Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa
File:                     162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa (raw, json)
Hash identifier:          tON1otc7IaBYsepOlIRlmkwRiD3PYNhN9jineREXm/A=
Subject key identifier:   37:FE:B5:DD:65:FE:38:D0:F2:31:FC:D4:86:18:15:76:6A:E6:9E:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16162671A776E553ABAC600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.36.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:62:67:1a:77:6e:55:3a:ba:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=333bed6f-ac80-4d4a-b1a0-6b28d89e3e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:97:da:fe:75:83:bb:88:37:0b:37:e7:e7:
                    a6:0b:41:a8:30:c3:eb:43:29:93:89:e4:48:f4:d8:
                    60:c7:d1:2d:10:8d:e8:dc:78:d6:10:ce:31:64:07:
                    b0:1b:24:f1:58:53:1c:0f:ec:cb:ad:66:76:59:44:
                    78:49:53:3a:9c:e6:ed:23:f0:16:38:d1:0f:86:7d:
                    a1:fd:8a:36:36:3d:ca:68:a0:f0:19:e8:58:9d:e9:
                    af:2e:73:59:c1:f6:1d:09:44:f0:20:ae:63:e5:01:
                    ed:ef:9a:ff:23:41:62:3b:18:a8:14:3c:31:8d:b6:
                    0a:49:07:d5:27:40:95:aa:63:1a:b4:54:15:d5:27:
                    ce:15:3c:a9:81:72:c0:c7:58:be:24:aa:56:76:a7:
                    82:75:da:ba:49:44:e6:dc:6d:3f:02:22:e6:6c:db:
                    94:5c:23:52:36:78:13:25:84:5f:99:23:1d:07:07:
                    2a:70:25:d9:af:0a:49:6b:4f:cd:53:e5:e5:df:dc:
                    73:58:0a:78:38:da:05:f8:a2:da:aa:42:16:d9:63:
                    78:21:c7:5a:a0:ef:62:9c:5b:4e:ea:88:e0:32:7a:
                    09:51:2d:1a:5a:de:86:84:e6:cb:1c:1f:3c:23:f3:
                    09:82:26:71:ef:e6:ec:e0:b4:26:a6:b6:ac:3f:bd:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FE:B5:DD:65:FE:38:D0:F2:31:FC:D4:86:18:15:76:6A:E6:9E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/162b5ae4-efb9-34c6-9a6d-88a2d872079f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:16:99:e1:64:78:d1:2d:70:3a:4d:eb:d3:c7:bb:af:da:
         dd:84:ca:34:74:4e:12:fb:64:9b:c2:ac:ba:33:c8:35:29:f2:
         d6:52:ff:d1:ce:20:0e:a1:91:2b:45:4c:18:2c:cf:b6:e3:8a:
         50:cd:9d:d3:26:7c:d4:32:bf:c7:b1:bc:35:19:5c:a4:14:7e:
         6e:15:80:a2:d5:b5:43:22:0a:99:49:6c:4a:eb:48:86:9e:1a:
         d0:f4:36:a6:37:e8:24:fb:2b:86:15:ca:6a:01:7c:2f:2e:99:
         5f:8b:e3:1b:df:be:3a:5c:f9:67:29:96:c1:b2:e1:84:b6:c9:
         ed:09:b2:27:42:70:a1:49:04:b9:1a:3e:ed:13:3a:fc:ad:80:
         59:b7:5c:46:19:b4:28:b2:c6:0b:b3:e2:00:34:8b:21:76:a6:
         21:50:fe:85:c5:4e:09:f9:00:7c:5f:09:48:66:90:17:80:72:
         cc:2f:98:7e:7e:f5:22:10:c6:8e:2b:1f:69:0c:4c:2e:1c:71:
         8c:72:d6:98:05:4b:e6:1a:77:a0:e1:0d:5f:fd:65:97:9e:03:
         e5:ba:06:65:54:d4:22:5f:1d:e3:bb:f9:c8:5d:4c:26:13:6c:
         8d:21:be:32:9c:2c:39:6a:3d:ad:14:8a:7b:83:b4:0e:52:d7:
         a9:e7:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:12 2025 by rpki-client