Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d537670c-8888-3bb1-8d7f-a375077afc86.roa
File:                     d537670c-8888-3bb1-8d7f-a375077afc86.roa (raw, json)
Hash identifier:          q7RxTY6nXpo80XkiWV+HcuxgJ4qoBxXfpnJADexcqbY=
Subject key identifier:   53:80:10:3A:8D:A4:B5:D8:B8:C0:E2:F6:8A:BF:A1:FD:08:A0:86:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161725F134559CA06057940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d537670c-8888-3bb1-8d7f-a375077afc86.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        47.2.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:72:5f:13:45:59:ca:06:05:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=977e498b-5276-40bd-af06-11f22124fb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:62:3b:7a:23:2d:52:84:88:60:4c:d1:0e:
                    40:13:22:e6:6e:9e:db:66:a1:1d:20:c5:f8:01:d1:
                    79:dc:19:9d:d8:6f:1e:90:7c:77:e1:46:55:bc:ec:
                    74:cd:41:3f:66:81:d1:4f:3c:73:2d:d6:60:ea:44:
                    52:3c:56:49:0f:e1:24:19:45:62:f9:1a:ee:23:28:
                    e2:63:97:02:09:f7:7d:a2:20:fc:f4:9a:38:50:a8:
                    b0:c7:49:e8:54:da:52:ab:f9:43:d5:4a:cb:b7:0f:
                    10:b1:6d:f6:71:f7:73:af:4f:68:89:db:7d:68:58:
                    14:a8:8b:17:59:f4:cb:fb:69:77:c4:60:fa:8c:87:
                    d1:1a:de:3f:94:ce:62:f8:15:de:95:31:c4:c9:b2:
                    56:97:2a:2f:52:e3:02:9d:65:86:7b:7b:35:8d:51:
                    b0:e0:41:2a:ad:a5:0e:85:67:e3:9a:aa:3a:32:06:
                    a6:db:62:99:97:f4:19:9a:b6:26:97:a1:a9:f8:5d:
                    e2:84:db:05:d0:ee:3a:9d:cc:96:3a:4c:40:4a:5c:
                    34:29:0e:fd:bc:29:25:4f:b5:96:66:07:eb:37:9d:
                    fc:06:80:cd:8d:66:a2:35:5d:29:9d:84:27:12:52:
                    83:20:bc:cb:ac:c1:54:d8:9b:67:bc:31:5e:8c:ae:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:10:3A:8D:A4:B5:D8:B8:C0:E2:F6:8A:BF:A1:FD:08:A0:86:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d537670c-8888-3bb1-8d7f-a375077afc86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.2.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:3a:46:55:fb:49:c6:1e:8a:f7:b8:26:56:52:59:53:42:
         17:fd:6c:89:8e:6b:fa:7a:07:31:be:20:d7:69:9d:d8:c6:4c:
         e8:ef:53:69:0c:18:47:90:9e:e3:ea:d1:c5:2a:c6:2f:44:ea:
         c8:bb:aa:ca:e7:56:b5:33:43:e1:9c:f3:51:a2:8c:e6:ee:35:
         c9:57:7c:6b:d9:ae:d4:e5:d6:53:ca:75:55:9d:2e:7e:f5:74:
         af:59:ae:30:2b:71:b6:c5:b8:e9:90:4d:01:30:a4:6c:53:ac:
         2f:d9:b6:6b:e4:15:8e:d4:fe:64:2b:66:46:e9:60:2e:29:4a:
         f1:88:c6:13:59:f3:ce:7e:4d:82:79:e3:53:96:ea:1e:8c:ac:
         7d:09:83:9e:c3:b5:b4:b1:d2:3d:df:30:2c:65:d9:9a:a7:47:
         32:02:1e:14:77:b0:c9:a9:9a:3f:9c:9f:c0:8b:0d:3d:54:65:
         d8:5b:1b:f0:7f:c1:07:87:3d:f3:59:f3:50:dc:62:d0:06:b8:
         16:63:35:c0:40:9a:fc:af:da:d3:b2:bb:9d:a0:94:84:ef:b3:
         11:fd:b3:31:f6:23:e0:00:3a:98:08:df:d3:59:59:5f:91:6c:
         15:ba:cf:c1:66:70:b1:74:fa:eb:ba:71:a4:99:a2:45:3d:a1:
         84:a4:79:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXJfE0VZygYFeUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OTc3ZTQ5OGItNTI3Ni00MGJkLWFmMDYtMTFmMjIxMjRmYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKFiO3ojLVKEiGBM0Q5AEyLmbp7bZqEdIMX4
AdF53Bmd2G8ekHx34UZVvOx0zUE/ZoHRTzxzLdZg6kRSPFZJD+EkGUVi+RruIyji
Y5cCCfd9oiD89Jo4UKiwx0noVNpSq/lD1UrLtw8QsW32cfdzr09oidt9aFgUqIsX
WfTL+2l3xGD6jIfRGt4/lM5i+BXelTHEybJWlyovUuMCnWWGe3s1jVGw4EEqraUO
hWfjmqo6Mgam22KZl/QZmrYml6Gp+F3ihNsF0O46ncyWOkxASlw0KQ79vCklT7WW
ZgfrN538BoDNjWaiNV0pnYQnElKDILzLrMFU2JtnvDFejK72oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOAEDqNpLXYuMDi9oq/of0IoIazMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDUzNzY3MGMtODg4OC0z
YmIxLThkN2YtYTM3NTA3N2FmYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELwIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIueOkZV+0nGHor3uCZWUllTQhf9bImOa/p6BzG+INdpndjGTOjvU2kM
GEeQnuPq0cUqxi9E6si7qsrnVrUzQ+Gc81GijObuNclXfGvZrtTl1lPKdVWdLn71
dK9ZrjArcbbFuOmQTQEwpGxTrC/ZtmvkFY7U/mQrZkbpYC4pSvGIxhNZ885+TYJ5
41OW6h6MrH0Jg57DtbSx0j3fMCxl2ZqnRzICHhR3sMmpmj+cn8CLDT1UZdhbG/B/
wQeHPfNZ81DcYtAGuBZjNcBAmvyv2tOyu52glITvsxH9szH2I+AAOpgI39NZWV+R
bBW6z8FmcLF0+uu6caSZokU9oYSkeZg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:43:56 2025 by rpki-client