Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36b953b1-9a1e-3860-b7b5-16628794a909.roa
File:                     36b953b1-9a1e-3860-b7b5-16628794a909.roa (raw, json)
Hash identifier:          iAZ8MsdJ2joqBn9S58d5diGgrAxKRUpOixY2FFX7kRw=
Subject key identifier:   8A:66:C2:61:C7:9F:51:A0:DC:F7:C5:53:9D:1C:6F:DD:FB:A7:63:26
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA162126EE0908E2A130CE800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36b953b1-9a1e-3860-b7b5-16628794a909.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        128.92.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:12:6e:e0:90:8e:2a:13:0c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c71f43a2-9092-4f92-b15f-1260ef9e82d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:5d:a6:e8:16:a3:fa:ee:84:dd:9c:d4:a6:
                    df:91:9b:db:4e:e9:be:e7:58:f3:f0:1b:59:3e:38:
                    8a:62:b0:fd:a3:dd:a2:f4:f5:ab:0f:4b:b2:7a:ed:
                    76:fb:c2:3f:f6:b4:2d:cf:ae:0b:c0:a2:97:82:24:
                    28:70:67:f2:50:9c:8e:e2:99:bd:9a:06:eb:f9:50:
                    a8:bb:f8:a5:3b:7c:9e:9c:c5:7a:e7:33:95:68:f5:
                    73:f5:e4:29:67:dc:af:0c:df:3d:07:a5:8b:e6:77:
                    0a:bc:db:7c:bc:60:84:57:94:ab:4a:53:a8:fb:29:
                    23:27:7b:13:cb:33:5c:05:d1:e5:a7:a4:1b:93:02:
                    a1:e6:4b:a1:f4:a3:3f:d4:27:dd:d1:40:2f:46:8c:
                    c3:52:72:67:91:02:8d:43:6c:7e:8c:21:77:b9:e3:
                    6b:48:54:51:5c:80:81:58:93:48:11:ed:08:c8:7c:
                    9f:6f:02:5a:64:40:37:7f:d4:9b:94:04:ce:c9:d4:
                    d6:d4:d9:35:9c:3a:c1:20:37:2b:4f:36:8a:12:50:
                    b8:fd:aa:28:ed:64:6c:93:a9:71:a4:77:a5:66:46:
                    6c:28:83:8b:78:3f:d3:87:bb:32:20:d2:a3:f3:63:
                    f2:1f:a4:cb:c8:bf:22:31:da:2f:d7:e5:c2:85:e4:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:C2:61:C7:9F:51:A0:DC:F7:C5:53:9D:1C:6F:DD:FB:A7:63:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/36b953b1-9a1e-3860-b7b5-16628794a909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:16:ff:bd:c3:d8:8a:34:ff:b9:4e:f6:54:89:81:03:b1:
         8a:0b:2d:d9:3b:db:86:58:0a:48:a5:c6:4e:84:df:7c:e8:1a:
         4d:cb:5c:a5:c0:b3:47:2f:8d:b0:76:2c:16:7f:07:69:89:8f:
         cb:ce:e7:6b:2b:13:db:d2:12:c0:90:fc:2d:f7:5b:85:f1:a1:
         f7:84:ae:8f:c1:66:a2:49:29:b5:0f:e1:39:38:85:64:99:2d:
         8e:e5:18:69:2c:bb:ba:31:99:d0:79:79:33:fe:11:29:24:63:
         0e:f7:c7:40:95:76:84:12:fe:f9:0b:05:73:94:18:1b:6c:ea:
         d0:35:c0:e9:da:c8:ae:ad:db:72:52:5f:95:dc:9d:b5:ab:b0:
         ac:ad:56:ee:87:71:e9:fa:c5:17:78:a2:d4:8f:c3:c7:63:cd:
         bc:d4:c7:d1:8f:9c:c0:76:1e:5a:f0:82:ce:cf:e9:84:28:7d:
         f1:e2:6b:2b:79:b2:11:18:a3:95:66:80:a8:83:32:85:aa:16:
         62:6e:15:32:cb:8b:ac:2e:bd:16:0d:5f:7f:f0:37:1d:a1:e3:
         40:a2:fa:af:85:6e:72:f4:17:38:41:eb:36:70:c1:59:26:0c:
         72:ca:95:d0:c5:6d:e9:b1:a7:84:35:d0:5a:bf:32:f6:89:91:
         fe:64:bb:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYhJu4JCOKhMM6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YzcxZjQzYTItOTA5Mi00ZjkyLWIxNWYtMTI2MGVmOWU4MmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA9dpugWo/ruhN2c1KbfkZvbTum+51jz8BtZ
PjiKYrD9o92i9PWrD0uyeu12+8I/9rQtz64LwKKXgiQocGfyUJyO4pm9mgbr+VCo
u/ilO3yenMV65zOVaPVz9eQpZ9yvDN89B6WL5ncKvNt8vGCEV5SrSlOo+ykjJ3sT
yzNcBdHlp6QbkwKh5kuh9KM/1Cfd0UAvRozDUnJnkQKNQ2x+jCF3ueNrSFRRXICB
WJNIEe0IyHyfbwJaZEA3f9SblATOydTW1Nk1nDrBIDcrTzaKElC4/aoo7WRsk6lx
pHelZkZsKIOLeD/Th7syINKj82PyH6TLyL8iMdov1+XCheT/TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpmwmHHn1Gg3PfFU50cb937p2MmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzZiOTUzYjEtOWExZS0z
ODYwLWI3YjUtMTY2Mjg3OTRhOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgFw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAKFv+9w9iKNP+5TvZUiYEDsYoLLdk724ZYCkilxk6E33zoGk3LXKXA
s0cvjbB2LBZ/B2mJj8vO52srE9vSEsCQ/C33W4XxofeEro/BZqJJKbUP4Tk4hWSZ
LY7lGGksu7oxmdB5eTP+ESkkYw73x0CVdoQS/vkLBXOUGBts6tA1wOnayK6t23JS
X5XcnbWrsKytVu6Hcen6xRd4otSPw8djzbzUx9GPnMB2Hlrwgs7P6YQoffHiayt5
shEYo5VmgKiDMoWqFmJuFTLLi6wuvRYNX3/wNx2h40Ci+q+FbnL0FzhB6zZwwVkm
DHLKldDFbemxp4Q10Fq/MvaJkf5kuwg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:24 2025 by rpki-client