Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c1d4888-21cc-346a-a1fd-b9ba73cef227.roa
File:                     4c1d4888-21cc-346a-a1fd-b9ba73cef227.roa (raw, json)
Hash identifier:          qxrekJt/nh/OMn3mF+A+6ZLmtyemqnkM2Rs/b+XG69Q=
Subject key identifier:   D7:65:E8:63:FE:13:F4:4D:53:BE:06:FC:D0:C0:1F:13:F1:76:08:A9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1616C1C19835C73CAA67C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c1d4888-21cc-346a-a1fd-b9ba73cef227.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        192.62.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:6c:1c:19:83:5c:73:ca:a6:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=913aed72-2168-4cab-a025-09a06bfd9703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:e4:6b:54:d7:09:ef:fe:93:b1:7f:e9:50:
                    1c:17:37:d2:6b:16:13:1b:b9:ae:1e:d4:f9:7e:02:
                    e6:8c:b3:51:19:3c:f2:40:0b:81:bc:e2:f9:49:19:
                    eb:ef:8c:68:59:22:a6:71:a0:b1:3a:c6:be:9a:5b:
                    ce:6d:2e:d2:6b:13:84:40:79:b7:ec:f5:7d:fa:45:
                    37:73:3e:f6:29:46:2d:bf:29:cc:2e:c9:02:7a:b5:
                    6e:b8:55:a3:f4:62:be:97:44:3a:f1:e5:21:c9:d2:
                    79:04:1d:4c:c2:26:56:1e:ae:1c:77:c5:d4:77:e1:
                    5c:9c:03:e2:72:42:3c:e7:c7:63:0f:6d:3b:7f:be:
                    8f:e4:ef:ea:58:d4:d8:eb:08:5e:89:d2:3f:88:1e:
                    cd:6d:5f:37:1b:10:d9:f7:e5:35:95:c2:7b:d4:ed:
                    b6:15:cd:9d:08:b6:2b:d6:a0:af:da:56:69:bd:63:
                    39:66:2f:3e:39:e5:12:3c:7a:52:79:e4:9d:be:8a:
                    3c:99:d3:bc:10:bb:0f:77:b4:55:48:54:a4:61:f3:
                    33:07:7b:1f:5a:94:84:65:c0:e0:e1:2e:1b:0b:b7:
                    7e:1f:eb:89:02:52:be:35:09:c4:de:82:15:93:51:
                    09:6c:0f:ab:9c:80:bc:11:19:54:9c:9e:94:a0:95:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:E8:63:FE:13:F4:4D:53:BE:06:FC:D0:C0:1F:13:F1:76:08:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c1d4888-21cc-346a-a1fd-b9ba73cef227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:3b:3b:e5:3a:23:1b:73:11:ed:7d:9a:24:9f:79:5a:11:
         48:be:ef:46:04:dc:10:75:5e:ae:3d:47:f2:81:db:78:90:c6:
         65:cc:37:6b:6d:70:6c:95:fa:2c:f1:f6:c2:e9:ef:8e:c2:13:
         c6:7b:6f:1f:0a:ff:c1:25:85:f9:fb:84:75:63:44:56:d4:78:
         f1:4e:8b:d1:73:87:b3:ed:2a:53:e0:a0:f0:fb:fa:a8:e6:03:
         b9:76:47:7a:21:fb:a1:45:89:9a:15:36:1f:80:c9:48:5b:77:
         a9:23:93:94:7b:5e:23:dc:d5:79:13:22:fb:39:df:3c:06:61:
         1b:aa:89:d8:c6:d3:0c:ba:7e:9d:80:88:b5:2b:74:71:fa:a3:
         ee:4c:7c:2b:21:73:7e:ff:77:73:40:4c:cd:51:d3:8d:25:78:
         dd:41:93:65:89:f2:5e:e7:b7:a4:cf:e5:28:83:14:66:c5:c8:
         dc:45:4b:5d:a6:6f:3a:5b:e3:70:a1:3e:8d:70:af:8e:a9:bc:
         34:a4:26:31:5a:68:9a:36:62:e6:9d:2c:2d:46:19:42:9e:92:
         2f:9c:ad:d6:e2:88:c5:80:f6:47:33:cc:46:e7:b0:e2:c4:43:
         4e:3c:40:82:83:5d:4c:44:30:2a:b5:24:ad:f7:ae:05:ff:98:
         18:19:ce:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYWwcGYNcc8qmfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OTEzYWVkNzItMjE2OC00Y2FiLWEwMjUtMDlhMDZiZmQ5NzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv7ka1TXCe/+k7F/6VAcFzfSaxYTG7muHtT5
fgLmjLNRGTzyQAuBvOL5SRnr74xoWSKmcaCxOsa+mlvObS7SaxOEQHm37PV9+kU3
cz72KUYtvynMLskCerVuuFWj9GK+l0Q68eUhydJ5BB1MwiZWHq4cd8XUd+FcnAPi
ckI858djD207f76P5O/qWNTY6wheidI/iB7NbV83GxDZ9+U1lcJ71O22Fc2dCLYr
1qCv2lZpvWM5Zi8+OeUSPHpSeeSdvoo8mdO8ELsPd7RVSFSkYfMzB3sfWpSEZcDg
4S4bC7d+H+uJAlK+NQnE3oIVk1EJbA+rnIC8ERlUnJ6UoJXpVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdl6GP+E/RNU74G/NDAHxPxdgipMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGMxZDQ4ODgtMjFjYy0z
NDZhLWExZmQtYjliYTczY2VmMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwD6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKk4OzvlOiMbcxHtfZokn3laEUi+70YE3BB1Xq49R/KB23iQxmXMN2tt
cGyV+izx9sLp747CE8Z7bx8K/8Elhfn7hHVjRFbUePFOi9Fzh7PtKlPgoPD7+qjm
A7l2R3oh+6FFiZoVNh+AyUhbd6kjk5R7XiPc1XkTIvs53zwGYRuqidjG0wy6fp2A
iLUrdHH6o+5MfCshc37/d3NATM1R040leN1Bk2WJ8l7nt6TP5SiDFGbFyNxFS12m
bzpb43ChPo1wr46pvDSkJjFaaJo2YuadLC1GGUKeki+crdbiiMWA9kczzEbnsOLE
Q048QIKDXUxEMCq1JK33rgX/mBgZzhs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:53 2025 by rpki-client