Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3735d30c-4dca-3696-a920-6018ca62dc3a.roa
File:                     3735d30c-4dca-3696-a920-6018ca62dc3a.roa (raw, json)
Hash identifier:          fDWWWmLesrYev60AS5Zuk6lVJ8ptExsLZgeTCHGKcHk=
Subject key identifier:   53:65:3D:C1:D6:E7:78:2C:7E:E8:86:68:AA:C8:B7:F5:52:38:B0:A1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A758D1BA433E6FD9054E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3735d30c-4dca-3696-a920-6018ca62dc3a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.95.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:75:8d:1b:a4:33:e6:fd:90:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2067fbbb-a4d5-4e29-8ef0-ee418656fa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:8d:2b:2d:41:80:9a:9b:44:c0:82:7e:2c:
                    5a:72:71:2a:c2:b8:63:73:91:bc:44:43:54:65:6b:
                    af:64:11:11:ca:bc:76:4d:11:1b:ac:4e:60:1a:27:
                    3b:37:61:2b:a9:17:7b:74:41:34:79:f1:5c:c3:91:
                    ba:e7:e9:5a:77:39:be:5b:83:87:80:0f:49:f2:dd:
                    01:3f:45:6c:09:01:10:82:a9:d3:2b:eb:56:83:22:
                    25:68:97:eb:93:b7:64:41:da:69:37:c2:06:61:bd:
                    96:dd:f0:98:36:32:ef:0e:ee:29:dd:59:a4:60:43:
                    2f:a5:9a:1e:d8:5b:3a:60:e2:30:35:e3:60:75:bf:
                    1d:ee:f4:53:dc:af:c3:b8:b8:28:ac:0d:09:64:6d:
                    50:6e:6b:a1:b2:a1:41:2a:43:47:9c:50:e3:ca:d9:
                    81:e8:5e:d6:68:33:10:27:20:46:a5:a4:f4:77:9f:
                    a6:0e:e5:48:d9:7d:6d:af:79:11:35:af:26:6c:78:
                    9b:5b:05:fc:ba:8e:28:b8:93:b2:f5:0b:0e:2b:38:
                    c1:48:e6:27:75:ef:79:d9:7b:ed:05:d1:fb:ef:e4:
                    b1:01:77:bf:0b:82:6e:0b:7d:ab:1b:15:6b:2a:f1:
                    14:a4:b7:fd:11:bd:90:48:94:b2:95:23:71:76:2e:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:3D:C1:D6:E7:78:2C:7E:E8:86:68:AA:C8:B7:F5:52:38:B0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3735d30c-4dca-3696-a920-6018ca62dc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.95.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:18:4b:62:47:c9:e2:9c:d4:b5:dc:8c:2d:b8:09:a8:4b:
         48:30:68:1b:6f:bb:9f:41:01:72:37:e8:bc:bc:db:2b:7d:85:
         ff:43:8f:be:6d:84:3a:db:c5:9c:9d:88:43:89:8d:dc:9c:59:
         43:02:ca:d5:84:8b:5f:dc:48:af:d6:5c:4a:5d:67:87:fb:86:
         31:83:bc:f5:94:61:22:de:0e:0f:33:1d:9b:e6:cb:68:17:88:
         26:e0:70:c6:a5:17:6a:51:80:33:ab:ad:fe:d9:ea:66:9e:d1:
         41:b8:a8:53:14:17:8e:cb:b2:8b:79:ac:a7:44:18:2d:9b:2b:
         2f:02:0f:2d:e8:2c:09:db:0d:69:d6:ed:98:1c:be:b4:8c:98:
         2f:05:43:e5:7d:0c:f4:10:46:bb:13:aa:aa:f9:be:5b:42:4e:
         69:6d:e9:3f:58:f0:1c:d2:cf:70:c6:e6:80:d6:5b:37:19:51:
         09:5d:0a:7b:b6:cb:06:47:35:b7:cf:0e:54:4f:8f:9a:26:5b:
         44:e8:34:26:a4:6e:69:90:5b:b0:24:65:44:9b:01:ab:30:ee:
         0d:4b:cc:41:52:9b:8b:c9:65:03:d0:b8:24:59:3f:a9:2e:3e:
         2d:58:1f:96:d8:99:18:c0:a9:9e:20:85:13:1b:ae:db:31:47:
         c1:1c:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:21:47 2025 by rpki-client