Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd78512c-1940-3b10-8cf5-ca4732a4834d.roa
File:                     cd78512c-1940-3b10-8cf5-ca4732a4834d.roa (raw, json)
Hash identifier:          w85AHtiTD43dZIGcnMWwmVqXyG0gTVOHj2WjkI88JcU=
Subject key identifier:   B0:44:B8:F0:C1:92:23:38:FF:C3:01:E3:41:96:C0:CC:A7:EF:F9:E4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B3FAC924E96920B84C1A09B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd78512c-1940-3b10-8cf5-ca4732a4834d.roa
Signing time:             Fri 19 Sep 2025 17:51:20 +0000
ROA not before:           Fri 19 Sep 2025 17:51:20 +0000
ROA not after:            Thu 18 Dec 2025 18:51:20 +0000
asID:                     0
IP address blocks:        156.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:ac:92:4e:96:92:0b:84:c1:a0:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 19 17:51:20 2025 GMT
            Not After : Dec 18 18:51:20 2025 GMT
        Subject: CN=628d79fe-ae48-4393-94ce-112c6c39a88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:f8:84:77:01:c8:09:9d:24:87:5e:2b:fb:
                    e3:b7:00:bb:79:f1:c9:5c:5d:5c:b6:d4:3e:c5:95:
                    76:07:33:0a:76:94:8c:67:67:61:09:43:f8:02:73:
                    d5:bc:c4:0b:76:62:72:9e:cc:0b:76:27:81:5f:38:
                    54:4c:53:53:f3:04:da:26:32:7b:59:57:df:0a:da:
                    40:2c:fb:a3:11:5c:3a:3b:7f:95:f6:bf:f5:4e:d2:
                    7b:f1:76:60:36:46:2f:45:ed:bc:af:77:cb:75:09:
                    7f:3a:65:f5:16:d1:af:c6:69:57:a0:9c:bc:1e:6d:
                    2d:27:9e:2c:20:27:05:92:17:31:6f:2d:64:1d:db:
                    b4:42:61:37:29:7f:8b:91:52:f5:5b:77:fc:d8:fc:
                    14:e6:e6:38:17:e0:25:31:d7:cf:99:e1:01:17:4b:
                    d8:e0:a3:16:89:7d:1f:bd:a9:6f:30:9a:70:b4:f9:
                    db:3e:61:93:67:b1:ff:4a:72:cb:04:52:81:9a:ea:
                    1f:77:c0:7c:8b:bf:1c:7e:e1:a1:cb:22:9e:2f:e6:
                    23:ce:6f:d3:23:04:1f:84:5a:31:5a:1f:82:95:83:
                    07:73:ab:d9:69:ba:89:d1:c5:7f:89:6a:68:eb:93:
                    6f:a6:52:f2:d4:e0:12:ec:fe:37:08:c6:f3:f6:7c:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:B8:F0:C1:92:23:38:FF:C3:01:E3:41:96:C0:CC:A7:EF:F9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd78512c-1940-3b10-8cf5-ca4732a4834d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3c:56:67:4c:0d:4a:00:d3:14:3b:9c:fd:52:da:bc:e5:e5:
         82:d5:71:10:1c:6e:e0:e8:92:58:f0:04:6d:1f:64:94:0f:2f:
         f9:d7:9f:bc:40:fc:a0:8a:34:66:14:e3:00:5f:81:f1:cf:d7:
         78:a6:26:12:bb:32:8d:40:92:ad:9e:79:98:78:3e:e4:8e:ac:
         cb:53:06:bc:0d:df:90:05:5c:fb:be:2e:78:b2:8e:ff:58:3c:
         5a:b5:a7:96:14:be:66:a8:34:34:b2:53:e0:65:01:28:e6:67:
         94:cc:6f:b3:ff:ba:19:81:48:88:a8:70:22:36:01:35:45:18:
         74:03:4c:7a:e4:99:8e:6e:e7:91:96:a9:85:db:28:f4:1f:32:
         30:3b:c2:00:8b:ab:45:b1:cd:cc:c6:10:b1:a5:ae:7c:4b:9e:
         37:da:8f:3d:30:6a:a2:d0:21:db:f7:ce:fd:20:af:c8:32:fa:
         cf:11:4b:bf:30:b0:79:66:c0:d3:ed:9b:4e:54:8e:05:0c:7b:
         83:eb:04:b6:94:b6:b9:80:c4:06:09:7c:69:17:71:05:d0:cc:
         23:27:b5:6b:50:c7:ca:98:75:14:98:85:be:e1:2a:6e:82:2a:
         6b:b8:31:56:0c:82:21:cb:c1:7a:2a:31:c8:58:6e:3b:8c:74:
         67:3d:18:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs/rJJOlpILhMGgmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDkxOTE3NTEyMFoXDTI1MTIxODE4NTEyMFowLzEtMCsGA1UEAxMk
NjI4ZDc5ZmUtYWU0OC00MzkzLTk0Y2UtMTEyYzZjMzlhODhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EP4hHcByAmdJIdeK/vjtwC7efHJXF1cttQ+
xZV2BzMKdpSMZ2dhCUP4AnPVvMQLdmJynswLdieBXzhUTFNT8wTaJjJ7WVffCtpA
LPujEVw6O3+V9r/1TtJ78XZgNkYvRe28r3fLdQl/OmX1FtGvxmlXoJy8Hm0tJ54s
ICcFkhcxby1kHdu0QmE3KX+LkVL1W3f82PwU5uY4F+AlMdfPmeEBF0vY4KMWiX0f
valvMJpwtPnbPmGTZ7H/SnLLBFKBmuofd8B8i78cfuGhyyKeL+Yjzm/TIwQfhFox
Wh+ClYMHc6vZabqJ0cV/iWpo65NvplLy1OAS7P43CMbz9nw2JQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLBEuPDBkiM4/8MB40GWwMyn7/nkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2Q3ODUxMmMtMTk0MC0z
YjEwLThjZjUtY2E0NzMyYTQ4MzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnBMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXzxWZ0wNSgDTFDuc/VLavOXlgtVxEBxu4OiSWPAEbR9klA8v+defvED8
oIo0ZhTjAF+B8c/XeKYmErsyjUCSrZ55mHg+5I6sy1MGvA3fkAVc+74ueLKO/1g8
WrWnlhS+Zqg0NLJT4GUBKOZnlMxvs/+6GYFIiKhwIjYBNUUYdANMeuSZjm7nkZap
hdso9B8yMDvCAIurRbHNzMYQsaWufEueN9qPPTBqotAh2/fO/SCvyDL6zxFLvzCw
eWbA0+2bTlSOBQx7g+sEtpS2uYDEBgl8aRdxBdDMIye1a1DHyph1FJiFvuEqboIq
a7gxVgyCIcvBeioxyFhuO4x0Zz0Y6Q==
-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:38 2025 by rpki-client