Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5e5a061-cd80-3a8b-901f-06a6fd366d27.roa
File:                     f5e5a061-cd80-3a8b-901f-06a6fd366d27.roa (raw, json)
Hash identifier:          ++qnzrUmupjOA5Net5OW22IXSepfJWf4s4PBOKC3joI=
Subject key identifier:   11:C6:59:34:29:B7:5C:3D:25:BB:02:68:D7:FA:CC:15:2D:16:3F:9C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16147D07B337783F2BE1280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5e5a061-cd80-3a8b-901f-06a6fd366d27.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        128.92.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:47:d0:7b:33:77:83:f2:be:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9b41daba-00d1-49f4-893b-dbe6358b717e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:15:52:28:03:75:f3:f0:ff:4c:77:f4:f6:
                    b0:3c:eb:3e:a8:53:6e:f0:a6:cf:ee:4c:f2:a7:cb:
                    52:9b:28:4e:82:7b:53:47:49:46:fb:ce:31:d2:3f:
                    3e:03:3b:f5:1c:f8:a4:e5:45:c7:de:31:7d:29:35:
                    b5:90:0e:50:00:8f:f5:7d:46:db:4a:fc:af:23:1d:
                    71:d2:69:0b:bd:f1:c4:45:69:28:b5:7f:d4:7d:8e:
                    5c:01:3b:6e:71:52:43:2f:c1:e3:37:7f:05:71:02:
                    04:2a:98:e5:83:0b:8d:f0:bd:b4:1c:d5:67:93:37:
                    ad:be:aa:76:de:23:d6:17:ae:e1:ab:52:23:25:d0:
                    bb:ce:88:d8:c2:9f:5d:7d:b9:7f:ef:fa:32:60:16:
                    1c:cf:7c:66:79:d2:52:f2:0a:51:48:76:30:eb:43:
                    95:c6:b9:62:1a:e4:55:36:ba:f3:11:e7:ae:09:59:
                    5c:c7:52:b4:04:ff:46:1b:dd:67:4a:c3:90:48:2a:
                    2a:04:f8:d8:c3:b7:d9:c0:f4:09:d8:29:1c:f0:2c:
                    61:12:78:fa:78:53:8c:cc:ce:21:5a:fd:1c:2b:65:
                    0c:10:73:fd:b7:58:8e:a3:5d:7a:d6:e8:1d:19:a3:
                    48:97:37:01:69:f2:75:45:d0:cb:bb:c2:8b:0b:39:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:59:34:29:B7:5C:3D:25:BB:02:68:D7:FA:CC:15:2D:16:3F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f5e5a061-cd80-3a8b-901f-06a6fd366d27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ee:a9:b4:f4:11:76:12:8b:23:7d:5b:f6:fd:0a:ac:17:51:
         4a:d9:85:3e:49:40:16:e7:0a:bd:1e:d8:aa:40:c8:8b:35:08:
         b3:87:ea:93:22:ae:d9:e2:09:ff:b3:63:4e:a7:f4:3d:17:4a:
         7c:ab:39:3f:29:db:85:e8:f6:60:61:d7:66:53:8c:0b:5d:c8:
         c0:63:5c:43:8f:12:96:62:e5:20:65:e8:e4:39:fa:f7:83:50:
         79:5c:00:49:20:00:37:58:10:47:a6:e8:08:2c:c1:9e:dc:72:
         78:0a:76:8c:89:ad:c0:00:02:94:db:4f:fa:26:ba:44:e8:c2:
         50:e1:c0:28:75:3b:6c:18:21:6f:90:e8:64:83:86:7e:72:f2:
         7a:c7:40:01:19:c4:35:6a:6e:e9:fb:7d:54:d5:60:da:0e:de:
         dc:a1:94:3d:29:72:7f:03:e1:a7:8d:96:30:63:d8:96:b3:2d:
         da:60:ad:1e:f0:4e:52:72:77:1c:b3:d0:6f:ec:b9:c8:54:07:
         5f:ea:04:ad:b3:a2:03:24:18:78:12:3b:ab:7e:c5:be:04:b0:
         eb:2e:08:0f:d3:72:23:6b:c1:c4:65:0b:cd:b6:76:92:37:a1:
         1e:cf:b5:db:a0:51:a9:a0:28:ee:b1:e7:be:42:0c:b4:f8:18:
         b7:7a:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:29 2025 by rpki-client