Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3f20a80-815d-3c69-b527-25a6c3ef1630.roa
File:                     c3f20a80-815d-3c69-b527-25a6c3ef1630.roa (raw, json)
Hash identifier:          ChFIqph22I+lXCkTVlzQvjtdiHfgGOo29M8OehYsjH8=
Subject key identifier:   C2:CB:10:07:93:56:0C:84:B6:97:E2:CF:E9:A6:3F:19:CC:C4:AD:D4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161C49DBDFAFD9C76724800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3f20a80-815d-3c69-b527-25a6c3ef1630.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        141.126.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:c4:9d:bd:fa:fd:9c:76:72:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=bcd5c6dc-795b-48f3-9f6e-73bc81c3bb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:92:f8:d6:af:06:52:65:1c:ed:ec:9f:63:
                    20:7a:35:d3:71:53:6d:eb:a9:e3:83:e3:db:79:64:
                    3c:1a:24:5e:b6:2c:ae:8f:24:48:e5:8d:88:4c:27:
                    ce:45:2b:d7:ed:5d:55:ad:41:06:8c:6b:8e:4f:5c:
                    88:b0:65:c2:d5:7f:67:c7:49:9e:99:62:6a:3b:6b:
                    3d:c4:57:1b:15:95:a5:fa:0e:99:cb:d1:26:78:b3:
                    2c:b3:2a:41:9c:65:8a:10:0e:b0:e1:a9:6f:6f:09:
                    14:19:95:f2:43:42:90:0b:92:3a:95:76:40:4d:e3:
                    42:fc:8b:f4:80:eb:a9:b8:f2:8c:f7:11:e9:6c:31:
                    be:6d:ea:85:82:f1:71:58:ae:d9:e8:c2:c0:1d:c3:
                    43:c2:ee:e2:4d:8b:50:39:e1:06:7a:79:54:d6:67:
                    6d:ad:9a:68:e6:d7:17:cd:9d:31:d5:34:62:42:de:
                    bd:dc:5e:f9:96:40:59:d6:3c:6a:3f:50:67:33:1f:
                    1d:06:0b:03:80:23:c9:7b:91:66:a8:1d:9f:b3:9b:
                    c0:a9:c5:2a:ca:b2:a6:d1:69:a2:ca:66:d6:1d:98:
                    fe:33:a6:17:0c:b4:2e:fe:2b:f1:c7:24:aa:d6:7c:
                    d9:ea:2a:45:c2:3b:c6:2a:6e:e8:82:bd:d7:fd:c2:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:10:07:93:56:0C:84:B6:97:E2:CF:E9:A6:3F:19:CC:C4:AD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3f20a80-815d-3c69-b527-25a6c3ef1630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.126.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c9:3e:ed:6a:9f:6a:7d:68:3f:54:10:1a:02:90:5b:71:83:
         c5:4e:e7:80:10:76:b8:12:4e:3c:5e:a9:db:81:df:0f:a2:5d:
         d5:ad:79:24:5f:45:1c:59:64:36:99:1d:14:41:c7:fb:13:3a:
         5b:fa:79:17:b0:e3:5e:6f:47:a5:9e:da:c9:fe:ab:96:d2:4f:
         81:ac:0f:0a:17:25:45:86:8b:11:64:c5:0a:2d:67:f1:43:b7:
         b3:d3:d5:95:6b:88:d0:a8:78:cf:f0:97:25:8d:2b:27:b7:22:
         36:8a:40:e3:38:56:5b:ff:64:37:d5:6b:7d:8c:77:7b:48:4c:
         ab:19:d6:bb:22:bd:0d:f5:fc:fc:d1:c8:5a:e0:f3:ac:d4:bc:
         54:e1:3f:92:6b:b6:5c:7b:0d:93:1f:88:f2:99:ff:c4:56:18:
         95:ae:ec:1a:70:88:64:94:1a:d7:3a:e5:59:7d:fc:45:6b:35:
         38:6b:02:20:86:b1:2c:61:76:b4:26:be:38:05:ec:b6:85:d0:
         79:18:33:17:4b:89:2b:9d:50:5b:57:bf:52:22:b6:fd:d6:0a:
         97:0d:ab:67:ac:cb:24:be:f0:db:c4:d2:2f:bb:9e:a6:9e:03:
         91:a3:01:7d:df:c8:29:63:fc:1a:20:c9:f3:85:e9:39:42:25:
         4d:a0:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:39 2025 by rpki-client