Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3d25d00f-903d-36fe-8760-4f2dba2cd0b0.roa
File:                     3d25d00f-903d-36fe-8760-4f2dba2cd0b0.roa (raw, json)
Hash identifier:          +EhIJlQX9VlapVFKyd7fPTBVSEfJJMp+3okWI+U2eOY=
Subject key identifier:   77:5F:72:1C:F4:4C:55:80:B2:30:C3:FB:A9:69:1B:03:C3:AD:53:29
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1620A7FA04396671F66E040
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3d25d00f-903d-36fe-8760-4f2dba2cd0b0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        97.95.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:0a:7f:a0:43:96:67:1f:66:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=76992344-55c3-4933-8975-1207e97019d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:3a:09:8d:24:f5:4c:bd:e8:5d:1c:7f:6b:
                    23:b3:fd:4a:da:2a:12:80:20:6d:fe:0c:36:3e:30:
                    09:71:68:2b:58:18:f7:90:2d:bf:79:ee:7f:fd:17:
                    9e:ab:52:ad:75:b3:d4:ef:09:c6:06:51:4a:de:a5:
                    c9:83:8d:10:dd:f8:e4:2b:ad:35:db:7f:a8:8d:5d:
                    77:ec:31:de:21:3c:40:1a:70:9f:23:57:e5:30:66:
                    25:ba:be:31:1c:60:62:19:35:ef:dd:2e:2c:07:40:
                    8f:13:a7:7b:45:f6:3d:f4:40:fe:2a:0f:01:f4:da:
                    25:5b:f3:63:6e:26:32:f1:b2:67:f2:e9:df:45:3d:
                    6c:54:9d:a9:e1:73:31:8f:60:f6:7c:61:7c:70:eb:
                    c8:14:7e:b2:6a:03:f3:9f:7e:aa:34:65:0d:64:67:
                    b5:b5:ca:23:a7:33:ad:a2:b9:9d:1e:00:e3:09:e9:
                    82:0a:2d:f9:b9:8f:ed:31:90:ac:f1:08:47:3a:7a:
                    3f:14:5c:b2:b7:73:e1:95:25:eb:5f:58:2d:8d:09:
                    3f:66:28:b5:ea:d0:11:b8:81:4f:de:f8:22:73:99:
                    a6:d7:19:24:b4:bd:0b:2c:2a:d9:f6:ea:ec:78:89:
                    98:40:d1:be:b7:33:f4:f7:8f:b3:54:d2:6b:2a:42:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:72:1C:F4:4C:55:80:B2:30:C3:FB:A9:69:1B:03:C3:AD:53:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3d25d00f-903d-36fe-8760-4f2dba2cd0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.95.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:bf:f7:cb:78:49:d7:db:cd:4b:61:06:28:d0:6e:0b:23:
         d2:1a:91:4b:be:17:73:df:dc:cc:da:bb:99:e0:b0:e9:ea:bd:
         d8:44:5f:9a:76:df:55:cd:f2:81:7e:a2:dc:db:4c:e5:73:a0:
         c4:e6:94:75:a3:eb:bc:85:73:5e:00:48:2f:bc:c5:83:28:ac:
         5a:b8:da:ca:af:b0:00:2e:c8:5c:0a:5d:9d:fe:eb:28:6d:9b:
         55:21:4b:fa:e4:af:7d:49:fe:f1:81:ae:08:8b:ed:d7:8f:ab:
         25:92:cf:25:d2:8d:b2:4e:23:30:57:b1:7a:ac:dc:18:f8:22:
         92:1f:32:36:1d:99:9e:75:2a:3b:d1:e5:84:af:0d:ac:7f:32:
         dd:41:b1:06:cf:2f:3f:91:94:8a:04:69:df:b2:44:9f:d3:fc:
         fe:eb:88:0a:6b:c4:92:68:e4:05:15:07:97:f7:c3:23:e7:5e:
         d7:24:6e:ce:6c:60:82:c9:f4:ff:51:aa:ac:72:b8:e2:f8:7a:
         98:75:e3:a5:f8:ce:2e:a1:e6:c4:ac:ff:9c:f2:43:22:ad:84:
         d2:c1:a2:88:96:6e:16:46:e9:7c:5e:3a:42:34:1c:7e:0d:41:
         a9:ea:9d:ac:5b:57:63:8b:9b:39:3e:b5:3f:ab:44:67:dd:71:
         34:bb:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:52 2025 by rpki-client