Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fa34018-3211-39c9-8408-b8d66fc426b9.roa
File:                     1fa34018-3211-39c9-8408-b8d66fc426b9.roa (raw, json)
Hash identifier:          dO21zFF1yMmHuIR4AK3TPeSodQ2dhlE3KKBjCNImTwg=
Subject key identifier:   BA:99:8E:83:17:63:87:F7:4B:70:57:03:C5:44:A0:D6:F2:BB:79:D9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AAEAC50863D40E55B6E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fa34018-3211-39c9-8408-b8d66fc426b9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22291
IP address blocks:        71.86.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ae:ac:50:86:3d:40:e5:5b:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8962a86d-db98-4f7a-9509-714ccf557397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:05:e2:d2:f4:89:5a:bf:3a:2d:25:e9:23:
                    2c:5b:3f:7f:bb:4a:06:27:5d:ca:44:b1:68:27:ae:
                    c8:63:d4:2a:c4:5b:0f:33:9b:af:a1:ee:cf:f0:6a:
                    e2:04:e3:3f:f1:69:9a:d2:9c:5d:95:7d:84:76:c5:
                    d0:87:b0:cc:85:75:23:a6:ce:45:16:41:1a:7a:31:
                    dd:28:f4:84:f5:07:54:ec:39:6e:ac:4c:ff:64:d4:
                    2b:34:37:1f:70:39:57:7c:6e:ef:fa:32:80:21:e7:
                    d4:3f:b5:a6:96:c9:3a:1b:18:cc:8d:dd:53:60:bc:
                    5d:30:fa:9d:4f:74:cc:e6:6d:37:ca:24:21:09:8a:
                    e9:47:1e:3d:7c:f2:15:ce:b9:86:d1:96:40:4c:56:
                    bb:99:09:ec:f6:26:0c:69:56:d0:8e:af:0f:77:9a:
                    43:71:77:3d:99:2b:e9:45:6f:2f:c4:ca:a8:e0:b8:
                    89:48:52:1c:8f:b2:df:25:cb:17:e2:d0:74:58:f4:
                    fa:6e:e4:67:72:22:ac:b4:7c:12:39:a0:b9:57:15:
                    78:6d:14:85:b5:70:d9:67:25:cb:06:3d:61:c3:33:
                    86:65:e7:74:9e:4a:5a:ba:f7:5e:b8:0f:e9:2a:16:
                    fd:96:1b:c5:29:3e:d7:b1:a0:fd:ad:54:2f:f7:d4:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:8E:83:17:63:87:F7:4B:70:57:03:C5:44:A0:D6:F2:BB:79:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1fa34018-3211-39c9-8408-b8d66fc426b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:53:7c:64:08:f8:78:3f:67:6d:83:ed:45:a6:a1:9b:d8:
         c9:ac:09:8c:25:78:25:8a:4f:78:f9:9e:34:fa:33:fe:33:10:
         60:ad:a3:73:ab:7f:91:b0:30:2f:5c:b3:62:07:4d:54:c4:cd:
         d9:ef:d0:04:bd:20:76:2e:12:7a:87:99:25:07:d0:96:18:4a:
         b6:9f:7c:b9:a2:7f:a1:c0:aa:bf:75:87:35:c0:7e:f2:d7:be:
         11:b9:d4:8a:62:01:8c:6f:02:fe:91:eb:60:82:76:92:76:d2:
         cd:2d:52:b8:3a:ec:11:d7:2a:69:05:f9:cb:ec:72:eb:83:ed:
         e8:e6:61:29:22:06:18:86:77:e6:8a:59:be:10:2a:7b:22:26:
         eb:67:9a:04:45:a2:1d:b8:42:f8:0d:fe:e7:d2:53:58:72:c2:
         a6:73:9d:86:bd:97:32:d4:e0:50:62:46:7e:ff:18:96:2d:87:
         07:2a:8a:26:00:bd:7c:bb:27:c3:9a:5c:1a:85:8a:de:bb:99:
         b1:af:1e:19:62:de:f5:5f:65:e2:37:9c:78:fe:2b:2a:fa:5b:
         f5:62:1d:6d:41:b7:ef:0b:1f:de:2c:3e:a8:d5:43:e7:a1:88:
         12:23:b9:6a:d4:40:92:37:b7:1c:eb:01:85:08:b5:23:dc:3e:
         ae:32:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:18:20 2025 by rpki-client