Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f0863fe-5b69-3ef3-838c-2ac99c6eb474.roa
File:                     6f0863fe-5b69-3ef3-838c-2ac99c6eb474.roa (raw, json)
Hash identifier:          2XGhq3qOrPJF6aOtH6PuNOrVZJjX55V0OddSfLiHFUE=
Subject key identifier:   04:7F:9B:DB:C6:34:8C:80:B4:C1:76:9C:3E:DC:E2:F2:BB:E3:4F:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A97F64877AA5BE7908380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f0863fe-5b69-3ef3-838c-2ac99c6eb474.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.91.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:97:f6:48:77:aa:5b:e7:90:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=53ac7cfb-967f-4f7e-87c5-ba3d0ab6707d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:6e:1a:f5:af:58:af:dc:11:18:fb:c7:2e:
                    2f:19:fa:80:b3:7f:d9:42:0b:37:74:7d:b8:9c:95:
                    d6:72:36:a9:47:e2:66:75:d9:72:b4:4f:cb:50:f1:
                    fb:21:da:43:28:a2:62:48:eb:a5:2a:1a:34:ac:17:
                    63:f1:77:9a:67:b2:13:97:32:28:87:55:f9:6d:70:
                    2d:b4:08:41:6e:ee:49:9d:49:95:20:b9:03:ba:ba:
                    99:ad:7e:c4:23:d7:d0:66:71:5a:21:85:f8:b3:d2:
                    f7:d1:e5:6e:ef:50:44:90:79:33:87:f1:2a:06:6d:
                    ba:c0:b0:66:d6:7f:73:40:10:24:bd:37:f1:4b:03:
                    8e:bb:fd:5b:d9:87:cf:8d:1e:33:2f:e9:76:09:64:
                    86:2f:ce:c4:f2:81:7f:e2:c2:44:95:3d:e1:cf:a3:
                    f0:fd:a9:b8:f2:c4:62:d2:37:93:30:62:b1:c8:c5:
                    d4:cc:d4:f7:00:bc:02:18:d1:3e:84:f3:6c:a8:07:
                    f4:e1:e0:55:62:c7:67:6a:a4:2b:92:f9:6f:31:3f:
                    eb:9e:0f:8c:8f:31:0e:7b:e3:5c:f5:cf:e2:97:98:
                    1c:48:81:14:6d:71:49:c2:74:72:9c:7c:4e:6f:29:
                    9a:b7:94:d6:42:7c:aa:a8:40:1a:36:a9:9d:73:54:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:9B:DB:C6:34:8C:80:B4:C1:76:9C:3E:DC:E2:F2:BB:E3:4F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f0863fe-5b69-3ef3-838c-2ac99c6eb474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.91.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:b5:ca:38:5a:17:6c:a5:f6:f4:30:ed:1d:3e:90:aa:c6:
         8c:ab:b7:8f:9e:76:3d:c1:1c:fe:2f:be:29:7e:10:74:22:2f:
         1c:e6:59:b8:52:80:ff:f9:bb:e0:2f:a8:e7:57:ae:b7:92:0c:
         72:f7:d1:c2:87:0e:ea:23:46:81:15:0b:eb:6e:09:b0:4c:97:
         1f:28:66:d3:7a:f1:ef:6c:73:0c:1d:a2:d0:cf:be:03:63:9f:
         81:93:ea:5c:d9:00:de:19:f0:ee:c2:ee:88:ec:08:4f:fd:71:
         5f:8b:63:8a:d3:8c:b6:d5:67:dd:5b:72:45:f0:bc:3a:82:fe:
         76:b5:94:e1:44:44:dc:a4:df:65:37:63:39:38:cb:5e:8b:d5:
         36:97:ac:41:71:51:50:e1:95:cd:94:94:5d:7d:b3:14:b1:46:
         ed:43:f1:aa:04:ea:85:da:19:2a:0c:c1:7c:cf:d5:9d:28:26:
         e9:91:db:b6:e7:5a:6e:7e:3f:74:99:c8:d0:b3:81:f4:24:80:
         73:86:1c:d6:90:d6:6b:93:90:c2:18:07:25:3d:98:12:81:d5:
         f2:23:c0:89:43:c8:d9:d1:ad:e8:a4:6d:44:25:22:48:f0:db:
         ce:c6:02:b8:68:b8:96:ea:f8:c1:2a:57:85:c0:af:55:09:1b:
         52:45:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:11:28 2025 by rpki-client