Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/149f258a-d0f2-37f1-ae99-cf5ff2aac12d.roa
File:                     149f258a-d0f2-37f1-ae99-cf5ff2aac12d.roa (raw, json)
Hash identifier:          +B9B+TbNC4qu0OrLvMIOtFpEpYuDydmCvK3v9paE1QU=
Subject key identifier:   13:D6:87:01:83:98:9D:07:4D:B9:CC:49:64:01:09:14:3C:9A:13:90
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16208D95A52679C3AF5D080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/149f258a-d0f2-37f1-ae99-cf5ff2aac12d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.33.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:08:d9:5a:52:67:9c:3a:f5:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7c485675-a5d8-41e6-8187-d591a704fb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:ea:6e:a0:d6:72:c3:70:b6:3b:3f:12:1f:
                    16:05:c6:aa:7e:56:0b:5c:cf:ee:ab:7c:fc:a4:24:
                    fb:e6:66:93:75:4a:56:6a:0d:a8:f0:6a:e8:89:aa:
                    db:f8:23:a8:f2:69:22:ac:8d:08:aa:2c:98:7e:82:
                    9d:7e:b7:ae:b3:65:ac:8d:a7:e5:ee:08:80:c7:42:
                    f4:cc:1c:3d:fa:2a:e6:73:4e:31:29:20:69:db:e9:
                    b7:ae:bc:13:54:f4:c6:0e:71:b4:21:f7:d0:2a:8a:
                    1e:12:ad:82:e8:40:e0:11:3a:3e:61:42:1d:ba:46:
                    91:83:08:54:23:d6:1f:be:57:e0:df:24:12:1e:e1:
                    5c:26:1d:d1:9d:7c:a7:09:d3:92:1a:44:a2:4e:5e:
                    24:08:46:43:22:72:5a:34:e9:5c:51:2d:5b:d4:6c:
                    ed:c5:cc:fd:bd:0f:61:f2:ae:aa:e8:53:43:48:1b:
                    53:d9:50:89:ad:ab:b1:28:b8:aa:d5:ca:f8:bd:8a:
                    cc:de:d3:8b:95:d3:99:75:29:a1:a9:8f:86:8a:cf:
                    ef:80:ef:82:d3:5f:44:9e:86:97:28:40:56:4a:99:
                    83:31:31:c5:76:a3:9a:da:77:3c:55:f9:5b:ee:b7:
                    af:58:7f:52:c6:13:c7:23:a0:2a:57:47:b5:d8:e8:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:87:01:83:98:9D:07:4D:B9:CC:49:64:01:09:14:3C:9A:13:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/149f258a-d0f2-37f1-ae99-cf5ff2aac12d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.33.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:05:79:4c:3b:be:59:6d:6d:af:57:38:89:dc:55:bd:b1:
         d1:ef:78:b7:99:c6:f7:15:46:77:3c:45:07:69:37:2c:66:c6:
         57:b2:87:15:0d:3f:75:98:e4:c7:13:52:eb:5f:ec:cd:af:1a:
         6a:41:ee:1c:05:e7:d8:d9:81:c1:34:0a:ab:8f:80:c4:a1:d3:
         06:1a:8e:f6:86:a4:b9:cb:f2:83:0e:ec:1e:f1:9c:a7:51:78:
         d4:cd:aa:40:9d:ec:54:61:46:83:4a:e6:8b:d9:32:04:28:5a:
         d5:36:82:b6:69:a2:42:e1:e1:f6:d1:8c:24:47:8c:e9:f3:e7:
         b6:d0:6b:e3:84:1a:15:5c:19:51:14:78:f4:37:7a:47:e0:11:
         58:b5:a2:30:a5:8b:4e:d4:6d:1f:81:e1:3d:0c:75:19:8b:a6:
         af:11:81:44:bc:d3:09:ce:fb:d3:e9:b5:7b:fa:9e:fa:7f:bd:
         83:ba:3f:20:74:1c:e4:b1:a5:c4:fe:85:77:f4:0f:d5:56:8b:
         84:8c:2f:6b:4d:a7:6d:59:09:0c:e7:ae:fa:a6:13:c8:28:ff:
         cd:3e:e8:f6:0d:3f:6d:56:cd:17:25:47:34:e5:55:d0:d2:25:
         2b:a8:b6:40:74:5d:6d:3f:0c:9e:94:28:57:10:d5:ff:a2:b4:
         a5:83:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:19 2025 by rpki-client