Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3830910a-5f6a-3411-a058-552266331016.roa
File:                     3830910a-5f6a-3411-a058-552266331016.roa (raw, json)
Hash identifier:          qxz0LCb1Fr4Dzp1WuSBu4mPe8vHyX4Cm9HPsAiKkcfM=
Subject key identifier:   21:90:01:D4:75:62:C1:68:22:23:7C:A0:B1:FC:F9:16:35:EC:54:C4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DBE9222CEDE97FA021200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3830910a-5f6a-3411-a058-552266331016.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        47.225.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:be:92:22:ce:de:97:fa:02:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=a42d2e51-e97f-40e8-bcb5-6d99329fe809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:91:f0:a8:6b:e5:79:bf:c3:bd:30:55:c9:
                    38:9e:27:bc:50:ad:a3:df:4a:12:74:5b:e9:66:8f:
                    e1:76:85:35:88:92:fb:4e:7f:7e:3e:73:d8:8e:72:
                    31:c7:c2:23:00:e0:e5:01:6b:bc:58:9c:33:f8:a1:
                    d8:c8:71:a0:fe:fc:d3:28:fd:d8:9d:a2:48:2c:57:
                    4a:23:aa:b0:f8:f3:32:c9:d5:b5:ac:3d:8d:bf:9f:
                    ad:d9:8a:41:ed:d1:ef:e5:6d:6b:1b:bd:5b:e2:da:
                    a9:60:3d:1b:80:dc:1d:f7:f4:51:d1:4c:3f:59:eb:
                    c5:45:04:d3:a3:8b:d7:30:73:9f:ce:f2:ca:d9:7c:
                    e1:7c:6c:d7:28:6d:c2:85:43:6c:ee:cd:05:ae:d0:
                    6b:78:84:fb:62:04:bc:0d:99:75:38:02:c9:a6:dc:
                    24:63:54:7b:f1:ca:ce:26:39:5c:41:fe:fa:19:56:
                    bb:9d:9e:74:1b:8c:20:9e:e3:10:25:66:17:2e:12:
                    87:7a:43:1b:ff:fa:ef:92:a3:f7:ff:7e:61:49:56:
                    f1:3e:c0:21:6d:59:a7:68:0f:9d:89:94:df:f2:01:
                    a5:3e:4c:e7:89:2f:0d:f7:34:65:33:5a:83:fb:32:
                    e9:a5:3c:07:7d:40:a8:0a:47:39:43:25:d8:fb:e6:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:90:01:D4:75:62:C1:68:22:23:7C:A0:B1:FC:F9:16:35:EC:54:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3830910a-5f6a-3411-a058-552266331016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.225.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:d8:34:6b:ab:23:33:f6:c8:62:ea:9d:b2:bc:fb:7f:82:dc:
         b2:75:da:80:e4:37:66:11:e3:de:0c:06:dc:a3:b7:2f:7b:c4:
         d3:45:9b:d9:85:0b:26:6a:9b:11:6c:95:84:8f:b9:66:8b:a1:
         30:b5:71:c4:2a:83:57:e2:22:5a:73:38:7f:cc:5d:fc:d1:21:
         25:4d:2a:39:3d:66:d1:96:d9:ba:7d:8c:64:9e:a5:64:57:c6:
         ec:86:79:a1:db:4d:a1:86:75:16:b8:1e:45:60:bb:c7:58:08:
         93:7e:a4:19:32:dd:ea:34:5a:7b:91:de:6a:b7:39:90:f1:55:
         4f:b7:06:78:04:10:20:c6:0a:5f:44:c2:2b:a2:f7:fb:c4:56:
         bc:4a:b7:a2:64:d0:46:35:f1:28:62:12:c5:1b:97:9c:9e:ee:
         07:8c:83:b3:cc:98:ea:49:85:ec:3d:a7:73:46:6f:29:5b:33:
         b0:3c:93:01:ff:a3:d1:c1:83:40:6b:14:cc:12:b8:b4:f1:22:
         cc:c4:ee:9f:78:b3:06:bf:70:af:98:ea:2e:0f:79:01:a6:d3:
         cd:21:f5:b1:fa:c6:f6:e5:3d:50:c7:8d:b9:12:a8:43:01:d9:
         54:fd:d7:f4:79:ac:20:45:cc:71:bf:3a:33:2c:7d:7e:f2:54:
         c7:87:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:47:16 2026 by rpki-client