Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16a7a6f4-96e9-35f5-8928-d43d86557d10.roa
File:                     16a7a6f4-96e9-35f5-8928-d43d86557d10.roa (raw, json)
Hash identifier:          RowHgC9hpD6BtqeYTYkLJm/osr+HBrmpPfh2+mOSDgg=
Subject key identifier:   F0:87:8F:68:C8:9B:80:9F:EA:8E:9C:05:A0:69:A6:7D:B5:73:E5:52
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9D2324DC514405589790
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16a7a6f4-96e9-35f5-8928-d43d86557d10.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        96.36.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:9d:23:24:dc:51:44:05:58:97:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4795ccfb-e1c1-467a-aaab-fb1d1a055048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:03:9f:97:0e:fb:29:72:86:38:fa:d2:6a:
                    2e:49:47:f8:62:76:63:5b:4b:d1:d4:fe:02:3a:88:
                    7a:ba:6b:e6:96:35:87:fd:2f:b3:3f:29:cc:c5:94:
                    d2:88:74:25:11:bf:26:f3:8a:1a:67:60:a4:b5:34:
                    63:4d:57:64:56:30:82:18:9c:7b:7a:04:3c:be:0b:
                    b6:38:ff:ef:70:a8:aa:21:81:d1:0c:37:6e:c3:18:
                    98:eb:46:b2:32:e0:56:9e:83:d7:6a:21:c4:e2:b1:
                    2a:43:0f:45:22:80:54:df:e1:65:f2:06:d5:37:7c:
                    99:5d:6b:44:33:67:0b:6a:9a:50:32:ee:46:68:24:
                    54:74:d5:ac:ac:44:67:c6:e2:bd:e3:2e:67:b3:60:
                    43:97:dc:e2:c3:c9:dc:6d:80:45:d8:7e:0c:7e:13:
                    b5:dc:b9:4b:24:b2:a4:5d:7c:93:e2:85:85:34:81:
                    32:bc:96:64:cf:48:fa:d2:06:57:da:c2:88:a3:03:
                    aa:a9:aa:c5:27:37:5a:c2:56:3a:82:99:3b:98:e7:
                    1c:a3:5e:5b:5c:ef:d9:bc:a4:87:d2:52:b2:c1:2a:
                    99:bd:0b:13:85:6e:23:87:4e:16:57:45:31:69:7b:
                    61:06:94:79:f2:0b:ed:85:23:1d:e8:1c:43:21:b4:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:87:8F:68:C8:9B:80:9F:EA:8E:9C:05:A0:69:A6:7D:B5:73:E5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16a7a6f4-96e9-35f5-8928-d43d86557d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:d4:b7:ce:f9:50:39:d6:08:ba:4a:c3:01:cc:d1:01:52:
         8f:d7:56:ca:e3:9f:91:85:a8:42:07:9c:31:22:72:70:d3:31:
         71:ab:0f:35:ee:c2:0e:93:a9:cb:27:b0:6a:e6:d2:04:31:66:
         d5:9e:55:d4:f5:34:da:6d:a0:d7:7f:66:0c:f1:ce:17:74:ce:
         2a:33:fe:59:07:03:f1:c0:cd:b0:eb:ac:ba:29:30:8e:13:35:
         36:b8:d1:e0:be:c8:03:fe:70:34:c4:1b:64:50:7c:73:d9:2f:
         7a:e4:07:aa:b1:b7:91:b0:b5:e8:1a:25:0e:e3:a1:59:8c:48:
         e4:63:76:36:10:c9:47:81:82:af:55:04:ee:5e:a1:af:33:f2:
         0e:14:b9:b8:ed:51:1a:c8:4f:cb:a3:5c:a6:ba:9c:ca:99:11:
         63:7a:1c:14:88:ad:41:40:03:98:09:69:59:c4:f6:ed:84:b3:
         fe:6f:37:0c:b8:b1:24:db:cb:1a:ad:55:58:a4:a2:89:c5:5f:
         69:9a:97:61:5a:1a:e2:2f:ba:0c:c6:cb:e7:fa:e4:67:b3:60:
         c5:b9:ce:f6:c5:b6:09:70:65:5e:2c:a4:a9:fe:4d:b6:48:7c:
         1f:81:65:a3:f1:67:09:f9:bc:a9:25:cf:eb:e4:d8:a8:9f:2b:
         be:23:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:50:52 2025 by rpki-client