Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f1a74b01-d4fa-3a64-9edc-fb90b630a145.roa
File:                     f1a74b01-d4fa-3a64-9edc-fb90b630a145.roa (raw, json)
Hash identifier:          jd49H5wyMeo651CHKYGaRrK4w2hVtKQgFzecjAVuzjE=
Subject key identifier:   56:69:97:9B:4A:5D:7A:0D:04:9D:86:26:E2:EA:49:5F:DD:64:BA:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E19B29CBABA71A3398680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f1a74b01-d4fa-3a64-9edc-fb90b630a145.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        47.231.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:19:b2:9c:ba:ba:71:a3:39:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d7104fc1-9cb8-4a0e-949c-f1e2c8e3da6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:79:8f:90:9d:4b:4c:0a:79:8e:91:f8:e7:
                    9b:c1:be:f9:ec:cf:9a:94:7f:e4:d2:c7:d7:14:8f:
                    42:21:5b:59:45:b3:e3:10:f2:ad:5c:1e:7b:2e:0e:
                    3d:a8:8b:68:43:d4:a5:b6:7e:b4:63:45:3f:76:d7:
                    21:ef:1a:64:8d:a5:a1:b9:72:b3:bd:67:35:4f:67:
                    eb:ea:56:f2:b3:ab:81:49:13:1c:71:07:f3:db:b8:
                    ad:b1:ac:bb:3a:f8:f8:21:c9:0f:1e:35:aa:37:e7:
                    19:3c:cd:fb:7f:4e:4e:16:0d:f9:20:c3:53:4a:be:
                    ac:a7:63:09:7a:cd:6f:9b:51:22:6b:0a:f7:09:6e:
                    e8:0c:da:c5:0e:5e:eb:73:17:6f:09:80:53:9b:51:
                    f9:89:2a:41:64:24:88:b4:d3:8b:26:c7:54:62:75:
                    23:83:2e:d2:63:ea:ff:b7:56:1a:4f:0d:c6:79:47:
                    08:bc:04:c7:b1:27:b5:7a:56:c8:38:9b:9e:9f:0a:
                    8e:53:21:4d:fb:9d:28:b5:8e:42:63:19:a4:f0:e4:
                    af:43:d6:19:3c:ac:07:de:03:66:32:b1:e2:47:49:
                    1e:0d:d2:8d:41:16:be:ea:06:10:15:ca:7c:b7:c7:
                    e8:55:6c:7f:ae:e1:c6:2a:ee:83:2b:6d:99:90:9d:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:97:9B:4A:5D:7A:0D:04:9D:86:26:E2:EA:49:5F:DD:64:BA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f1a74b01-d4fa-3a64-9edc-fb90b630a145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:59:39:f1:f7:55:49:c1:83:c4:ae:01:10:8d:07:eb:f3:
         cb:b8:8c:05:4c:77:93:2e:8c:7c:41:90:11:7b:32:8c:ff:8b:
         59:c8:8d:92:aa:ca:e6:da:04:1f:42:99:62:e9:9e:e0:3d:6d:
         a6:11:ff:ff:b6:43:c7:f1:75:56:6e:6a:80:96:83:3c:d6:eb:
         44:52:c8:5a:7d:d9:70:5e:9a:4d:dc:b1:41:ab:fb:c2:92:bb:
         9b:4f:25:87:f7:11:8c:c8:86:5e:8c:30:7b:61:a2:b4:c1:33:
         cf:18:ec:4d:15:37:49:e4:99:7b:78:58:62:9b:dd:8b:87:7a:
         52:3d:bd:48:9f:32:c6:59:5b:e0:9e:de:54:df:e0:d8:31:28:
         59:54:17:48:87:2e:f0:77:74:e2:8e:07:34:bc:6c:71:1c:c2:
         a7:57:59:ba:40:fb:9e:fb:92:13:de:98:1c:25:ba:8b:fe:52:
         d8:9b:60:86:28:21:5c:52:bc:4a:71:7b:22:23:58:d7:6d:9e:
         ce:75:a1:11:b5:bb:b6:88:5a:c5:a1:44:a2:5b:34:7e:98:af:
         36:2f:49:23:7d:e5:37:4d:ab:e5:18:e9:e8:04:90:7c:33:6a:
         c7:8a:f8:c7:88:2a:ef:22:61:d6:b3:76:ec:0c:e7:4d:9f:a2:
         68:8c:d4:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHhmynLq6caM5hoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZDcxMDRmYzEtOWNiOC00YTBlLTk0OWMtZjFlMmM4ZTNkYTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpp5j5CdS0wKeY6R+Oebwb757M+alH/k0sfX
FI9CIVtZRbPjEPKtXB57Lg49qItoQ9Sltn60Y0U/dtch7xpkjaWhuXKzvWc1T2fr
6lbys6uBSRMccQfz27itsay7Ovj4IckPHjWqN+cZPM37f05OFg35IMNTSr6sp2MJ
es1vm1Eiawr3CW7oDNrFDl7rcxdvCYBTm1H5iSpBZCSItNOLJsdUYnUjgy7SY+r/
t1YaTw3GeUcIvATHsSe1elbIOJuenwqOUyFN+50otY5CYxmk8OSvQ9YZPKwH3gNm
MrHiR0keDdKNQRa+6gYQFcp8t8foVWx/ruHGKu6DK22ZkJ0FBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZpl5tKXXoNBJ2GJuLqSV/dZLrwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjFhNzRiMDEtZDRmYS0z
YTY0LTllZGMtZmI5MGI2MzBhMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDL+egMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrmWTnx91VJwYPErgEQjQfr88u4jAVMd5MujHxBkBF7Moz/i1nIjZKq
yubaBB9CmWLpnuA9baYR//+2Q8fxdVZuaoCWgzzW60RSyFp92XBemk3csUGr+8KS
u5tPJYf3EYzIhl6MMHthorTBM88Y7E0VN0nkmXt4WGKb3YuHelI9vUifMsZZW+Ce
3lTf4NgxKFlUF0iHLvB3dOKOBzS8bHEcwqdXWbpA+577khPemBwluov+UtibYIYo
IVxSvEpxeyIjWNdtns51oRG1u7aIWsWhRKJbNH6YrzYvSSN95TdNq+UY6egEkHwz
aseK+MeIKu8iYdazduwM502fomiM1NA=
-----END CERTIFICATE-----
Generated at Fri Oct 17 05:00:30 2025 by rpki-client