Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4bfe4d29-71be-303b-90e8-a17381394227.roa
File:                     4bfe4d29-71be-303b-90e8-a17381394227.roa (raw, json)
Hash identifier:          0WsrmMYvN/Gn8fn+GAifRqBjSDzzU3ONJxNKvRjdak4=
Subject key identifier:   B6:7E:29:44:78:D8:5A:7D:62:95:AD:39:2F:6F:96:1B:27:32:EC:41
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161B97B63DB5E2F0D172800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4bfe4d29-71be-303b-90e8-a17381394227.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11426
IP address blocks:        192.60.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b9:7b:63:db:5e:2f:0d:17:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9c530909-cc21-474e-aa27-e2b32e071069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:b0:a9:b3:71:55:95:9b:71:8c:dd:2c:8d:
                    e5:7a:3a:bb:f9:d2:bd:94:5e:8d:5b:76:9f:83:8b:
                    14:3b:9e:ec:e4:f1:f0:e3:1b:ec:39:51:24:a1:9b:
                    72:e5:52:1e:0c:82:3f:2c:a5:fb:54:d1:51:8f:46:
                    b1:06:5b:ee:d1:1e:74:50:b7:d8:68:16:d1:6a:90:
                    72:09:46:63:f0:4d:5d:90:84:30:a6:1a:00:ae:81:
                    15:7d:67:79:50:57:ea:9d:c6:b3:67:b5:f4:55:53:
                    e9:36:71:03:df:ce:ba:2b:ac:64:01:74:b7:08:9c:
                    6d:ed:89:58:9a:6e:2f:b3:06:54:c6:cc:d1:ae:88:
                    c1:a3:b7:29:1d:df:63:2c:1d:97:fe:cb:61:b5:6c:
                    12:76:3e:ba:65:b8:56:79:cb:6b:eb:27:2b:f5:e0:
                    04:7b:c8:67:20:78:54:71:9c:c8:b2:d7:48:ac:28:
                    d3:4b:9b:58:a1:8b:58:d0:e4:40:94:1f:03:65:97:
                    78:e0:68:8f:2e:ec:53:af:55:06:83:df:5c:1b:b4:
                    6f:8c:b7:13:8b:61:fe:4c:ad:86:83:8b:13:d9:8e:
                    75:6b:02:5f:21:93:d9:29:2b:47:db:ec:05:a9:db:
                    45:e3:c4:2b:62:be:53:be:83:c1:f7:a5:87:0b:54:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:29:44:78:D8:5A:7D:62:95:AD:39:2F:6F:96:1B:27:32:EC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4bfe4d29-71be-303b-90e8-a17381394227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.60.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:fc:2e:2f:2b:88:de:7b:c4:5d:af:85:40:42:73:08:e6:15:
         27:69:d7:6e:92:66:42:f1:c2:30:ee:d5:a5:e9:eb:b7:1d:11:
         6b:3b:16:9a:aa:49:51:be:0b:57:1f:b5:66:10:b0:53:22:a1:
         e9:ac:24:c7:b5:a0:f6:a6:c6:79:2f:54:23:3f:62:17:dc:d4:
         6f:69:5e:69:dc:28:66:c6:1a:4f:92:63:5f:db:57:de:d8:db:
         c6:7d:10:70:ed:47:a4:b4:7f:88:f8:7f:e7:7e:8e:d3:87:06:
         98:0c:61:59:94:bd:22:50:09:23:f0:6b:df:87:b5:c0:51:8f:
         6e:d5:ae:ed:db:eb:2a:cd:6a:dd:5b:d8:bb:1e:f4:56:f0:51:
         1f:e4:1e:d1:e4:2c:74:ad:3a:e8:14:ec:dd:1d:66:cd:81:4b:
         db:cf:52:1d:42:24:d7:f4:ef:46:d5:c1:5a:68:48:db:77:18:
         e4:1a:d5:0b:76:0f:d5:3b:4c:75:a2:37:20:f0:c2:d1:5e:b9:
         d6:d5:c8:7a:19:14:7c:7a:01:76:54:17:b7:03:9c:3b:93:a7:
         f1:b5:a2:87:28:6e:9a:01:4f:59:cf:4f:09:2d:5c:58:2b:11:
         b3:fb:cb:98:01:16:b4:f0:7d:17:cc:f8:16:44:01:fb:0b:e0:
         fe:da:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:44 2025 by rpki-client