Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2e28566f-7263-3976-b108-a3996823cc7a.roa
File:                     2e28566f-7263-3976-b108-a3996823cc7a.roa (raw, json)
Hash identifier:          suWPWMshzBPKqeNSOlZPXT5iI7VEqXw/x0aEdHQJWtc=
Subject key identifier:   89:68:8F:E5:87:4B:A3:9F:A8:FA:B6:BD:2B:B8:FD:9A:1D:D3:A6:37
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B238D94A1CB694C3D86C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2e28566f-7263-3976-b108-a3996823cc7a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        75.140.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:23:8d:94:a1:cb:69:4c:3d:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3f8e617a-c786-42d4-99ec-de15b2806ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:34:7b:92:f9:c6:8e:51:1c:0a:96:e2:5d:
                    a2:ec:c9:8d:ad:a0:00:40:bb:ba:5e:fb:99:28:32:
                    5f:ba:f6:86:36:bb:9d:c7:77:f2:10:1f:a4:00:26:
                    d2:e9:2c:b3:b2:ca:62:c7:54:f0:8a:7a:0d:44:a0:
                    87:92:65:96:63:0e:fa:88:ac:61:71:ef:11:29:67:
                    24:7f:cc:9c:d2:4b:e4:4b:54:91:94:c0:3d:23:cf:
                    26:43:d0:7b:0a:56:06:e2:17:fa:c8:62:06:49:d5:
                    dd:7d:77:d5:aa:2e:8a:10:99:06:b1:82:9b:d1:e5:
                    1a:ef:4f:32:df:10:cf:86:f3:41:74:cf:ad:07:8a:
                    11:6b:d4:c3:e3:0b:dc:cc:9b:e3:29:5f:9d:33:f1:
                    f5:a1:0c:b0:ea:bf:7f:51:92:dd:79:ed:f1:22:71:
                    de:b5:ec:ab:2c:a0:0d:1c:84:cd:01:1d:48:5b:35:
                    89:92:81:c9:5d:4d:78:d9:12:63:52:e9:ee:4c:1e:
                    1d:ff:c6:06:f5:3e:cb:49:8a:5d:16:cf:2e:60:f8:
                    60:41:04:92:0f:58:5d:95:d0:75:09:8a:aa:65:e7:
                    fd:f1:35:01:79:7f:30:a3:19:aa:d9:4e:51:b6:eb:
                    60:c9:40:af:2f:d0:6a:e8:a0:35:8d:1e:e5:ef:be:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:8F:E5:87:4B:A3:9F:A8:FA:B6:BD:2B:B8:FD:9A:1D:D3:A6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2e28566f-7263-3976-b108-a3996823cc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.140.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:f9:49:b8:fe:e8:90:45:11:58:69:d0:9a:02:49:47:57:
         b9:19:89:c6:21:75:62:fc:13:a2:58:55:bc:6f:3d:78:0c:d1:
         2e:4d:9b:65:8b:e4:7d:c4:6c:93:c2:8c:e2:2b:b0:b2:04:79:
         3b:53:d8:ba:3a:d6:5a:c9:ba:ec:22:df:82:6e:35:2a:46:eb:
         b8:a7:43:37:b6:29:02:0c:55:03:b9:d8:7e:af:87:e3:10:69:
         0e:9b:40:6f:4b:e9:0f:d0:9a:4e:95:6e:e1:cb:e9:1e:ec:49:
         07:a2:53:ce:3f:7e:11:71:d6:68:9d:f7:7a:27:4a:72:51:38:
         e2:e2:15:ef:d5:58:96:14:d0:4c:ee:48:16:f0:b4:0f:38:b7:
         78:e7:7d:c0:a5:c3:d4:2c:7f:49:e4:08:ae:a4:11:33:31:bf:
         0c:d5:8d:ad:00:87:a9:f8:c6:e9:1a:4d:5a:7d:97:06:9d:c8:
         b5:2b:74:4c:02:ed:45:4b:06:64:42:60:23:ba:fc:ff:45:d9:
         c7:19:84:e6:6d:83:ca:f7:9b:39:05:84:d9:37:fb:4c:23:e3:
         af:04:62:a5:b0:2f:f4:96:be:9d:f3:7f:cc:0b:9c:02:1f:89:
         13:8a:de:1b:b5:5c:70:ab:d8:20:f1:81:f0:76:73:69:a0:1e:
         cc:e0:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:17:02 2025 by rpki-client