Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa
File:                     3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa (raw, json)
Hash identifier:          YrQ+sFU7f4ZkweEgTV2kZ72RvFyOZ21z/8xb0dquA/Y=
Subject key identifier:   10:C9:E4:57:4F:48:03:5B:40:D7:17:FB:06:13:86:A3:63:A0:EC:C5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7794FDC8728AFB6DEC60
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.80.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:77:94:fd:c8:72:8a:fb:6d:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e1ff5435-667f-42d1-9cf7-7872945bc45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:7a:c1:bf:8b:c2:89:a0:35:2d:87:5e:06:
                    21:1a:44:09:15:19:92:e1:82:91:2b:3b:c8:8e:ae:
                    1c:5e:28:97:46:77:61:9d:24:2b:fd:3b:d8:5c:00:
                    70:dd:be:93:31:be:c3:b1:cc:65:bf:19:7f:bf:cf:
                    14:3d:9c:48:d1:9f:f0:94:fc:08:1d:10:a8:27:fd:
                    67:9d:e8:59:13:01:01:9c:18:15:ff:bb:0a:48:cc:
                    a8:e6:7f:7b:d1:b6:19:cd:31:c9:65:d6:02:34:b5:
                    79:29:de:b5:36:d5:a2:1f:9b:ec:27:a5:8f:89:44:
                    ef:96:07:66:1b:9f:2e:9c:90:be:c9:81:4f:d6:9e:
                    e5:4a:18:0a:32:f7:ec:51:3b:37:f9:9d:6f:e6:71:
                    1c:66:28:2d:65:b4:a8:ad:3f:5b:55:42:b5:1e:86:
                    85:d0:98:8e:f8:93:13:b7:2e:e5:0d:6b:5e:7b:2e:
                    ce:bd:f2:0b:c6:f3:75:8e:f9:3c:90:3b:bf:ce:44:
                    13:29:25:ea:07:2e:0c:0d:ef:b8:80:11:79:d8:b5:
                    ef:32:77:af:66:c1:1c:02:f2:f1:47:60:69:6e:df:
                    66:79:b3:a2:aa:21:ab:5c:29:cd:c0:92:96:5b:2b:
                    cd:36:96:4d:12:66:ae:64:51:11:cd:65:6f:8f:3d:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:E4:57:4F:48:03:5B:40:D7:17:FB:06:13:86:A3:63:A0:EC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ec7c295-5d3f-35e3-ba25-0aea4bd77da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.80.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:81:fa:b9:ab:d0:b6:aa:37:06:47:06:44:ab:f1:46:bf:
         d2:cf:64:3a:61:f8:5b:50:2f:54:b9:e7:58:6b:ee:c2:45:c7:
         8b:8d:2a:3d:aa:81:e9:30:66:11:52:62:3d:01:a5:0b:8c:85:
         5c:28:a7:43:67:0e:d1:78:c4:fa:08:d5:d0:dc:9a:a4:ba:bb:
         a2:44:63:de:2d:c2:7c:d2:43:79:8f:b3:d7:0b:86:33:24:98:
         6e:01:60:3b:bf:60:c3:46:82:13:85:6b:c3:88:98:0a:a5:c1:
         f3:4f:a7:24:95:37:a4:d0:f2:66:6e:d0:1a:76:7f:b6:0e:73:
         9c:0d:98:fa:99:95:9e:5a:5b:1e:6d:89:06:d5:23:10:59:91:
         27:02:76:58:df:96:81:c4:2d:b9:89:b6:70:3f:27:fe:85:3f:
         9c:89:5d:f6:a3:f7:a6:b3:33:d2:e4:d9:f0:c3:5e:36:12:dd:
         cb:a6:d0:4a:a6:f2:28:d4:ad:fc:73:fe:c2:d5:c4:1d:70:70:
         b1:31:29:e1:25:d5:f4:49:34:88:2d:f5:de:7f:9e:bb:8a:87:
         00:3f:c6:02:ca:57:b7:5a:1b:27:e4:0e:45:53:b6:7b:e6:5b:
         fb:e8:8f:b6:73:25:92:31:ec:4a:64:49:d6:c3:05:3e:7e:13:
         56:d0:32:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:16:17 2025 by rpki-client