Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f0ef5645-1d72-3fda-b4bd-34b5032393c8.roa
File:                     f0ef5645-1d72-3fda-b4bd-34b5032393c8.roa (raw, json)
Hash identifier:          SL0hLma8ZM5bH2QKnOFhJ2q/kgEPsV3r06HJL+vY1y0=
Subject key identifier:   CB:85:EA:01:10:DC:27:A9:85:A5:BC:17:AB:0B:3C:74:37:7E:8C:73
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161C22DD0F1706B5189C280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f0ef5645-1d72-3fda-b4bd-34b5032393c8.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        96.40.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:c2:2d:d0:f1:70:6b:51:89:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=2c0c95ac-5592-4e7f-9c15-7b96c49a745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:99:0a:d2:46:8d:13:b6:d6:1f:bc:c1:72:
                    6b:c6:34:70:6c:65:2d:8b:46:c7:d0:8d:cb:71:66:
                    75:0b:ef:62:90:3a:4b:6d:c7:aa:cd:d5:a3:f2:ac:
                    19:a7:7e:4b:17:70:f0:fb:77:20:bd:30:8b:fa:55:
                    fe:62:ca:d7:0a:cf:6a:4e:a4:1d:bc:b0:9d:82:71:
                    dd:95:eb:81:56:89:de:fb:71:78:99:7f:ac:e4:ec:
                    e4:03:0f:b4:e8:76:19:7f:da:ca:79:cb:8f:8a:60:
                    1b:4e:be:9c:ad:6f:6f:5f:18:43:e7:4d:ae:69:3d:
                    d5:00:25:4e:5d:1d:e4:a3:3d:7b:1a:c7:24:a9:bb:
                    a0:33:c6:07:32:c5:6d:9f:61:fc:c6:15:7e:73:fa:
                    cd:dd:6b:41:c5:93:f6:0d:c1:46:05:10:a8:8e:28:
                    f2:67:f7:0c:ed:29:ac:c0:be:55:bc:17:e8:b3:82:
                    e1:01:df:38:f7:c6:f1:c0:01:9e:09:5a:ab:96:26:
                    de:b5:2d:19:6c:49:23:a7:6c:28:1a:4e:5a:fe:92:
                    a1:5b:ed:ca:a3:a8:7f:09:c6:91:e9:83:62:03:c8:
                    38:91:87:48:e6:67:ff:5b:17:ca:5d:88:a7:52:d1:
                    6c:b0:07:b8:21:c0:a9:4e:67:78:89:17:25:8e:12:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:85:EA:01:10:DC:27:A9:85:A5:BC:17:AB:0B:3C:74:37:7E:8C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f0ef5645-1d72-3fda-b4bd-34b5032393c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.40.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:95:08:34:66:42:a1:92:8e:64:a1:7c:22:a6:9b:eb:35:4b:
         87:86:95:b1:1c:4d:b3:9e:f9:4e:49:90:86:85:cb:80:98:84:
         61:45:81:a1:e6:4f:98:b5:6d:34:50:89:b6:d0:2c:80:8e:94:
         48:c2:8d:a1:7c:63:be:39:9f:42:df:ff:48:77:d5:5e:bf:0e:
         99:ae:8b:aa:70:7c:3c:f4:27:71:cb:83:8f:0a:f5:0f:4f:16:
         b1:08:ce:c5:e9:9f:64:2c:bf:97:ec:07:42:5d:d1:26:a1:4d:
         6e:36:b8:4b:eb:33:c0:4d:68:b7:3d:e2:d3:b7:01:85:b0:8d:
         ed:77:17:8f:6e:d5:60:5d:55:6d:23:bb:6a:55:29:b2:ea:61:
         50:a2:b5:f2:a9:33:9f:f9:e3:3f:3a:e3:71:f6:6d:93:bb:90:
         0c:4e:96:4f:55:be:3b:d8:e3:e2:58:8f:c8:69:f0:bf:80:1f:
         bb:19:43:e9:e7:54:bd:8b:d2:17:ba:b5:86:90:85:87:fa:6d:
         09:79:ce:a7:eb:f8:dd:ad:0e:74:fa:c4:58:1e:05:d5:a8:d0:
         92:0f:91:10:96:33:7d:8f:0e:77:3e:67:c2:3d:52:4f:c3:50:
         5b:a5:da:7c:62:cf:91:a6:3b:29:4c:1c:2c:2d:cc:b4:fd:73:
         17:c9:10:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYcIt0PFwa1GJwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MmMwYzk1YWMtNTU5Mi00ZTdmLTljMTUtN2I5NmM0OWE3NDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKOZCtJGjRO21h+8wXJrxjRwbGUti0bH0I3L
cWZ1C+9ikDpLbceqzdWj8qwZp35LF3Dw+3cgvTCL+lX+YsrXCs9qTqQdvLCdgnHd
leuBVone+3F4mX+s5OzkAw+06HYZf9rKecuPimAbTr6crW9vXxhD502uaT3VACVO
XR3koz17GsckqbugM8YHMsVtn2H8xhV+c/rN3WtBxZP2DcFGBRCojijyZ/cM7Sms
wL5VvBfos4LhAd8498bxwAGeCVqrlibetS0ZbEkjp2woGk5a/pKhW+3Ko6h/CcaR
6YNiA8g4kYdI5mf/WxfKXYinUtFssAe4IcCpTmd4iRcljhJzSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuF6gEQ3CephaW8F6sLPHQ3foxzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjBlZjU2NDUtMWQ3Mi0z
ZmRhLWI0YmQtMzRiNTAzMjM5M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYCiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANKVCDRmQqGSjmShfCKmm+s1S4eGlbEcTbOe+U5JkIaFy4CYhGFFgaHm
T5i1bTRQibbQLICOlEjCjaF8Y745n0Lf/0h31V6/Dpmui6pwfDz0J3HLg48K9Q9P
FrEIzsXpn2Qsv5fsB0Jd0SahTW42uEvrM8BNaLc94tO3AYWwje13F49u1WBdVW0j
u2pVKbLqYVCitfKpM5/54z8643H2bZO7kAxOlk9VvjvY4+JYj8hp8L+AH7sZQ+nn
VL2L0he6tYaQhYf6bQl5zqfr+N2tDnT6xFgeBdWo0JIPkRCWM32PDnc+Z8I9Uk/D
UFul2nxiz5GmOylMHCwtzLT9cxfJEPU=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:24 2025 by rpki-client