Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25ccdeb8-d8f7-3fcf-b07c-20b20c652321.roa
File:                     25ccdeb8-d8f7-3fcf-b07c-20b20c652321.roa (raw, json)
Hash identifier:          bD5Va3RwBbNm8nbESszLmscyWl8zhDzrXQbyCkxjf9s=
Subject key identifier:   94:F6:73:0F:F0:7A:67:06:64:2B:54:C6:C9:87:2B:45:62:EE:58:9C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1620A9D7003A61D46AAAC80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25ccdeb8-d8f7-3fcf-b07c-20b20c652321.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        75.133.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:0a:9d:70:03:a6:1d:46:aa:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3e1b8275-f67f-42ad-aa2f-08ecc591780a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:62:c4:5e:7f:f4:f6:1c:c9:51:77:b0:2b:
                    16:07:4c:e5:ad:ea:95:aa:08:56:90:89:e4:ba:09:
                    29:68:ce:c7:9b:79:72:12:83:c4:c1:54:b0:e5:7d:
                    df:35:a7:4c:3d:be:3c:9e:bc:9b:c9:09:03:bb:91:
                    f7:06:b9:98:a2:d0:f8:01:34:47:12:7e:fc:8f:1b:
                    1c:dc:29:08:11:ae:d4:d8:86:b6:47:2a:66:f9:35:
                    49:f6:09:1a:2e:22:7e:9e:da:b4:63:6c:43:e7:57:
                    15:fe:4c:8e:e3:59:30:e8:76:88:6e:ea:19:6d:d2:
                    2c:7a:14:29:3a:3e:83:79:80:75:d0:44:c3:ad:f5:
                    96:d8:0d:1a:79:c0:65:3f:5b:89:ba:8f:67:82:b9:
                    b9:53:84:88:3e:36:27:d3:99:5b:01:da:e1:49:e5:
                    bc:4e:22:d6:d6:69:7f:c2:13:28:16:42:05:7e:03:
                    aa:59:2b:94:dc:38:df:3a:f5:b0:93:3e:a0:fa:c0:
                    99:fb:74:26:d1:bc:0a:02:bc:b5:37:d5:79:49:5d:
                    10:84:a9:1c:9c:ba:86:0c:27:e1:94:5b:a9:68:c2:
                    ed:dc:03:78:fa:8b:fc:36:99:54:d6:89:c7:a9:9a:
                    19:e4:d8:db:db:9b:56:9e:0d:1a:1c:cb:58:be:6f:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:73:0F:F0:7A:67:06:64:2B:54:C6:C9:87:2B:45:62:EE:58:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/25ccdeb8-d8f7-3fcf-b07c-20b20c652321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.133.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:85:c5:77:ed:29:61:e5:9e:3f:17:24:4c:43:01:59:03:
         3e:37:1a:74:0c:be:c7:67:93:24:9c:de:e1:7c:94:14:96:ac:
         82:7e:a0:4f:f9:3e:b9:c7:cd:c4:29:80:c4:d2:75:63:6f:65:
         36:f2:81:26:0b:bc:77:e9:19:a9:c9:05:6a:ab:65:d7:17:a0:
         e0:06:a4:f6:7d:b0:e8:15:0f:4a:a0:ff:a7:17:84:c5:45:76:
         49:e8:13:7a:2c:51:8b:d6:c8:f1:b8:60:a9:03:c8:0f:45:50:
         ae:e0:5c:3b:a2:af:dd:31:77:a4:7f:6e:e0:7a:95:7d:17:06:
         e8:ef:78:43:a6:8c:c2:f8:3a:ef:dc:50:37:8d:c8:98:12:8e:
         af:8d:d4:0d:ed:be:12:ae:53:a7:4e:6d:63:64:17:58:da:32:
         5c:61:6f:c9:a6:68:d0:9f:ae:57:a5:01:44:63:92:09:e0:03:
         9f:27:d6:39:9b:eb:9f:24:08:d4:f9:ff:ba:ff:94:b2:6d:c8:
         7f:d1:50:09:ff:19:97:37:38:d3:8f:f3:50:f2:ac:86:ac:64:
         dd:be:2b:b4:5c:18:19:5c:b7:ac:d8:6a:b2:26:25:bc:29:a3:
         45:93:33:7e:1a:e3:25:37:07:75:4e:7c:13:f5:4b:81:e5:4d:
         49:d5:47:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYgqdcAOmHUaqrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
M2UxYjgyNzUtZjY3Zi00MmFkLWFhMmYtMDhlY2M1OTE3ODBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqylixF5/9PYcyVF3sCsWB0zlreqVqghWkInk
ugkpaM7Hm3lyEoPEwVSw5X3fNadMPb48nrybyQkDu5H3BrmYotD4ATRHEn78jxsc
3CkIEa7U2Ia2Rypm+TVJ9gkaLiJ+ntq0Y2xD51cV/kyO41kw6HaIbuoZbdIsehQp
Oj6DeYB10ETDrfWW2A0aecBlP1uJuo9ngrm5U4SIPjYn05lbAdrhSeW8TiLW1ml/
whMoFkIFfgOqWSuU3DjfOvWwkz6g+sCZ+3Qm0bwKAry1N9V5SV0QhKkcnLqGDCfh
lFupaMLt3AN4+ov8NplU1onHqZoZ5Njb25tWng0aHMtYvm8OIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJT2cw/wemcGZCtUxsmHK0Vi7licMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjVjY2RlYjgtZDhmNy0z
ZmNmLWIwN2MtMjBiMjBjNjUyMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS4XgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDHhcV37Slh5Z4/FyRMQwFZAz43GnQMvsdnkySc3uF8lBSWrIJ+oE/5
PrnHzcQpgMTSdWNvZTbygSYLvHfpGanJBWqrZdcXoOAGpPZ9sOgVD0qg/6cXhMVF
dknoE3osUYvWyPG4YKkDyA9FUK7gXDuir90xd6R/buB6lX0XBujveEOmjML4Ou/c
UDeNyJgSjq+N1A3tvhKuU6dObWNkF1jaMlxhb8mmaNCfrlelAURjkgngA58n1jmb
658kCNT5/7r/lLJtyH/RUAn/GZc3ONOP81DyrIasZN2+K7RcGBlct6zYarImJbwp
o0WTM34a4yU3B3VOfBP1S4HlTUnVR98=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:17 2025 by rpki-client