Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae174d91-a690-3c51-9627-30701a3a8fae.roa
File:                     ae174d91-a690-3c51-9627-30701a3a8fae.roa (raw, json)
Hash identifier:          I2IzoOCIf3iiMEKTW8mUgF72kjuWmHNJ6eGiUUZ+7ug=
Subject key identifier:   24:D0:2F:42:56:55:99:DA:AC:66:E3:12:94:0F:DF:11:7B:F6:7D:50
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161625BB3B4BEFE7C73F5A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae174d91-a690-3c51-9627-30701a3a8fae.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.36.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:62:5b:b3:b4:be:fe:7c:73:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=deb71356-ae96-416f-af90-df3ac48bd37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:f0:8d:d1:c1:b9:ee:2e:09:7b:41:73:d1:
                    9a:e3:03:1a:cc:f0:3f:44:01:6f:62:74:a0:d5:3c:
                    37:c7:94:4a:49:f4:fe:7c:e5:dd:7c:85:6e:a0:5d:
                    71:68:4d:71:d4:07:80:65:76:be:44:d4:38:00:e0:
                    b0:30:f9:22:b0:dc:9b:b1:81:09:72:c2:e9:19:15:
                    b7:fd:75:b6:ec:bd:b1:7a:d7:ff:ea:53:bb:93:25:
                    05:1c:84:ea:9a:72:d7:3a:22:5d:2a:4e:f3:6f:e2:
                    40:dc:8e:b8:87:65:bb:9f:5a:18:ff:4e:70:66:19:
                    e8:f6:58:01:80:6a:97:08:c1:c1:f4:5e:c1:3f:a6:
                    1b:d7:b9:9e:69:11:6d:46:02:ec:76:bb:7a:c7:a8:
                    8d:52:c8:fe:b2:7a:de:ff:35:af:ec:83:eb:e5:b7:
                    95:41:b1:7e:9f:3f:f8:91:dc:dc:08:78:dd:38:8d:
                    05:3b:22:80:93:2f:e6:a2:5d:3a:42:c3:9f:d2:be:
                    a3:30:d2:3a:6b:6e:cc:e9:8b:9b:85:03:f8:2a:af:
                    b9:5c:d4:2b:bc:1f:12:f1:d9:39:4c:de:e4:54:ec:
                    56:1f:a4:01:a5:1d:5f:3d:27:e5:2d:33:ce:83:de:
                    09:35:2b:ff:b9:9e:06:27:97:f0:ed:8d:21:f4:db:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D0:2F:42:56:55:99:DA:AC:66:E3:12:94:0F:DF:11:7B:F6:7D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae174d91-a690-3c51-9627-30701a3a8fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:ae:86:e3:9f:5f:7a:a8:2f:5b:34:f5:fd:8d:0d:11:96:21:
         88:67:90:82:e6:ac:06:af:b2:60:19:fc:59:a4:4e:c5:af:ad:
         60:b1:cb:23:b6:7d:e6:4a:70:f2:d8:7d:a0:fd:c2:b8:dc:91:
         cb:ca:f0:ed:9f:61:ed:dc:95:ec:d3:43:e3:03:8f:6d:ae:d2:
         04:19:7d:20:4d:a8:bb:10:d2:d4:6b:04:72:9d:a2:9e:05:a4:
         ec:e2:05:78:0d:ed:bb:2a:ab:9e:17:40:a2:1b:c0:cc:ce:3b:
         90:3f:cb:90:28:cd:ca:7a:d1:ab:8a:f0:58:81:38:13:44:ca:
         43:74:10:b8:aa:4f:a6:1f:64:77:6c:26:03:7a:30:25:3f:70:
         fa:5a:55:13:29:31:b4:e1:75:98:66:dd:0c:75:5e:0a:55:f5:
         41:b7:51:21:90:4f:eb:bc:bf:70:17:5e:47:45:5c:5f:31:76:
         e7:39:0a:e0:a9:36:62:ec:5b:07:10:35:f2:49:ec:4e:00:1f:
         b9:0f:8b:30:2e:e7:bf:11:0a:ce:a1:48:b8:cc:7b:55:df:ba:
         a0:29:4f:b0:e2:96:fe:49:46:03:60:5a:92:03:4b:3e:28:f8:
         eb:b2:5f:47:bf:cd:d4:b4:81:ca:ef:49:e1:71:af:c7:d0:8d:
         04:60:36:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYWJbs7S+/nxz9aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZGViNzEzNTYtYWU5Ni00MTZmLWFmOTAtZGYzYWM0OGJkMzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKLwjdHBue4uCXtBc9Ga4wMazPA/RAFvYnSg
1Tw3x5RKSfT+fOXdfIVuoF1xaE1x1AeAZXa+RNQ4AOCwMPkisNybsYEJcsLpGRW3
/XW27L2xetf/6lO7kyUFHITqmnLXOiJdKk7zb+JA3I64h2W7n1oY/05wZhno9lgB
gGqXCMHB9F7BP6Yb17meaRFtRgLsdrt6x6iNUsj+snre/zWv7IPr5beVQbF+nz/4
kdzcCHjdOI0FOyKAky/mol06QsOf0r6jMNI6a27M6YubhQP4Kq+5XNQrvB8S8dk5
TN7kVOxWH6QBpR1fPSflLTPOg94JNSv/uZ4GJ5fw7Y0h9NsUCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTQL0JWVZnarGbjEpQP3xF79n1QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWUxNzRkOTEtYTY5MC0z
YzUxLTk2MjctMzA3MDFhM2E4ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANSuhuOfX3qoL1s09f2NDRGWIYhnkILmrAavsmAZ/FmkTsWvrWCxyyO2
feZKcPLYfaD9wrjckcvK8O2fYe3clezTQ+MDj22u0gQZfSBNqLsQ0tRrBHKdop4F
pOziBXgN7bsqq54XQKIbwMzOO5A/y5Aozcp60auK8FiBOBNEykN0ELiqT6YfZHds
JgN6MCU/cPpaVRMpMbThdZhm3Qx1XgpV9UG3USGQT+u8v3AXXkdFXF8xduc5CuCp
NmLsWwcQNfJJ7E4AH7kPizAu578RCs6hSLjMe1XfuqApT7Dilv5JRgNgWpIDSz4o
+OuyX0e/zdS0gcrvSeFxr8fQjQRgNqE=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:23 2025 by rpki-client