3f:50:67:97:24:
         44:b3:7f:9f:bf:16:36:3b:b5:bb:ae:fb:ff:52:b3:ca:52:ee:
         5e:99:9c:a8:cf:e0:fc:00:2a:44:d0:43:03:c7:43:31:0f:bb:
         a4:06:34:ac:fc:9a:01:6e:ad:30:04:84:3b:86:2d:22:49:dc:
         a7:87:a3:23:1e:43:49:8d:98:70:0a:fd:65:3c:51:52:18:d2:
         70:dd:a4:dc:5c:45:45:08:9d:aa:5a:61:20:d6:98:f5:ed:15:
         48:cb:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:18 2025 by rpki-client