Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4d515762-3d51-377d-885c-3a5f68bc0c11.roa
File:                     4d515762-3d51-377d-885c-3a5f68bc0c11.roa (raw, json)
Hash identifier:          N0GtcvgnLnMgoQz6AH3nh6CHI6HY5Qco4Yfv5HtX+3E=
Subject key identifier:   69:A0:FF:15:9C:95:F7:81:0C:56:03:4D:4E:5C:8F:42:02:91:DD:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F0AA6E15E0BA0FE2B300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4d515762-3d51-377d-885c-3a5f68bc0c11.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     23222
IP address blocks:        75.140.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f0:aa:6e:15:e0:ba:0f:e2:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=b4bb991e-0703-4932-ba31-65b0ae49cabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:1c:3e:45:1f:dc:01:3b:70:5d:3f:90:7a:
                    19:d7:a5:7f:04:94:58:f2:d2:48:9c:cf:a8:d3:ae:
                    d1:58:6f:3f:30:4e:6e:fb:1e:53:3f:06:dd:34:07:
                    74:c0:e0:39:ca:b2:b1:a4:f0:d5:97:30:96:26:0c:
                    61:1e:7f:92:64:b7:29:63:d0:d6:25:92:ff:9b:78:
                    c8:2c:f3:c2:87:7b:6c:0b:2b:8c:b9:ed:04:88:a9:
                    92:da:94:b2:89:4b:e2:2b:d8:dc:51:ce:12:a1:73:
                    2c:7c:ab:6d:60:e2:49:4f:e4:d9:fc:65:b0:e0:0e:
                    1b:c3:c7:cb:ee:b2:85:cb:54:26:41:09:34:e5:5a:
                    29:58:c0:5c:74:32:82:99:17:ef:40:0b:37:7f:52:
                    05:c1:e0:7e:2f:c9:c5:8c:a2:26:58:08:1a:1c:8e:
                    b9:55:45:7c:e9:fe:bf:cd:97:6e:9c:29:5f:23:b5:
                    32:e3:c7:f0:e3:76:f4:97:a2:b8:4a:5f:d5:75:8e:
                    54:23:0b:cf:d9:f5:b3:f6:1f:ab:9b:30:d0:42:00:
                    50:d8:24:c3:84:5b:9c:cd:5c:f5:4c:37:73:38:90:
                    22:90:5a:a3:4f:1d:5d:47:d8:bc:2a:20:5c:3e:12:
                    d4:6f:db:d1:7b:e7:0a:da:6b:5c:40:bb:ea:09:3c:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A0:FF:15:9C:95:F7:81:0C:56:03:4D:4E:5C:8F:42:02:91:DD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4d515762-3d51-377d-885c-3a5f68bc0c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.140.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:7a:af:a2:6e:0a:d1:86:be:38:6f:a6:48:4f:66:a1:45:
         a8:5f:bd:77:03:ce:02:56:b3:ab:71:96:7e:9f:ab:26:c5:fd:
         94:fa:01:3e:d1:b1:05:a5:3b:a0:1d:a7:18:e3:37:8a:ec:1e:
         d7:73:ea:46:b9:54:2c:78:9f:1c:b2:19:ea:6a:1e:4f:48:1c:
         3f:7f:a5:ef:ba:60:81:1b:74:82:21:a3:6a:46:25:d8:fa:58:
         41:3b:6f:86:f8:6d:ec:1d:00:03:cf:e8:41:44:b8:d9:11:8e:
         87:e2:ad:7b:02:3b:84:e2:15:20:aa:51:42:5e:0b:ca:4c:6b:
         32:e3:ad:62:0e:71:27:e1:2f:ad:7d:4f:17:36:65:38:40:b0:
         f2:8f:27:3c:af:9f:45:1a:b4:09:27:c7:63:be:f7:5a:e7:fe:
         f8:6d:09:89:ae:b0:00:12:ed:7d:4c:13:c0:bd:dc:c0:c6:f8:
         49:df:37:3f:41:20:a7:97:15:45:5d:50:ec:92:e7:61:99:cc:
         87:05:bb:ef:ee:4c:da:d5:5f:f7:1e:fb:80:cd:60:6c:d0:a0:
         c7:e0:ec:bb:ce:a4:ca:ff:43:ef:a8:d5:14:da:65:3a:35:1e:
         63:2c:d2:62:c3:5b:0f:31:ca:71:34:54:2c:7b:b7:97:6b:7c:
         ce:a0:c0:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB/CqbhXgug/iswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
YjRiYjk5MWUtMDcwMy00OTMyLWJhMzEtNjViMGFlNDljYWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCkcPkUf3AE7cF0/kHoZ16V/BJRY8tJInM+o
067RWG8/ME5u+x5TPwbdNAd0wOA5yrKxpPDVlzCWJgxhHn+SZLcpY9DWJZL/m3jI
LPPCh3tsCyuMue0EiKmS2pSyiUviK9jcUc4SoXMsfKttYOJJT+TZ/GWw4A4bw8fL
7rKFy1QmQQk05VopWMBcdDKCmRfvQAs3f1IFweB+L8nFjKImWAgaHI65VUV86f6/
zZdunClfI7Uy48fw43b0l6K4Sl/VdY5UIwvP2fWz9h+rmzDQQgBQ2CTDhFuczVz1
TDdzOJAikFqjTx1dR9i8KiBcPhLUb9vRe+cK2mtcQLvqCTwmEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmg/xWclfeBDFYDTU5cj0ICkd23MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGQ1MTU3NjItM2Q1MS0z
NzdkLTg4NWMtM2E1ZjY4YmMwYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS4wwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEx4eq+ibgrRhr44b6ZIT2ahRahfvXcDzgJWs6txln6fqybF/ZT6AT7R
sQWlO6AdpxjjN4rsHtdz6ka5VCx4nxyyGepqHk9IHD9/pe+6YIEbdIIho2pGJdj6
WEE7b4b4bewdAAPP6EFEuNkRjofirXsCO4TiFSCqUUJeC8pMazLjrWIOcSfhL619
Txc2ZThAsPKPJzyvn0UatAknx2O+91rn/vhtCYmusAAS7X1ME8C93MDG+EnfNz9B
IKeXFUVdUOyS52GZzIcFu+/uTNrVX/ce+4DNYGzQoMfg7LvOpMr/Q++o1RTaZTo1
HmMs0mLDWw8xynE0VCx7t5drfM6gwKg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:14:16 2026 by rpki-client