Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87553942-b8e0-382d-8010-37d9c0bdc814.roa
File:                     87553942-b8e0-382d-8010-37d9c0bdc814.roa (raw, json)
Hash identifier:          rYZSGiR/VgyM4p7bZyawXNj9uGupMQDw27pwtWxZdb8=
Subject key identifier:   52:3B:C9:B1:6E:F2:3C:63:05:AE:88:B8:70:FA:64:8C:80:B1:3C:50
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A79D291A8337BA74EF500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87553942-b8e0-382d-8010-37d9c0bdc814.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.86.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:79:d2:91:a8:33:7b:a7:4e:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a45271de-b7f4-43f1-9d3f-0495db9f120f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:8a:a3:f4:8e:89:02:98:52:a4:03:40:fe:
                    f8:bb:ad:25:42:52:31:ab:67:ef:60:da:8a:1b:57:
                    6b:7a:03:c1:23:49:53:ea:61:bc:1a:61:2e:bd:72:
                    24:5e:ba:3e:a5:9c:dd:35:6a:00:92:4d:19:8d:47:
                    ff:50:2e:ee:ac:49:81:84:65:de:07:e5:5e:78:39:
                    62:34:1d:c4:05:1e:7d:fd:72:be:ea:ca:4c:e4:f0:
                    63:f8:b2:ce:4e:d8:f0:56:b2:c7:3d:5c:98:cf:d1:
                    db:3a:79:27:36:fc:89:43:d1:f6:2f:a8:fd:d8:e2:
                    2e:8f:5f:0d:6c:33:2f:4f:db:7f:6e:e8:01:1c:f0:
                    e8:61:04:29:6a:af:ee:0f:55:98:39:e4:1e:f1:4d:
                    c4:8b:63:67:7c:52:9b:3b:5f:e9:bd:ad:25:4e:74:
                    53:8c:4c:4d:9f:7b:e1:fe:61:30:4c:09:8a:79:de:
                    dd:9e:5e:9c:73:0e:3b:62:e1:ec:d7:cf:19:9b:0c:
                    f4:f9:9f:23:67:93:40:32:d3:dd:28:6f:fa:9f:da:
                    87:b3:54:a2:9a:c7:0a:ba:e4:c8:ad:bb:04:9d:83:
                    52:80:7b:bc:78:30:c1:b3:9c:0b:d1:18:66:00:2e:
                    a6:ce:f4:94:83:56:99:cb:06:3a:28:2b:b7:b9:76:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3B:C9:B1:6E:F2:3C:63:05:AE:88:B8:70:FA:64:8C:80:B1:3C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87553942-b8e0-382d-8010-37d9c0bdc814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:bf:23:ad:ab:17:e1:d1:bb:6b:5a:99:ef:87:80:59:9e:
         7c:92:8f:72:4e:34:5d:48:5a:ce:f0:64:c8:62:15:4d:d5:90:
         f3:17:b3:b4:c2:b2:03:d8:a8:fc:7e:9d:f1:1c:f2:02:67:3a:
         93:4d:cc:65:2b:14:c2:d4:9d:fd:12:04:e7:f1:fc:69:04:45:
         4a:53:30:5f:9e:cc:ca:5a:d7:fd:01:a6:d3:e5:b2:13:c3:07:
         a3:55:ef:4f:69:ed:74:65:bf:10:38:8a:e9:40:0e:00:27:e4:
         ce:fc:2b:a7:51:00:f9:cb:b1:26:b9:2c:a1:70:e7:7e:d6:0c:
         65:19:e4:ea:5f:a8:59:07:92:1b:f3:9f:8d:cf:55:3f:6f:7c:
         b4:94:25:ee:5d:be:db:ad:59:34:17:c7:85:52:45:37:43:61:
         b3:35:1c:a5:cf:8a:b0:e2:99:ff:5f:65:94:e7:35:45:eb:56:
         da:d3:56:a8:b5:98:6b:7d:99:eb:77:9d:16:75:6a:e0:f3:e3:
         af:72:32:ca:7e:45:0c:dd:5a:8b:c7:68:aa:71:3f:1b:0c:05:
         6b:9a:44:7c:5f:62:63:d3:65:3b:5c:a1:0a:5b:aa:ef:ab:36:
         f1:1b:09:cb:4f:c6:55:35:00:7e:24:0b:3f:9b:9d:34:dd:f4:
         65:20:38:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCnnSkagze6dO9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YTQ1MjcxZGUtYjdmNC00M2YxLTlkM2YtMDQ5NWRiOWYxMjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYeKo/SOiQKYUqQDQP74u60lQlIxq2fvYNqK
G1dregPBI0lT6mG8GmEuvXIkXro+pZzdNWoAkk0ZjUf/UC7urEmBhGXeB+VeeDli
NB3EBR59/XK+6spM5PBj+LLOTtjwVrLHPVyYz9HbOnknNvyJQ9H2L6j92OIuj18N
bDMvT9t/bugBHPDoYQQpaq/uD1WYOeQe8U3Ei2NnfFKbO1/pva0lTnRTjExNn3vh
/mEwTAmKed7dnl6ccw47YuHs188Zmwz0+Z8jZ5NAMtPdKG/6n9qHs1SimscKuuTI
rbsEnYNSgHu8eDDBs5wL0RhmAC6mzvSUg1aZywY6KCu3uXbVnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFI7ybFu8jxjBa6IuHD6ZIyAsTxQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODc1NTM5NDItYjhlMC0z
ODJkLTgwMTAtMzdkOWMwYmRjODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1aQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBXvyOtqxfh0btrWpnvh4BZnnySj3JONF1IWs7wZMhiFU3VkPMXs7TC
sgPYqPx+nfEc8gJnOpNNzGUrFMLUnf0SBOfx/GkERUpTMF+ezMpa1/0BptPlshPD
B6NV709p7XRlvxA4iulADgAn5M78K6dRAPnLsSa5LKFw537WDGUZ5OpfqFkHkhvz
n43PVT9vfLSUJe5dvtutWTQXx4VSRTdDYbM1HKXPirDimf9fZZTnNUXrVtrTVqi1
mGt9met3nRZ1auDz469yMsp+RQzdWovHaKpxPxsMBWuaRHxfYmPTZTtcoQpbqu+r
NvEbCctPxlU1AH4kCz+bnTTd9GUgOKQ=
-----END CERTIFICATE-----
Generated at Sun May 11 15:24:38 2025 by rpki-client