Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cf01bc1-8467-39ab-9b2d-cf4be2443d01.roa
File:                     4cf01bc1-8467-39ab-9b2d-cf4be2443d01.roa (raw, json)
Hash identifier:          EJ4gWMKl43C3iobRDkZWcULzRhTZhEVLNqkPVAGWu64=
Subject key identifier:   F8:36:3F:4D:F9:2C:EE:E0:F7:7A:E7:66:11:E0:F9:66:9D:B9:B9:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1614009E408FD44311A8F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cf01bc1-8467-39ab-9b2d-cf4be2443d01.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.177.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:40:09:e4:08:fd:44:31:1a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=12c2c791-552a-4c9d-af27-6449f06d43dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:9c:3d:46:9e:98:99:e2:4e:fb:a3:06:f1:
                    a9:00:52:25:f3:ac:1a:e2:ad:1c:f5:b4:97:dc:bd:
                    a2:4b:42:e2:09:f5:77:2a:24:ab:9c:08:e9:81:e5:
                    97:e5:9d:0b:bd:3a:fe:bb:0e:d0:aa:ee:97:b1:8f:
                    2c:de:6d:8b:2c:1c:d0:cd:15:1a:55:25:d4:76:9d:
                    ef:47:2f:b5:0a:34:4e:17:0d:8f:14:b4:b3:72:62:
                    75:15:00:3a:4c:97:fd:8e:0e:d6:b5:14:b7:ce:2c:
                    ec:80:8d:09:81:05:31:0a:59:dd:ba:58:20:43:19:
                    cf:ad:86:46:a8:c8:7d:4f:14:9d:14:f2:84:68:85:
                    62:66:2d:0f:b2:55:a8:1b:93:a2:20:75:26:39:76:
                    64:16:50:33:f1:dc:b8:5b:e8:3f:0b:7d:ef:72:97:
                    eb:6d:2d:68:f5:96:ac:27:40:8d:99:6c:bd:77:be:
                    37:55:bb:24:bf:05:3c:32:3f:2c:c7:de:09:6e:0e:
                    9f:46:0f:30:44:42:e7:1b:38:ee:70:b9:12:12:18:
                    ba:82:92:62:09:ad:0b:bb:89:84:9d:56:e8:f9:95:
                    90:a0:f1:b8:56:3e:23:32:2d:f2:20:3c:38:7c:2b:
                    a1:cf:9d:d3:25:af:4e:6c:17:ef:40:09:b3:a7:ad:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:3F:4D:F9:2C:EE:E0:F7:7A:E7:66:11:E0:F9:66:9D:B9:B9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cf01bc1-8467-39ab-9b2d-cf4be2443d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:50:60:73:f8:aa:bf:d5:d1:95:4d:ab:4c:07:44:a1:67:c1:
         7c:ba:94:b3:a3:7b:a7:bd:7b:43:05:76:db:d4:53:2f:a6:63:
         75:e5:9c:36:f3:41:36:d8:f2:c3:0f:79:be:43:95:64:e1:75:
         54:42:37:5e:7e:cc:8f:12:48:b6:30:28:ad:15:2a:69:e8:d0:
         1d:99:8e:4f:a7:05:eb:55:5d:1a:e7:6c:7b:fe:09:8f:4f:88:
         bf:98:12:2d:bf:0c:76:a2:99:dd:69:6c:0f:5c:9d:b0:2f:2b:
         22:2a:2d:13:a0:9f:43:40:29:e6:29:dd:a4:27:04:c4:96:d6:
         59:85:9b:44:0a:9c:34:2a:9a:00:9d:08:1f:69:7c:f5:bd:32:
         20:1b:50:66:73:57:13:c9:96:b4:58:2e:19:5c:56:da:38:e6:
         83:45:46:61:bd:10:67:05:18:2c:86:bb:29:fa:07:ab:0c:e0:
         7e:4a:f2:e3:27:65:18:77:81:21:e0:20:c8:c6:b4:dd:7b:e2:
         dc:05:fa:8b:01:b8:05:f1:83:20:8d:ad:ed:57:7b:f4:47:65:
         54:44:cb:82:f7:f5:38:49:48:b2:7d:1e:53:3d:74:25:56:a6:
         5a:7d:27:d1:a4:af:2f:08:7a:ad:dd:c9:ec:0b:b2:fc:95:a0:
         f3:02:ca:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYUAJ5Aj9RDEajwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MTJjMmM3OTEtNTUyYS00YzlkLWFmMjctNjQ0OWYwNmQ0M2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XucPUaemJniTvujBvGpAFIl86wa4q0c9bSX
3L2iS0LiCfV3KiSrnAjpgeWX5Z0LvTr+uw7Qqu6XsY8s3m2LLBzQzRUaVSXUdp3v
Ry+1CjROFw2PFLSzcmJ1FQA6TJf9jg7WtRS3zizsgI0JgQUxClndulggQxnPrYZG
qMh9TxSdFPKEaIViZi0PslWoG5OiIHUmOXZkFlAz8dy4W+g/C33vcpfrbS1o9Zas
J0CNmWy9d743VbskvwU8Mj8sx94Jbg6fRg8wRELnGzjucLkSEhi6gpJiCa0Lu4mE
nVbo+ZWQoPG4Vj4jMi3yIDw4fCuhz53TJa9ObBfvQAmzp60f+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPg2P035LO7g93rnZhHg+WadublmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGNmMDFiYzEtODQ2Ny0z
OWFiLTliMmQtY2Y0YmUyNDQzZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGLGGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMpQYHP4qr/V0ZVNq0wHRKFnwXy6lLOje6e9e0MFdtvUUy+mY3XlnDbz
QTbY8sMPeb5DlWThdVRCN15+zI8SSLYwKK0VKmno0B2Zjk+nBetVXRrnbHv+CY9P
iL+YEi2/DHaimd1pbA9cnbAvKyIqLROgn0NAKeYp3aQnBMSW1lmFm0QKnDQqmgCd
CB9pfPW9MiAbUGZzVxPJlrRYLhlcVto45oNFRmG9EGcFGCyGuyn6B6sM4H5K8uMn
ZRh3gSHgIMjGtN174twF+osBuAXxgyCNre1Xe/RHZVREy4L39ThJSLJ9HlM9dCVW
plp9J9Gkry8Ieq3dyewLsvyVoPMCyjg=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:07 2025 by rpki-client