Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/490494d4-4410-300b-89e8-768603197458.roa
File:                     490494d4-4410-300b-89e8-768603197458.roa (raw, json)
Hash identifier:          ywWQXzT8FE/cONaXip1JyLee8hH/CCRqv3hGpDJEDNg=
Subject key identifier:   71:35:23:9A:A6:B1:46:C6:76:02:8A:3D:04:53:B6:C7:36:9C:92:A0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1615F6F9E545DBF775A6D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/490494d4-4410-300b-89e8-768603197458.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        75.131.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:5f:6f:9e:54:5d:bf:77:5a:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0c79095e-bfd8-4bb9-9213-5cd348877c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:4b:15:5d:ee:55:9c:38:0e:89:e6:fc:2a:
                    78:d0:29:f3:61:74:58:09:f7:66:50:f2:a4:77:8c:
                    53:ce:b1:8d:6c:99:bb:26:b7:5f:9b:31:8e:9a:df:
                    a3:0e:68:92:6a:a3:0b:83:46:37:c9:40:b4:0b:ad:
                    42:9c:82:ae:eb:88:48:ab:91:93:57:be:9f:8b:77:
                    ef:13:17:1d:91:a2:40:80:a9:c3:25:e5:1e:42:62:
                    21:cd:ba:52:25:34:82:fe:e0:89:15:ff:86:93:20:
                    83:42:04:31:8e:d9:0c:47:8f:30:b5:f4:31:18:1f:
                    70:7c:a3:82:29:64:b2:9d:ad:7f:7c:4d:e1:05:f5:
                    cd:e6:c1:4e:7c:93:0c:3d:f1:2e:88:84:3f:48:fd:
                    5e:f0:77:66:7e:9d:26:32:ab:0d:ad:b0:8c:42:f2:
                    b7:46:58:40:00:8c:ff:75:76:af:3d:71:d7:3c:a2:
                    44:1a:2e:80:1b:45:34:3f:96:b8:43:12:fb:b5:55:
                    fe:64:13:10:86:c0:0b:47:e0:09:97:b6:53:9b:e6:
                    94:5f:4d:e0:26:62:cf:a5:2a:3b:ba:34:0e:bf:62:
                    8f:93:58:0d:0d:94:c8:5a:96:07:72:69:ad:dd:02:
                    fc:0b:d3:c0:fd:cf:88:13:d2:86:10:da:46:4c:1e:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:23:9A:A6:B1:46:C6:76:02:8A:3D:04:53:B6:C7:36:9C:92:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/490494d4-4410-300b-89e8-768603197458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.131.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:dd:5c:56:12:89:bd:37:cc:53:ce:5f:83:17:2d:e0:95:9c:
         d6:f3:b9:0f:ad:a5:4b:97:e8:0d:e8:87:aa:b5:9f:0c:dc:c9:
         59:a1:56:39:ee:d0:53:63:aa:6f:5c:af:ae:16:f8:b5:bc:3c:
         76:9e:21:ae:70:06:59:0b:1b:57:a0:35:16:a0:35:d6:4f:dc:
         28:d4:6f:df:72:ca:4d:b4:7b:4c:74:1f:f3:3d:2f:f1:77:e9:
         6c:d9:5d:ce:64:f0:a2:82:0c:bd:17:64:ed:e0:c2:8d:27:c2:
         4a:3a:7e:2d:bf:2c:c0:4b:15:97:29:d5:72:4b:fb:1d:d3:98:
         9f:49:c8:e0:00:5b:d5:78:e6:23:49:41:6b:4e:61:86:e7:0b:
         65:7f:0e:08:82:44:5f:6c:ac:dc:98:95:ba:29:4e:9a:a7:c9:
         77:3a:71:56:82:b6:8f:7b:d4:ad:45:7a:98:89:9b:09:35:2a:
         5f:c4:5a:1f:03:1c:98:a7:3b:1d:a1:80:c4:d7:e9:0b:1f:74:
         ca:81:24:78:84:20:1b:33:82:e2:64:31:9c:d6:f2:e0:a1:67:
         46:8c:67:73:14:4b:e9:7a:cf:3e:fe:84:17:f6:94:07:be:1e:
         4b:76:fd:1f:24:02:4b:1c:60:7d:dd:72:36:24:93:56:12:66:
         0b:ff:b9:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYV9vnlRdv3dabYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MGM3OTA5NWUtYmZkOC00YmI5LTkyMTMtNWNkMzQ4ODc3YzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRtLFV3uVZw4Donm/Cp40CnzYXRYCfdmUPKk
d4xTzrGNbJm7JrdfmzGOmt+jDmiSaqMLg0Y3yUC0C61CnIKu64hIq5GTV76fi3fv
ExcdkaJAgKnDJeUeQmIhzbpSJTSC/uCJFf+GkyCDQgQxjtkMR48wtfQxGB9wfKOC
KWSyna1/fE3hBfXN5sFOfJMMPfEuiIQ/SP1e8Hdmfp0mMqsNrbCMQvK3RlhAAIz/
dXavPXHXPKJEGi6AG0U0P5a4QxL7tVX+ZBMQhsALR+AJl7ZTm+aUX03gJmLPpSo7
ujQOv2KPk1gNDZTIWpYHcmmt3QL8C9PA/c+IE9KGENpGTB4cjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHE1I5qmsUbGdgKKPQRTtsc2nJKgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDkwNDk0ZDQtNDQxMC0z
MDBiLTg5ZTgtNzY4NjAzMTk3NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS4NAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/dXFYSib03zFPOX4MXLeCVnNbzuQ+tpUuX6A3oh6q1nwzcyVmhVjnu
0FNjqm9cr64W+LW8PHaeIa5wBlkLG1egNRagNdZP3CjUb99yyk20e0x0H/M9L/F3
6WzZXc5k8KKCDL0XZO3gwo0nwko6fi2/LMBLFZcp1XJL+x3TmJ9JyOAAW9V45iNJ
QWtOYYbnC2V/DgiCRF9srNyYlbopTpqnyXc6cVaCto971K1FepiJmwk1Kl/EWh8D
HJinOx2hgMTX6QsfdMqBJHiEIBszguJkMZzW8uChZ0aMZ3MUS+l6zz7+hBf2lAe+
Hkt2/R8kAkscYH3dcjYkk1YSZgv/uVU=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:45 2025 by rpki-client