Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c1bdc585-49a3-3a78-a379-a48a1cbb8e48.roa
File:                     c1bdc585-49a3-3a78-a379-a48a1cbb8e48.roa (raw, json)
Hash identifier:          m1271mlT+8uzMu6s+Uo69Klg3oEjMmq9ppHRMzoqxXs=
Subject key identifier:   BE:DC:32:CE:6F:3E:1E:F1:33:03:8C:8C:73:AD:7A:C2:1B:59:76:32
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1616C4804BACB81648F4000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c1bdc585-49a3-3a78-a379-a48a1cbb8e48.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        192.62.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:6c:48:04:ba:cb:81:64:8f:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3fbb7dd1-6a9a-4ff2-9098-9e2bb14a8b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:91:44:a6:85:87:c8:8e:53:2f:06:21:fa:
                    2e:0f:2e:17:2e:ef:bb:3f:a8:91:7f:d4:27:41:33:
                    4b:f2:cb:a4:05:53:c2:05:7a:d5:e8:0f:fa:30:a8:
                    60:82:c3:52:3d:d1:89:b6:b3:3b:5a:e0:b8:58:76:
                    4d:db:c7:59:86:eb:e7:f0:60:10:e4:b6:ff:e9:ff:
                    1d:8a:63:6f:bf:91:ed:37:50:84:ec:2e:a5:32:e7:
                    05:5e:61:11:68:42:79:92:7d:d1:03:b3:ca:a3:07:
                    79:ad:05:b6:03:7a:a8:e3:d1:e5:bf:93:c7:d6:11:
                    51:a9:32:27:87:52:72:c9:86:cb:30:1c:31:e9:cc:
                    a6:c7:f8:b9:db:93:d0:ee:40:df:15:fe:25:1e:77:
                    42:fb:97:f3:4f:96:41:a1:90:70:2f:21:78:bf:70:
                    07:c5:7a:28:9e:b8:33:e6:37:38:dc:ba:ff:4a:6a:
                    1e:e8:53:da:37:6f:14:bc:2d:6d:7d:5f:3b:71:0d:
                    04:47:6b:7b:45:0b:00:af:60:dc:0a:69:2b:78:71:
                    f4:ac:c5:1a:f6:cc:8a:c5:18:8e:5d:73:97:c3:94:
                    ff:53:76:38:60:29:ee:5a:de:40:7e:4e:5c:1f:1e:
                    38:b7:92:37:ee:bd:00:d8:8c:1a:dd:06:f3:96:95:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DC:32:CE:6F:3E:1E:F1:33:03:8C:8C:73:AD:7A:C2:1B:59:76:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c1bdc585-49a3-3a78-a379-a48a1cbb8e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0f:55:51:fb:0f:61:6a:c8:00:26:3c:a9:1c:6b:3d:a9:fd:
         89:f5:99:3f:85:65:a8:d3:98:74:f1:9e:4a:78:96:5d:4c:da:
         b9:f6:68:fb:ce:6b:2d:0f:2a:a3:6b:22:5b:a1:b5:c3:48:e5:
         06:be:05:e7:6e:c3:84:92:7d:ce:fe:1f:d8:6a:63:11:d0:9c:
         b1:1b:33:3a:81:e3:1b:34:99:4c:dc:a9:f0:4f:4c:f2:a4:40:
         49:f0:53:68:e5:fc:92:81:18:e3:c8:fd:18:97:41:74:2e:79:
         44:2d:94:97:6a:b7:6d:e9:95:d0:25:fe:f1:fa:8a:b4:c0:be:
         8d:6f:55:9a:f0:92:92:da:af:7c:02:6a:de:ce:b3:79:87:ab:
         f8:e2:c3:89:fb:06:5f:fb:db:32:ad:e6:1a:cf:d8:87:84:13:
         89:26:43:dd:e5:87:d2:ec:e9:3e:9c:a3:59:86:2b:2d:a7:98:
         96:c8:42:e6:59:9f:28:de:c1:c5:b1:5f:01:9c:76:3c:dd:a2:
         7d:c2:bd:dd:67:42:1e:be:3b:0f:25:5e:52:c2:f4:a5:4e:76:
         3e:55:e3:3e:61:c8:ef:91:13:bf:f0:0f:47:b0:39:80:38:6e:
         e1:6f:f0:8d:c3:cb:c6:02:75:22:ca:4c:a5:8d:1d:5b:34:de:
         e9:63:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:41 2025 by rpki-client