Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c97d55b-ad10-3483-b356-6c5f038026d0.roa
File:                     2c97d55b-ad10-3483-b356-6c5f038026d0.roa (raw, json)
Hash identifier:          RVLbmLGSJT1j3PUsaZHJtPY/FVy8R//h0ECbR65dCO4=
Subject key identifier:   26:44:D9:AF:DC:E8:EB:3E:91:E4:72:01:3A:6C:DE:EE:32:C2:70:01
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA162094765DA5890A58BB500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c97d55b-ad10-3483-b356-6c5f038026d0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.38.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:09:47:65:da:58:90:a5:8b:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c2216181-75a1-427a-94c9-aa4b1516027c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:20:e4:3a:d2:91:ec:44:90:46:98:dd:91:
                    73:0d:cf:9e:36:0b:09:49:93:77:68:36:1f:2b:59:
                    18:72:44:cb:6e:c8:dd:fe:dc:34:b8:d3:0c:47:33:
                    a7:66:c6:31:d8:51:ba:c3:ba:32:c8:68:a7:b0:96:
                    87:e1:89:aa:85:27:7b:ca:32:da:48:b9:92:b4:9c:
                    90:a9:d7:35:62:d1:3b:76:36:28:73:7d:71:83:37:
                    f7:72:73:e1:db:b1:05:94:47:8b:e9:e2:47:95:1d:
                    fc:ac:49:e1:9d:35:3b:8d:a3:57:95:04:86:ba:89:
                    5e:13:92:ae:fe:e2:5e:37:8d:a6:be:87:fe:15:c9:
                    8c:e0:ab:a7:c0:2d:63:73:68:f7:bf:84:58:de:7a:
                    6d:b2:97:06:c0:7c:7d:72:2c:e7:7d:53:a6:ac:dd:
                    00:91:f6:d9:7f:11:d5:e2:74:0f:d1:c9:81:dd:e6:
                    61:0e:d6:b2:b8:ec:4b:a5:2f:30:3e:3b:26:8f:d6:
                    5a:ca:bf:04:85:dd:32:0d:1a:04:fd:af:58:de:69:
                    9a:5d:23:26:e8:03:67:88:1c:04:0e:3d:c8:26:67:
                    2d:27:66:27:ab:4d:e5:a5:18:a7:e6:24:71:e3:39:
                    63:15:7c:de:1a:93:1b:ca:74:eb:f7:c8:31:c7:40:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:44:D9:AF:DC:E8:EB:3E:91:E4:72:01:3A:6C:DE:EE:32:C2:70:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c97d55b-ad10-3483-b356-6c5f038026d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.38.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:17:e0:01:7e:f7:e6:dd:6b:d9:3b:1c:ec:9e:77:0a:b6:37:
         4a:69:46:2f:81:90:c3:91:e6:6f:3e:76:70:54:63:82:b8:f4:
         6f:0d:d3:6b:0a:d2:fd:e2:dc:a1:a4:d3:8b:e1:e3:2d:47:6f:
         48:70:d0:6e:42:50:bd:73:a1:91:34:c5:e5:4c:03:56:e4:f7:
         fa:5c:ef:3f:f5:22:c0:fe:58:d1:a7:f4:b7:7d:3f:8d:24:d3:
         20:5c:e9:1c:d6:ca:c4:16:83:91:30:86:b6:08:12:7c:e1:3d:
         98:11:e2:c3:88:db:a0:10:62:4d:0e:95:d7:b4:ff:c2:16:a2:
         89:bb:68:95:de:3e:2c:dc:39:4d:3f:12:2b:fc:d2:63:8d:a3:
         ad:4c:c3:dd:e8:63:aa:4e:e2:2e:87:94:62:60:e2:8f:8f:f7:
         1d:b7:55:2c:5d:dd:38:6c:ee:99:50:dc:5e:b9:30:18:44:5f:
         ad:93:cb:3c:ed:7b:39:b1:d9:4d:56:a7:14:0a:2e:31:fb:74:
         3e:9d:68:1a:f9:41:bf:cd:1a:9a:8d:a4:fc:f3:a2:42:8f:74:
         ed:3b:fc:1d:ed:6f:13:b8:de:d7:31:8f:e7:b0:b2:e7:53:2f:
         45:61:b6:3a:62:ba:ad:f6:3e:af:57:84:3f:f8:cf:19:c3:b6:
         98:03:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:50 2025 by rpki-client