Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/023f1361-a815-3bed-a4e7-86b25a418071.roa
File:                     023f1361-a815-3bed-a4e7-86b25a418071.roa (raw, json)
Hash identifier:          mf4ZLQZo8vVibJ4EZUHMPN/G6pgZm0fFMLmQ4XQPtyw=
Subject key identifier:   05:F1:6B:C8:B2:C9:60:39:83:0C:A3:C4:F2:CD:F6:8D:42:6E:2F:C7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9C7E6517DA852E35D080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/023f1361-a815-3bed-a4e7-86b25a418071.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        75.138.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:9c:7e:65:17:da:85:2e:35:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ff4fb863-ed1f-4797-910e-32ec631379e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:7f:06:5c:3f:1d:b7:e3:c3:02:cd:5d:0c:
                    e1:17:69:62:bd:9d:44:92:7d:34:2a:37:d2:d0:d9:
                    51:07:18:b3:7a:1c:8d:9c:92:ac:f7:9e:4c:b5:5a:
                    de:5d:72:25:f3:38:1b:17:b9:0d:b8:86:22:e7:33:
                    89:80:80:8b:d5:fb:d3:de:4d:42:3a:dd:5f:dd:dd:
                    79:d1:82:7a:0e:64:b3:4c:a7:09:88:a0:8c:b6:a3:
                    30:43:87:cf:02:6b:be:a1:96:60:d5:0c:fd:7e:8d:
                    26:eb:67:d3:53:45:60:ee:bf:fb:f9:95:3d:1a:1f:
                    02:71:3a:2c:90:c1:d2:53:08:1b:6b:cf:27:fd:a5:
                    e4:88:45:e5:43:33:f1:2e:1f:f1:6f:e7:fb:5d:fa:
                    ec:79:30:65:2c:36:30:65:51:46:fe:99:7e:47:ed:
                    ca:15:fc:ec:d3:80:ac:be:77:b6:2a:7d:72:8c:87:
                    c9:71:3a:d8:5d:9c:69:79:7c:c8:46:41:47:85:e3:
                    a5:71:0c:21:37:f9:b6:a6:68:13:07:8f:c6:8c:68:
                    d3:fc:0d:4e:b6:e8:ee:63:08:10:4c:f7:38:e0:f5:
                    66:ee:ec:7e:0a:e8:af:63:6d:da:21:be:46:27:3c:
                    bf:32:a4:5e:46:4f:89:5d:fe:d8:c9:93:8f:c9:35:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F1:6B:C8:B2:C9:60:39:83:0C:A3:C4:F2:CD:F6:8D:42:6E:2F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/023f1361-a815-3bed-a4e7-86b25a418071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.138.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:32:c1:36:3e:eb:53:c6:6c:b5:a1:65:f3:7c:a6:0a:51:
         9b:df:71:44:14:51:0b:fd:34:e4:ea:6e:79:ff:34:f8:f4:d6:
         36:76:8b:da:2c:5f:2d:51:dd:d9:d2:35:bb:a0:49:43:79:b1:
         37:06:91:82:6a:c5:dc:be:fd:7f:21:ef:db:14:9a:96:e5:75:
         00:27:68:f2:da:e5:0b:a7:9d:7e:75:63:2d:44:9d:48:ff:1c:
         d7:fd:7e:17:ed:0e:a2:e3:d2:af:46:83:46:9f:0f:9d:5b:4c:
         57:1f:af:0c:64:27:5d:cb:2f:42:f3:1a:c4:1f:ec:a4:12:22:
         5f:3e:68:ea:65:96:b7:8c:b9:d7:0e:7c:20:8b:9c:98:49:52:
         d2:b9:9a:21:29:03:3f:0b:4e:7f:1c:e8:ce:8f:b2:7d:be:c1:
         03:f3:a1:fa:7b:82:c0:91:f0:b6:e3:25:4d:55:54:11:6b:8e:
         f9:a5:dd:cc:a4:3a:cd:3d:84:8a:c4:4e:71:42:0f:eb:dd:eb:
         e3:b3:9c:96:c0:5d:69:8f:c7:67:e1:e2:a3:49:39:dc:a2:7e:
         91:8d:35:c0:3f:31:cd:19:fa:50:df:96:ca:d8:3c:1a:56:93:
         d2:6f:63:9d:03:ad:d5:90:1b:36:21:73:90:54:45:a1:c2:2d:
         cd:f7:98:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:21:36 2025 by rpki-client