Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b02a7a5-8ea2-3839-8b0a-bacd54fcd44a.roa
File:                     8b02a7a5-8ea2-3839-8b0a-bacd54fcd44a.roa (raw, json)
Hash identifier:          Xm3s1fMwvJ/1Gq0ZghL7QmPDvGxACNi1clFJF6DU3U4=
Subject key identifier:   C6:1E:03:8E:4C:01:5D:2B:70:80:A1:8D:42:64:78:83:FE:09:00:D5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9667D69D3925EDC41180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b02a7a5-8ea2-3839-8b0a-bacd54fcd44a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.12.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:96:67:d6:9d:39:25:ed:c4:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=662c712b-c181-4752-a5a9-ff48830fbc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:f8:b0:36:09:61:0d:e0:60:dd:04:45:11:
                    b5:cd:f5:f5:b8:7d:f5:fe:ef:70:00:20:f8:61:91:
                    87:16:e9:5a:91:d2:9b:d2:2c:21:8c:56:87:3f:f4:
                    26:24:a6:a8:a9:6c:ae:bb:a5:4b:41:c0:6f:e5:8f:
                    c7:51:7f:c3:b9:c8:20:d6:ab:d2:71:45:8d:a7:1a:
                    2d:18:8e:95:d1:79:be:cc:ae:e4:be:b6:e3:10:99:
                    b8:6f:e9:0b:2f:34:ac:9d:c3:82:e3:dd:83:36:0a:
                    d9:ef:b9:c8:fd:31:f8:fc:1f:f6:56:2f:ab:51:0a:
                    fb:15:a8:c5:63:a8:d0:11:d0:67:83:ab:06:c4:68:
                    28:20:f4:55:c5:a1:db:91:20:14:13:7e:b9:66:0e:
                    5c:d9:6a:6b:ce:95:77:6f:db:2f:b6:c4:05:dc:9d:
                    6e:db:12:93:58:11:26:58:1b:53:64:dc:99:a7:17:
                    17:c1:bc:7d:c9:d5:2f:07:3d:17:37:74:9f:8b:4b:
                    85:f5:c5:0e:1b:cf:3c:ea:9d:5f:ea:d3:95:21:58:
                    92:04:b4:45:a7:17:08:bf:7f:35:c1:eb:35:c1:c9:
                    78:ce:9b:dc:32:3e:33:5b:8c:52:5f:c1:6a:c3:e5:
                    aa:36:82:70:09:0f:4a:1a:e3:4f:7d:7d:b7:36:39:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:03:8E:4C:01:5D:2B:70:80:A1:8D:42:64:78:83:FE:09:00:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b02a7a5-8ea2-3839-8b0a-bacd54fcd44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.12.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:c2:aa:b7:2b:26:1b:84:ca:73:b2:46:51:71:50:de:fe:
         51:7d:ff:be:58:cc:43:de:2d:d6:8e:c7:b3:97:2d:d0:87:e9:
         f7:fd:a2:25:8c:7b:83:58:f0:4d:cd:c1:86:18:56:6b:2e:b7:
         d5:c0:ad:5f:9d:24:76:f7:e7:81:32:30:4d:5b:84:67:1d:cb:
         05:33:fa:1c:83:be:82:43:94:de:36:d4:92:a4:19:82:96:00:
         86:4c:aa:a7:c5:e1:c1:4b:c6:0b:45:8c:bd:19:fd:64:5c:83:
         ea:61:c3:f3:05:8e:fa:49:c6:5d:a6:1d:47:63:29:68:29:dc:
         9a:ba:03:fe:4c:e8:34:61:32:d8:e2:59:c5:fc:c5:d4:0b:c5:
         65:63:fd:e4:c2:c0:14:d6:45:f7:20:8d:ec:0a:89:1c:42:2c:
         b2:b2:9a:ba:20:66:d8:e7:8c:80:1c:f3:f3:8e:c8:4f:8e:5b:
         99:fe:b1:75:65:aa:5c:29:dc:09:1b:5b:40:2f:35:95:7f:a1:
         1a:5e:30:b1:6b:75:03:22:6a:68:fe:b0:ab:79:18:e5:c0:1c:
         50:9a:d2:90:35:fd:7e:52:2e:42:b8:fe:fb:b7:b9:c2:78:d4:
         65:a3:1e:19:dc:b0:6f:e9:4d:e2:25:e4:fb:ce:8b:78:fa:e5:
         cf:a6:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:04:44 2025 by rpki-client