Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/876e5cda-3f68-3277-a6f3-de0b789f0197.roa
File:                     876e5cda-3f68-3277-a6f3-de0b789f0197.roa (raw, json)
Hash identifier:          TgmNX4lJrGYsiAyC1wKRyM+GGUZbqjWox6+gxamlqm0=
Subject key identifier:   00:CC:7E:B6:B7:B6:EC:A5:F3:72:B4:68:7B:0D:CA:ED:C4:D2:E0:87
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161295D9B159F00502EC740
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/876e5cda-3f68-3277-a6f3-de0b789f0197.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        192.60.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:29:5d:9b:15:9f:00:50:2e:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=5edaeca1-7045-4bec-a0e9-52f157300b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:eb:da:b6:aa:c9:54:d7:88:a9:0f:6f:32:
                    cc:4b:1c:20:a0:38:10:49:02:c6:06:8d:2d:02:c0:
                    66:b6:3b:a1:b7:5a:f8:63:e3:9b:3c:06:f2:b5:1a:
                    a3:45:fb:4d:6c:f5:33:ae:d2:2f:08:eb:61:4e:54:
                    a7:7f:0d:ec:68:a3:90:9c:12:84:77:d8:bf:b7:59:
                    c0:2d:50:e2:78:c4:fe:ef:95:2b:20:0b:9b:a4:db:
                    90:6c:c4:e4:6d:54:e6:a3:80:9e:58:7f:59:dc:e3:
                    e3:15:1b:9b:21:18:f7:da:15:77:30:fc:00:13:28:
                    6b:d4:5c:bf:c2:37:5a:8f:9b:4e:dd:a8:28:53:36:
                    57:7c:d1:ed:5f:89:97:0f:cd:c3:32:8b:19:58:35:
                    e1:5a:71:dd:49:c3:f0:09:c1:9a:0c:e8:ad:a7:3d:
                    6d:ab:ba:77:87:ce:2f:4c:3b:e1:e1:aa:27:ec:29:
                    02:2d:33:fe:e3:09:84:56:42:65:49:56:64:fb:0b:
                    ee:6f:98:e0:8e:23:82:85:a6:4e:e2:41:8c:81:cc:
                    ee:26:09:e1:c2:a9:f1:b5:40:eb:f9:1e:e1:76:00:
                    ff:46:a6:6b:8f:f8:85:80:64:ff:dd:e9:b8:6e:bd:
                    1e:d0:d1:dc:20:ec:7b:68:58:f1:fa:3a:40:0b:b5:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CC:7E:B6:B7:B6:EC:A5:F3:72:B4:68:7B:0D:CA:ED:C4:D2:E0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/876e5cda-3f68-3277-a6f3-de0b789f0197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.60.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:f8:75:a5:83:aa:5b:b1:40:0d:48:f7:57:cc:23:a0:12:
         c2:58:93:68:34:86:c4:34:dd:39:7c:33:7c:5e:e5:60:c8:e8:
         69:5c:54:d2:bb:3d:bb:41:47:14:78:6d:8e:be:14:fa:47:c2:
         18:70:ee:f6:87:c3:7b:d8:e6:f6:cf:20:b8:bd:13:fc:f8:31:
         fa:7e:e6:42:dc:49:d1:a8:a0:12:4b:30:0b:85:b9:93:01:e9:
         4a:61:57:5c:8c:e7:35:be:a0:79:86:ee:ea:bc:e8:8c:db:73:
         03:53:43:5f:c8:5b:72:e6:3e:f5:62:1c:1e:ad:e0:f4:02:22:
         ba:2d:d8:a2:24:66:94:e8:d5:60:9d:b8:76:6b:96:44:17:15:
         74:5d:97:01:1a:62:19:3c:12:db:50:89:7d:7b:fc:e5:39:25:
         05:7c:a8:a0:12:93:0c:30:f2:29:31:fb:15:4f:ab:2b:a4:24:
         72:03:24:f8:ef:e9:a8:2a:88:bd:b2:a2:08:7a:e7:3b:1e:18:
         c3:fc:b3:28:16:ae:ce:51:6c:c4:2e:10:40:df:0c:a2:fa:ec:
         2e:9f:0b:fb:11:56:09:29:ca:6e:75:c1:7f:76:20:b3:c9:1a:
         f2:c4:41:f8:45:ee:10:1e:09:ff:c2:d3:74:93:00:ac:71:b5:
         21:d0:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:41:17 2025 by rpki-client