Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2138f4db-0cb1-3a4d-8c06-9e1897b066c9.roa
File:                     2138f4db-0cb1-3a4d-8c06-9e1897b066c9.roa (raw, json)
Hash identifier:          NWlt8GHrKlRa5KMLRRNKfjIRhVQx2u83Nz2RLlQCHoY=
Subject key identifier:   33:F8:B1:95:E9:01:5E:FD:8B:F7:A1:5A:1F:32:D6:8D:00:85:E4:A4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DEE3D13389AD8B560A500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2138f4db-0cb1-3a4d-8c06-9e1897b066c9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        66.214.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ee:3d:13:38:9a:d8:b5:60:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=aa8af5e4-80cd-42cd-88ad-6e7d71782bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:5f:bf:db:f2:06:f3:e1:09:75:ee:1b:b2:
                    b4:fc:33:60:ca:9b:1a:56:48:8e:d1:24:8e:56:0e:
                    91:32:30:a7:e4:a2:ff:bf:ab:fb:07:37:ba:41:77:
                    e1:0c:d2:48:41:ef:7d:ae:c2:35:b2:64:ff:a3:a8:
                    84:5b:74:c8:96:17:ed:18:5b:fe:7a:b8:b2:09:ba:
                    a5:83:ea:cb:11:13:b9:1b:e2:8c:8a:96:67:6a:c4:
                    99:bc:f4:e5:94:c7:7c:00:45:54:a1:93:a2:23:89:
                    48:6c:2f:e2:30:bb:84:43:42:fc:7d:94:2d:49:21:
                    d1:91:3f:0b:51:56:1e:82:0b:b1:18:e1:42:32:f8:
                    2d:87:29:58:e8:9e:9f:12:90:3b:84:2d:57:74:70:
                    92:05:4e:ef:37:28:10:e8:ba:0b:77:cc:c1:04:60:
                    f9:44:fd:9e:2b:4f:17:be:da:c6:c9:58:c2:0a:fd:
                    15:50:cf:80:bd:55:05:be:5c:f7:15:f7:2d:d2:37:
                    a5:fe:55:92:39:f4:71:72:5d:e7:1a:43:6b:5f:30:
                    a8:05:b7:37:0e:f5:f8:9d:90:44:1a:59:56:d0:b0:
                    91:9d:92:61:ef:46:c1:cb:9e:00:aa:d9:96:74:71:
                    12:b2:bf:64:1d:d7:52:95:c3:90:ac:d6:db:a1:2c:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:B1:95:E9:01:5E:FD:8B:F7:A1:5A:1F:32:D6:8D:00:85:E4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2138f4db-0cb1-3a4d-8c06-9e1897b066c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.214.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:b3:66:8a:71:a8:8d:b3:01:4d:b2:fe:3f:58:5d:1f:85:
         e0:51:cf:f2:7e:25:d9:93:c9:f0:2c:bf:b6:21:a2:42:a6:77:
         f4:1c:d9:cf:1b:b1:5d:0c:cd:fa:72:91:3f:21:9b:46:a9:27:
         91:5b:b9:2c:f3:3c:4d:70:e6:82:79:58:35:5b:c3:61:3a:2c:
         7a:8c:c4:f5:b0:e0:87:f7:10:88:13:25:b7:1f:2a:ab:3d:0c:
         94:38:7d:3b:f5:ba:45:a7:4a:61:fd:c9:00:9f:86:e9:71:0f:
         ad:7e:45:f0:64:9f:c6:7c:72:f4:19:0a:1e:ec:01:dd:92:0c:
         ae:11:80:fb:f4:71:2b:77:c2:4b:11:48:29:d1:0e:a7:ed:f4:
         ea:ab:b2:22:70:06:00:e5:38:46:20:40:c1:59:46:18:3c:43:
         eb:5b:1e:12:d5:bd:ef:98:df:d4:3d:b6:16:48:ad:e2:70:90:
         7c:94:01:14:ad:29:52:ec:c2:bf:64:12:a0:82:6f:bb:92:da:
         87:fc:66:06:69:1e:c8:c1:8d:a7:ec:5e:11:45:f1:ea:6b:33:
         36:19:57:18:3d:fb:12:f0:57:76:1c:27:65:d3:80:bb:4d:f1:
         ea:54:2d:57:27:cf:26:9c:1a:f7:db:6f:57:d8:ad:e4:cb:57:
         2e:f0:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:00:31 2025 by rpki-client