Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af8250ca-191a-36bd-825e-576a263db428.roa
File:                     af8250ca-191a-36bd-825e-576a263db428.roa (raw, json)
Hash identifier:          +Uat38iN8Tv46bbJr+B6LAl0HO11VBCsi8Yrwwy5HvY=
Subject key identifier:   98:27:76:C2:10:F2:E9:50:00:D1:85:83:6D:33:B1:F5:BE:75:21:A2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1616743347A3AD8D0194B20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af8250ca-191a-36bd-825e-576a263db428.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.32.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:67:43:34:7a:3a:d8:d0:19:4b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e7f92510-5193-40af-a838-3e8abaf62f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:e7:6f:bf:a3:48:09:64:b2:f3:09:bc:fe:
                    0b:2f:40:63:35:a5:73:e2:28:e0:6f:73:18:3e:6e:
                    ce:f2:f4:4c:bd:96:cd:47:da:b6:2f:6f:de:97:ea:
                    72:14:a4:a1:80:cf:2a:54:4a:79:e7:7a:c0:0e:68:
                    9c:cf:86:af:fc:b1:8f:c5:12:b6:28:81:b5:b3:5c:
                    63:a1:96:59:1c:f3:b4:bc:c2:86:23:e1:cc:ac:22:
                    97:30:16:f8:69:47:23:c3:6e:b7:ab:63:df:ad:7d:
                    8e:15:a7:c4:7e:cf:3b:3e:8f:94:1b:da:07:44:e8:
                    5b:f9:65:24:46:8f:c2:42:e6:53:ab:e7:f7:0c:6e:
                    ef:e8:79:e2:bd:04:ac:6f:d4:a1:8f:00:d4:a3:41:
                    12:a1:6a:a0:6b:28:24:54:21:15:b7:fd:a6:32:81:
                    df:7f:26:bc:96:55:25:45:df:7c:f7:1e:ac:68:1f:
                    fb:2d:d4:91:f6:1b:90:0d:19:67:8e:a6:5d:44:d9:
                    60:39:c7:c6:cc:ca:7f:6e:2a:01:1a:e1:70:e1:b6:
                    c3:0c:78:7e:4a:04:a6:88:52:46:6a:06:ed:b2:1f:
                    9f:4e:8e:7a:c5:c5:42:00:d4:7c:d9:65:42:cb:6d:
                    f6:17:21:dc:b2:3e:f6:3b:6f:d9:81:bd:15:c0:8b:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:27:76:C2:10:F2:E9:50:00:D1:85:83:6D:33:B1:F5:BE:75:21:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af8250ca-191a-36bd-825e-576a263db428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.32.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a5:25:cc:ad:b4:45:c2:c9:7a:fb:f3:e9:ee:54:eb:58:ad:
         71:88:2f:d5:f9:96:d6:13:7c:35:4c:3b:f6:2a:b0:1d:e6:18:
         7c:14:e6:ca:5e:52:a6:d8:cf:34:47:d1:5e:c4:de:ea:50:e5:
         f5:ee:cd:fa:a1:19:43:fc:b7:4a:b9:97:60:21:65:50:01:89:
         1c:88:57:84:d7:71:4a:51:a8:c7:02:d8:58:87:15:b4:a9:ec:
         19:3b:09:6d:4d:94:22:05:d5:be:1c:a1:28:1e:bb:c9:54:7b:
         54:86:bc:eb:e6:30:e0:30:39:50:9d:2c:eb:4c:1c:8a:f0:3c:
         f2:3a:36:c4:d9:54:f6:25:43:a6:f7:9a:c6:3a:c2:f5:74:27:
         51:1f:7c:ac:e4:56:1d:ac:c2:80:cc:eb:e3:6e:81:c7:0f:22:
         e9:ae:82:4e:a4:a6:f7:54:51:8f:f2:5c:6c:15:a7:c1:6e:a8:
         24:b1:17:1f:4e:d2:59:c8:01:89:27:f2:41:cd:2b:4a:d1:b4:
         f2:7c:c9:2b:5a:60:fe:97:c3:89:48:61:0e:b8:ef:25:64:5f:
         a6:22:14:55:61:1c:c6:30:32:f1:1f:88:a5:d2:12:33:49:be:
         34:e2:68:bd:7b:3c:70:a2:3f:8d:6e:91:fd:25:a6:e9:b8:21:
         7a:07:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:13 2025 by rpki-client