Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
File:                     7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa (raw, json)
Hash identifier:          PsB7j9rAf/mWzmfacAx+CgBSoXVsm6DbCKGk64toy+c=
Subject key identifier:   74:FF:AC:B4:9A:FA:83:FE:9A:7F:A5:35:78:91:A3:A4:72:22:C3:CD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B46AF089EE5149AEB6000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     395227
IP address blocks:        71.86.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:46:af:08:9e:e5:14:9a:eb:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=165c687d-dbea-45ec-8a9a-5648ffa77e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:bf:fa:c7:3a:ce:10:e7:7d:20:fe:b8:d3:
                    38:82:e1:f9:1a:15:a1:e4:0d:7b:c7:41:a9:ea:f1:
                    91:72:b9:db:6e:18:4e:54:2c:e1:de:51:07:9d:9a:
                    4c:75:ef:88:4e:7f:d5:49:bc:47:0e:c4:44:24:eb:
                    71:9b:7b:51:83:9d:52:99:a0:50:78:79:cb:e0:c8:
                    b7:d0:e1:39:aa:e7:ef:66:81:1a:01:54:3d:c1:50:
                    15:2d:0d:09:a6:10:cb:8c:d9:d4:de:11:50:bb:0b:
                    60:51:a4:88:49:e4:ee:85:61:a1:c3:8e:57:67:5e:
                    2a:3b:93:d4:5f:3b:4e:b9:38:60:0d:10:d6:88:43:
                    d5:03:f4:ad:e7:14:f8:b5:3d:83:92:ce:9d:98:84:
                    e7:15:d3:ed:00:ff:8a:ad:c9:d9:ff:b6:35:12:41:
                    9e:53:f6:05:c1:51:12:ef:db:fa:87:4c:2b:60:b4:
                    7d:74:84:21:a2:33:ca:38:c5:b3:85:61:14:c7:ac:
                    6a:74:a4:80:56:8f:69:85:22:5c:89:ec:9c:9b:85:
                    ed:88:5c:49:f1:b0:4d:19:a9:5d:fd:c2:ee:a6:b8:
                    06:69:57:ee:4d:c9:6a:b9:90:e8:33:cb:a9:15:df:
                    0a:88:41:52:fa:09:50:b5:66:0d:ab:61:57:dc:71:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FF:AC:B4:9A:FA:83:FE:9A:7F:A5:35:78:91:A3:A4:72:22:C3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:55:52:05:fa:1d:59:c1:f1:3d:48:61:be:ae:65:4e:88:a2:
         a6:58:d3:ee:99:3d:4d:0b:ea:cd:cf:c7:92:10:2b:79:71:d0:
         7b:24:34:51:89:1d:f0:e9:1e:a0:a1:ea:85:a8:f5:54:cc:f2:
         63:df:19:40:64:9f:54:cc:e3:45:81:91:09:b8:c2:c6:9c:16:
         02:5f:c0:b9:51:06:c2:b1:03:e5:f0:e0:2f:1f:b7:c5:e9:54:
         5f:1e:1c:f7:18:30:b1:1c:60:19:c6:64:45:43:9f:46:2b:26:
         1e:d8:85:21:53:3a:ee:3f:53:fa:f7:d0:a5:65:32:c4:70:74:
         f0:cd:22:6b:02:78:bb:1b:fc:51:b0:d6:25:e3:1f:b0:1c:30:
         d5:48:2e:4e:75:ce:7f:34:89:90:9a:b9:d3:56:5f:bb:2b:b2:
         38:43:7e:49:02:09:ca:43:c7:bf:25:9d:bc:6b:13:61:91:c2:
         b8:e1:13:33:f9:80:e2:10:63:97:67:32:63:ef:10:6b:84:31:
         22:45:ba:1a:c9:37:a5:ea:e7:4d:99:08:46:6b:54:ff:6c:81:
         0f:c8:c0:dc:8c:d4:47:e2:86:3c:64:f7:60:90:9f:26:16:d7:
         40:8a:40:8d:e3:7a:3f:86:29:16:8a:45:ec:ee:47:a9:18:d5:
         6b:a4:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:01:25 2025 by rpki-client