Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66f36be4-4541-36eb-963f-2b22b537387e.roa
File:                     66f36be4-4541-36eb-963f-2b22b537387e.roa (raw, json)
Hash identifier:          ga01AxBbsd0qZvp29avuR5806Uo6uyo/RaXceZRmzNE=
Subject key identifier:   1C:C4:18:C1:A9:DE:B8:16:41:C2:46:B7:84:62:46:E5:93:7F:65:7D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A77C7F1FA1B975ECDD0C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66f36be4-4541-36eb-963f-2b22b537387e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.85.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:77:c7:f1:fa:1b:97:5e:cd:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=0649954d-8c2d-42c3-95fd-518afbfec987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5f:c8:15:f5:70:f2:2c:5c:a2:ad:96:23:c0:
                    55:98:15:18:a9:d4:1f:33:24:ee:03:d7:89:22:86:
                    6f:59:00:ef:dc:7e:18:1d:cf:29:2e:18:15:97:e4:
                    f0:f7:91:2c:a1:87:20:60:1e:f4:81:5a:5d:1e:5a:
                    2d:97:45:9f:07:35:ac:dc:8e:d1:48:c9:32:da:9c:
                    8f:32:d5:a3:65:85:7b:a9:35:8d:01:e0:ea:01:f8:
                    95:36:be:df:d9:9b:d4:86:63:25:8f:02:35:21:67:
                    fa:6b:38:4c:3c:c3:ae:39:6a:65:9a:7c:f4:86:fe:
                    db:e2:5a:0c:0f:a3:03:24:8b:4d:07:2c:76:4e:34:
                    9f:5a:5f:3f:fc:f6:ef:48:23:3e:ab:0d:69:38:79:
                    f4:fa:18:ff:1f:da:7c:3a:c4:6f:6c:d5:64:4f:fa:
                    74:2e:01:ae:d8:5f:65:01:00:4f:b6:74:42:43:79:
                    58:80:a9:36:01:80:a2:7e:88:20:bd:97:2b:a5:b9:
                    4c:e2:1a:86:2b:6c:01:f7:18:65:1f:0d:44:05:eb:
                    94:3d:bd:db:76:d3:5a:bc:45:f6:5f:2f:09:22:e6:
                    ef:a7:45:d4:fd:68:fe:16:a0:f6:6a:a1:19:52:da:
                    e2:ff:39:a3:a6:97:f1:66:88:f1:67:c2:69:20:bf:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C4:18:C1:A9:DE:B8:16:41:C2:46:B7:84:62:46:E5:93:7F:65:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66f36be4-4541-36eb-963f-2b22b537387e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.85.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:0e:4c:97:dc:d7:fe:10:ef:22:3d:b0:46:e2:67:27:58:
         56:eb:83:c5:4a:fb:8f:e2:6d:31:3d:bc:26:46:0b:af:53:b9:
         b9:3e:d0:56:5c:39:f7:9b:98:a7:2b:78:3e:c9:00:25:91:65:
         4e:e4:0f:84:d8:23:1a:6a:b6:df:f6:45:81:2c:d4:f4:30:cf:
         06:cf:12:8d:15:24:0c:aa:bf:ad:cd:5f:f4:99:3a:a6:dc:a3:
         40:f4:b5:95:29:cc:69:67:d9:12:9b:d1:b2:45:fd:f9:2e:a2:
         87:87:10:53:44:de:3e:1f:fc:9a:a3:bf:b9:7c:08:2e:cb:95:
         21:67:0a:13:a8:14:3d:27:52:7e:25:58:28:e5:c5:84:25:af:
         80:3c:4f:8b:bc:19:49:d1:aa:d5:68:1a:0e:cc:65:b5:e5:bb:
         52:6b:42:f7:63:9a:57:54:ad:34:21:87:46:4b:9f:35:14:21:
         7c:21:6a:89:9c:91:fe:be:99:7f:25:b3:7d:d9:52:80:8e:72:
         5b:7f:87:8c:ac:6d:c1:58:ec:76:b0:d4:1f:2c:1d:d0:9c:32:
         ed:88:98:5a:d8:83:85:60:8a:85:16:7b:91:6b:a0:e9:2f:93:
         4e:df:af:e6:e0:3b:d7:fa:11:ba:aa:6e:47:51:b5:76:70:57:
         16:cb:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:28:28 2025 by rpki-client