Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c6f4efc9-96c8-359c-aa3e-84d31f9b0ad6.roa
File:                     c6f4efc9-96c8-359c-aa3e-84d31f9b0ad6.roa (raw, json)
Hash identifier:          5Fp+U7us4mZB0z+sZOUp1guVuqV+cwP5JhbAlR6SZKA=
Subject key identifier:   85:82:6C:DB:CC:95:25:AE:83:1F:B0:61:E3:2B:1D:C8:C3:E5:B5:82
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E34BAD7F0D60414509F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c6f4efc9-96c8-359c-aa3e-84d31f9b0ad6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        47.35.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:34:ba:d7:f0:d6:04:14:50:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=d7cd3d34-7956-41ac-af6c-e06221333b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:81:ed:14:09:de:ba:e3:fd:a3:4f:78:19:
                    ce:3e:53:c5:90:35:74:85:a5:0d:f2:b9:7c:e0:a5:
                    96:53:e0:bb:5c:cf:d1:8d:d9:d2:13:65:6c:ce:96:
                    0f:1f:df:14:36:72:25:09:2a:79:2f:87:2e:43:f7:
                    2f:f2:ae:8d:68:d5:8f:f3:5a:ed:a6:79:f5:e2:f9:
                    10:c1:92:86:75:3c:3f:ea:30:b7:7a:d2:3c:12:da:
                    05:96:1e:31:f4:08:ad:f6:76:a3:ed:85:aa:b8:0f:
                    02:cf:a5:eb:79:2c:80:e3:a9:2b:e2:f6:90:de:ad:
                    63:9a:be:3c:03:95:15:80:19:8f:8a:c3:62:e7:34:
                    1d:0a:3a:33:3a:99:ad:1d:df:f9:8c:73:3d:0b:03:
                    c6:0f:27:31:76:31:5b:d6:29:50:27:e4:5b:da:e9:
                    8b:a4:26:0c:2e:86:2a:f1:e2:09:f2:38:35:5e:33:
                    69:3a:77:89:b6:21:82:cb:93:22:50:27:80:9c:01:
                    b5:5f:d8:6d:32:70:6e:1d:a3:d1:61:3d:13:56:09:
                    ce:0f:1a:45:ac:e8:37:00:f3:c6:49:fd:d9:74:90:
                    bd:17:f2:64:2e:d9:a0:b0:17:5f:78:5f:c1:7b:06:
                    ce:f8:d6:15:3a:82:06:b7:98:63:9b:e7:ed:71:6d:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:6C:DB:CC:95:25:AE:83:1F:B0:61:E3:2B:1D:C8:C3:E5:B5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c6f4efc9-96c8-359c-aa3e-84d31f9b0ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.35.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:fc:84:26:8f:8a:b9:4f:35:9e:a5:70:8b:25:21:9a:48:
         f1:0c:91:a0:5e:20:df:2f:06:32:d2:37:f9:47:9c:53:97:2c:
         e9:4a:8e:99:36:f2:53:f2:65:31:66:2b:05:a8:82:44:7f:89:
         3b:79:8f:60:5a:71:3f:3e:1b:e2:72:56:d5:d7:ca:01:33:f2:
         16:66:3b:52:8f:3b:18:0a:de:b8:ef:48:cf:8b:52:b2:a1:f7:
         b9:e3:b0:a1:33:a4:96:df:9a:82:36:c2:83:3c:6c:8a:61:2f:
         59:61:b3:11:af:4f:0b:fe:08:b4:45:71:22:12:ae:06:f3:27:
         ea:3b:22:f9:9b:21:cf:35:c9:ae:ac:35:16:f3:64:4b:5d:2f:
         07:a1:3e:ab:72:cb:75:64:93:d4:8f:bf:71:68:81:3f:9a:a7:
         0e:f1:25:13:5e:e5:96:12:8f:5c:87:4e:99:44:3d:73:89:9b:
         95:6e:f7:f1:f2:a0:13:9f:e3:db:b4:a3:4d:5b:9a:db:57:a5:
         0a:c4:2f:5f:28:5f:59:f1:ff:d0:f7:d9:51:75:d5:2b:8a:25:
         38:68:3b:cc:32:b0:5d:7c:5f:f7:40:69:b6:c1:d6:07:ec:f6:
         ed:95:0f:ae:b6:4b:3d:59:79:6c:5e:ea:e8:20:1b:fb:3a:d6:
         f8:d1:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:39:59 2026 by rpki-client