Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5deb69a1-fca8-3338-98a9-dd8794670819.roa
File:                     5deb69a1-fca8-3338-98a9-dd8794670819.roa (raw, json)
Hash identifier:          ERcYfAiEkJ8PcssPG3j6MjFblPv227V3F5k3j42qqkM=
Subject key identifier:   06:C0:D0:C6:C6:A8:F3:DF:8C:59:8D:78:B9:10:05:91:64:6F:10:BA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AFE0AD0417400D3D79880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5deb69a1-fca8-3338-98a9-dd8794670819.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.81.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:fe:0a:d0:41:74:00:d3:d7:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f7cbaf8e-f0f1-4bec-9e02-70ea0dd06e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:19:da:c6:19:22:50:9e:05:d1:a4:f5:35:
                    bd:4e:c4:87:6e:fa:63:18:7e:3d:99:1f:10:7b:d0:
                    5b:8d:81:61:16:a9:3e:13:9d:c7:da:bd:33:73:32:
                    fb:f1:d2:a5:59:f8:f9:c6:32:c3:68:1c:91:0f:29:
                    02:5d:8c:b4:97:3a:06:12:b3:c0:dc:fe:40:d8:29:
                    9f:7f:02:89:43:f6:2c:65:bb:4e:f6:da:04:a4:70:
                    58:d8:cb:e3:32:df:96:cf:32:f7:f4:af:73:15:35:
                    8c:f6:6b:08:16:2e:70:d6:e7:28:ef:74:43:a0:e3:
                    c0:cf:39:ec:da:1d:67:20:81:ec:ab:33:0c:e8:df:
                    ac:74:aa:fe:81:d7:8a:61:7a:6c:49:8d:28:23:d6:
                    b1:49:bb:b4:c1:b5:48:4b:22:e3:1f:64:9e:06:3b:
                    76:55:74:f5:21:e5:83:22:0b:e6:b3:79:e3:ce:2f:
                    4e:27:49:90:86:db:06:d4:39:6b:ab:a8:ac:8d:f7:
                    3e:fd:ab:fa:cd:b8:59:d1:0e:02:08:b5:0f:5c:85:
                    e6:93:51:03:d4:96:03:6d:b3:99:46:5d:5b:a2:c9:
                    9e:f5:9f:3d:30:26:ee:94:58:e4:29:03:5a:fe:e5:
                    6e:6f:87:fb:cc:66:58:f8:e3:e9:95:94:eb:83:a8:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:D0:C6:C6:A8:F3:DF:8C:59:8D:78:B9:10:05:91:64:6F:10:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5deb69a1-fca8-3338-98a9-dd8794670819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:dc:57:ee:e1:ad:c9:31:a6:6d:68:9a:d5:a0:f4:c1:65:ee:
         e7:01:92:43:33:7a:0f:22:21:1a:25:dc:bb:b7:af:de:4d:46:
         fc:58:b4:b0:5d:ce:22:c8:6d:b9:1c:30:d7:75:90:dd:49:b3:
         98:49:84:73:60:ce:e3:02:80:35:f0:12:c8:7b:b4:33:69:d4:
         b2:6b:37:ca:f8:26:56:33:1c:16:94:dc:83:5e:30:8f:68:f8:
         bc:f3:57:13:06:0f:82:30:40:c1:86:ac:5a:50:e8:41:6d:3c:
         9a:1a:a6:39:d8:ae:e0:5d:ad:db:c8:97:81:33:1d:b8:a2:1a:
         44:c6:77:a3:f9:4a:d7:19:e1:4a:fb:a7:c7:9d:2e:d8:8d:8a:
         dd:2b:5b:13:fb:66:f4:d9:e5:c6:3a:24:bb:82:28:d6:22:f8:
         0e:59:aa:a9:da:c3:5c:81:69:2f:b9:3e:05:4d:16:fe:13:dd:
         98:29:83:60:bb:25:47:05:65:29:c6:0a:fb:be:ab:5d:93:9a:
         7e:21:a4:52:6a:66:69:71:47:06:60:28:32:22:f3:fc:2b:ae:
         e7:e9:37:53:ea:c4:f9:1e:79:06:dd:b2:df:61:cf:ac:9a:81:
         7a:e2:4d:5e:e6:15:d2:69:c9:a5:99:9c:61:a7:d8:a1:93:f9:
         f7:df:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:01:15 2025 by rpki-client