Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0065326c-b6fc-3f37-b1e0-e43a7697395f.roa
File:                     0065326c-b6fc-3f37-b1e0-e43a7697395f.roa (raw, json)
Hash identifier:          plbADPHxwb/l9AdnnM/cuiVHyTSZwSE3i3w6xVbce8A=
Subject key identifier:   0E:43:16:1D:EA:C3:82:D6:17:01:EF:BE:81:67:EE:C5:75:21:B6:8E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9797F951711C34932000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0065326c-b6fc-3f37-b1e0-e43a7697395f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.86.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:97:97:f9:51:71:1c:34:93:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f40101ca-88fc-4df7-8645-bee03361a7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:a7:c7:21:2d:e9:62:68:5b:7e:95:8f:bb:
                    e7:99:95:4b:0b:0b:48:cb:3a:b8:a3:52:58:e6:94:
                    59:d0:41:93:00:d8:8a:f3:b1:0c:a6:cb:39:d1:f4:
                    0d:5f:18:a5:79:d5:d1:08:fa:46:0d:8b:a7:b0:6d:
                    1b:31:67:7a:27:00:fc:91:b9:43:ab:57:2a:d4:a5:
                    b3:5a:bb:35:79:42:95:cd:f2:ac:ca:04:f3:75:33:
                    3a:54:18:f2:99:d5:6d:95:a3:e8:33:2d:6f:f2:9a:
                    a7:b2:d5:7c:5f:b2:f4:70:30:fe:3e:f1:b9:91:86:
                    f1:2f:c1:02:3e:5e:d1:d2:bf:00:b2:00:c6:54:4c:
                    d9:95:38:f7:65:6a:82:e7:cf:36:72:4a:a8:81:f7:
                    99:8c:fa:04:54:23:73:aa:24:0f:cc:48:97:43:50:
                    ce:b6:5c:9e:4f:9a:5c:46:c4:d4:3f:17:a0:b4:c0:
                    ae:b2:b4:eb:d3:55:0a:4d:5e:2a:f4:a9:57:2e:7b:
                    cf:31:dc:f9:86:d1:87:3f:08:31:b5:5f:19:fb:5f:
                    53:1c:fa:17:a3:fe:ba:7e:c5:cd:71:d5:06:db:96:
                    f5:5b:a6:a3:6d:f2:45:1b:e6:7c:c7:0d:e9:74:fc:
                    d7:67:c1:34:6b:6b:87:ee:8a:bf:fc:5c:70:37:2a:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:16:1D:EA:C3:82:D6:17:01:EF:BE:81:67:EE:C5:75:21:B6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0065326c-b6fc-3f37-b1e0-e43a7697395f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:06:f9:c0:1f:61:b5:58:8a:1f:d2:76:0d:8f:d4:99:28:3d:
         eb:e4:48:b5:2d:a1:7b:b9:e6:da:8c:41:cb:53:ea:63:93:71:
         1d:8b:79:48:e4:3a:4b:5d:40:35:75:8a:70:5f:f9:ac:24:c9:
         7d:84:5b:e4:ea:04:e9:85:5c:d4:bd:84:04:63:9a:6f:6f:f6:
         3b:db:50:a5:73:42:b2:a7:05:c6:62:33:a4:26:0d:92:f7:d1:
         e5:6d:0d:0e:ec:f3:fc:f8:59:9e:03:ac:26:0c:fd:e9:f5:1f:
         57:28:da:ef:20:b1:33:31:7c:7b:95:f9:69:c6:37:9f:5b:e9:
         62:d4:6a:36:a2:36:47:f1:b6:4b:83:dd:e1:16:79:73:3d:4e:
         df:2d:d3:c6:a5:84:ae:30:6e:33:62:50:af:34:66:17:80:ea:
         1d:bb:13:d8:86:02:4a:aa:45:29:d6:8f:6b:a0:cd:98:4a:c2:
         f0:ce:ee:16:ab:a1:23:b1:d2:33:d1:42:c6:0b:8b:7d:a1:a1:
         8b:71:d9:19:22:80:d0:a7:83:dd:94:78:ba:a9:c2:14:41:e1:
         9b:67:c6:7c:17:56:4b:b9:aa:e0:61:78:b1:bf:1b:90:ad:dd:
         46:fd:88:fe:c7:49:b5:f9:d2:1d:36:b5:fe:91:12:b2:f0:4b:
         d5:c7:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:31:23 2025 by rpki-client