Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa
File:                     d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa (raw, json)
Hash identifier:          cYDX1l+Cqc62G6WtFgHbZn/dJFdFxFjJRi9rAIZeXI0=
Subject key identifier:   AD:57:C7:4E:4F:F0:40:D9:E8:2F:7F:05:64:22:76:12:B5:25:82:24
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DFDCBE6232B57C82BDD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.12.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:fd:cb:e6:23:2b:57:c8:2b:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=25c58459-8e49-4d24-9612-f262975e02d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:01:2c:da:01:23:b6:ae:1b:6e:46:04:1d:
                    2a:4f:78:d8:c6:35:d3:3e:e6:b9:78:be:24:d5:1d:
                    23:af:14:c0:12:bb:18:0c:f2:13:28:79:55:2d:95:
                    e1:bd:9d:c8:c9:83:50:8d:99:88:fb:e2:1c:29:a6:
                    42:ae:7e:1f:a1:b3:b3:1b:92:d8:5b:fe:ed:2f:78:
                    eb:e3:65:e6:bf:ed:c5:83:71:17:67:bc:25:55:49:
                    5d:9c:5a:13:5e:dc:96:3c:3e:33:a9:2e:c3:c0:f6:
                    2d:51:68:c8:bb:5f:e6:1b:c4:c7:3b:0a:cc:ee:e4:
                    61:f1:ba:c5:4c:05:21:5a:09:d3:56:61:d9:74:4c:
                    06:36:35:cb:c9:ab:6c:b4:ad:42:b2:70:92:00:6f:
                    d3:72:31:7f:03:98:da:d1:c2:96:26:36:54:12:58:
                    0b:c0:66:40:17:44:8f:b3:71:77:13:88:e0:93:c5:
                    d1:7a:4b:6b:28:72:98:f1:56:df:07:5d:9f:c4:32:
                    34:2f:22:b1:d4:8f:4f:8e:89:16:39:f0:38:ea:8e:
                    17:e3:a4:e6:ce:c0:6f:0f:b6:8f:5d:78:47:0b:be:
                    57:6e:73:45:46:63:86:2e:8f:ac:13:f0:ad:ea:26:
                    ff:80:56:46:1e:ce:8c:ef:e6:3c:dd:ae:bb:fa:56:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:C7:4E:4F:F0:40:D9:E8:2F:7F:05:64:22:76:12:B5:25:82:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0d528d8-d3e2-38fd-b18f-8ad1039369c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.12.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:84:20:be:10:28:ef:a3:55:bf:e9:81:3d:36:56:1a:ba:
         b2:8e:3b:65:c7:0a:58:ab:64:7a:63:70:5e:b1:c8:dd:9a:15:
         38:f5:91:de:6e:6d:3c:66:07:58:76:13:45:52:20:5d:30:3e:
         15:1b:5f:36:e5:97:ae:3e:af:6e:7c:0a:33:81:f7:3f:51:36:
         db:8a:21:06:c3:a9:0b:3c:ca:b0:23:b2:9b:f4:10:0d:f2:79:
         6c:35:5b:65:9f:0e:0a:f4:07:92:33:50:44:61:bc:e3:cf:6d:
         73:bf:10:a4:00:27:4c:a8:66:01:67:58:4a:cb:9a:26:c4:eb:
         fd:15:cd:84:40:74:6b:bf:a2:29:f9:60:ec:94:97:eb:b7:59:
         41:d0:5f:42:76:b8:d9:0d:0e:48:e9:0b:03:79:25:ce:d2:07:
         68:79:77:91:61:91:e4:8f:b9:54:9e:87:14:f4:33:0f:87:06:
         fd:75:bb:87:64:94:ec:14:ee:f0:75:ec:37:16:9b:0c:d0:05:
         db:fe:b2:3a:68:ca:0c:95:4a:ca:63:2c:04:89:66:f5:95:5f:
         14:f9:59:cb:66:d6:f6:8e:21:b7:ed:77:d6:b4:83:54:d1:74:
         32:d2:bb:6c:c6:4c:db:90:9b:a2:73:08:be:ae:96:69:d7:ed:
         21:8a:28:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHf3L5iMrV8gr3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MjVjNTg0NTktOGU0OS00ZDI0LTk2MTItZjI2Mjk3NWUwMmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprcBLNoBI7auG25GBB0qT3jYxjXTPua5eL4k
1R0jrxTAErsYDPITKHlVLZXhvZ3IyYNQjZmI++IcKaZCrn4fobOzG5LYW/7tL3jr
42Xmv+3Fg3EXZ7wlVUldnFoTXtyWPD4zqS7DwPYtUWjIu1/mG8THOwrM7uRh8brF
TAUhWgnTVmHZdEwGNjXLyatstK1CsnCSAG/TcjF/A5ja0cKWJjZUElgLwGZAF0SP
s3F3E4jgk8XRektrKHKY8VbfB12fxDI0LyKx1I9PjokWOfA46o4X46TmzsBvD7aP
XXhHC75XbnNFRmOGLo+sE/Ct6ib/gFZGHs6M7+Y83a67+lbONQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1Xx05P8EDZ6C9/BWQidhK1JYIkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDBkNTI4ZDgtZDNlMi0z
OGZkLWIxOGYtOGFkMTAzOTM2OWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+8hCC+ECjvo1W/6YE9NlYaurKOO2XHClirZHpjcF6xyN2aFTj1kd5u
bTxmB1h2E0VSIF0wPhUbXzbll64+r258CjOB9z9RNtuKIQbDqQs8yrAjspv0EA3y
eWw1W2WfDgr0B5IzUERhvOPPbXO/EKQAJ0yoZgFnWErLmibE6/0VzYRAdGu/oin5
YOyUl+u3WUHQX0J2uNkNDkjpCwN5Jc7SB2h5d5FhkeSPuVSehxT0Mw+HBv11u4dk
lOwU7vB17DcWmwzQBdv+sjpoygyVSspjLASJZvWVXxT5Wctm1vaOIbftd9a0g1TR
dDLSu2zGTNuQm6JzCL6ulmnX7SGKKPY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 01:01:29 2025 by rpki-client