Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f4873a4-5725-3307-80b4-8835c66518c3.roa
File:                     1f4873a4-5725-3307-80b4-8835c66518c3.roa (raw, json)
Hash identifier:          VKWu40M6OgTzQH4lqvVS/F3cN0nh1GGZtaAbG+uOStk=
Subject key identifier:   CB:B2:70:EB:76:AF:BD:4A:1D:D9:DF:73:DB:C1:EC:D3:5B:E5:42:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1614D22C33BAB389D3D2860
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f4873a4-5725-3307-80b4-8835c66518c3.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        66.215.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:4d:22:c3:3b:ab:38:9d:3d:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=83c55ca1-be95-44f8-9a03-cc1900095dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:a5:99:9e:20:42:ad:93:f1:ce:79:37:92:
                    6d:ea:1d:1e:41:8f:cb:cc:90:87:4b:d5:3c:39:7e:
                    58:7e:68:1a:8f:04:8d:3f:32:e9:9d:cf:b4:c6:59:
                    2a:2c:40:cd:8e:f7:64:ac:74:bf:8b:a1:1e:85:76:
                    1d:ed:e4:09:b4:cc:af:db:70:4c:87:ed:fa:1a:94:
                    aa:ac:a7:3f:2d:e4:5f:c6:9a:de:12:f5:59:27:14:
                    cf:62:03:ef:06:34:3d:ad:83:ce:5d:6a:f9:16:66:
                    42:ea:ec:75:e6:ca:b6:1f:68:a9:ac:81:10:e1:53:
                    46:c0:85:a1:8b:ba:1c:a1:91:6d:d2:5c:81:68:d2:
                    bc:c9:fb:3a:78:04:ba:1d:32:4e:89:15:20:8a:94:
                    6c:f3:d6:e7:a0:a0:44:49:24:6a:71:9e:9c:ba:2c:
                    67:b9:94:4b:4e:9c:56:cd:2f:15:c1:b1:65:4f:ce:
                    f6:4f:3d:30:73:87:f0:b6:d6:a1:56:fa:8b:d1:46:
                    d3:1e:4f:40:5e:fa:dd:36:ac:d6:cc:8a:87:65:44:
                    b6:4b:02:9d:f4:36:21:f1:34:19:44:ce:06:02:b5:
                    d7:44:95:64:85:34:88:ab:80:84:35:bf:76:59:5a:
                    19:50:2d:68:13:51:43:92:ed:e9:43:da:88:1e:0f:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:70:EB:76:AF:BD:4A:1D:D9:DF:73:DB:C1:EC:D3:5B:E5:42:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1f4873a4-5725-3307-80b4-8835c66518c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.215.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b7:7e:0f:ee:b2:7e:1b:83:0f:9b:17:fb:73:76:58:ef:1b:
         9f:28:e8:70:a3:da:78:01:a9:c6:58:2b:ba:30:dd:71:5a:32:
         23:fe:ae:03:22:f9:3d:70:6b:d9:ee:db:6f:35:e1:a6:54:8b:
         0c:8f:6b:ca:29:bf:68:85:1a:5d:bd:00:5e:73:2e:f8:60:38:
         c4:1e:a4:8a:2d:d7:5c:89:d1:9d:9b:81:b6:a1:ac:73:e7:40:
         2f:68:70:45:08:41:79:cc:0e:2c:ff:58:1b:65:da:4b:a0:7a:
         ba:06:9d:e0:d7:17:35:b5:3f:ba:fa:cb:c2:ed:11:39:1b:41:
         c2:69:3f:01:4f:fb:bf:b1:5c:89:cf:c3:da:09:8b:6f:87:e7:
         83:1a:d3:e4:c5:aa:50:50:fd:d7:a3:eb:e8:43:da:41:c5:79:
         0b:a4:24:9c:7e:ed:5a:5f:75:f9:e1:a5:72:65:24:51:b6:eb:
         ec:b4:53:e9:8d:3e:14:a5:14:d2:11:9d:b8:aa:57:ef:fd:24:
         af:39:ff:0e:22:42:b5:0b:53:11:43:72:9f:cc:95:3a:8f:f5:
         11:bc:76:cf:4b:ce:5a:ac:0d:01:53:ed:1b:4a:04:d3:e8:5c:
         d1:3b:28:2b:3c:b8:4c:92:9c:07:28:1e:d6:c2:d3:a6:9e:75:
         2a:02:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:32 2025 by rpki-client