Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa
File:                     965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa (raw, json)
Hash identifier:          F+Icy7z9Y3tBrNPiMwFsTQs5CS7yPFJRdDX79cH0pxk=
Subject key identifier:   6A:99:26:03:32:B0:71:8C:59:FD:02:9B:64:80:48:78:55:1A:CD:04
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B1BF25E3D13AFA404DB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.95.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:1b:f2:5e:3d:13:af:a4:04:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=72b3a79e-2bf5-45c6-a1d0-a36e15c51272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d5:cf:56:29:fa:5f:6a:2b:08:d2:ed:5b:56:
                    7e:9d:7b:7d:c1:ff:ba:32:cc:f6:cd:5b:48:57:d2:
                    1c:87:fd:0c:3e:5b:9e:3f:55:d7:c5:54:82:0b:1a:
                    1c:b7:18:87:34:22:b2:49:d5:02:3f:e4:ab:62:65:
                    82:b1:77:31:06:8d:f5:e5:66:8c:06:7e:ab:f3:2e:
                    0b:d8:e8:5c:d8:74:ee:e8:43:18:99:c3:5d:88:29:
                    44:7d:c1:8a:ab:ea:20:a1:95:4d:e3:59:51:0e:5c:
                    36:05:e9:1b:22:01:4d:23:59:50:00:37:b6:a2:7a:
                    fa:a4:00:08:e0:31:1f:4d:1e:e7:9a:2e:ef:b0:33:
                    ae:90:1e:45:8a:01:44:f5:be:34:20:de:7b:58:24:
                    20:28:22:a8:5a:dc:eb:28:04:77:b1:c3:0d:b0:9a:
                    6c:da:a5:88:d0:bd:a2:b9:30:b3:a5:10:3e:6e:d6:
                    a1:1a:76:48:98:d0:74:56:e4:c8:46:5c:4b:f0:33:
                    8c:4e:c2:7f:a6:95:06:3c:5c:d3:24:37:14:7a:73:
                    b0:4b:e6:fb:0d:b1:c2:17:23:b3:54:77:92:72:5d:
                    d6:60:b3:73:8d:25:d1:6c:da:82:e4:0a:63:79:5e:
                    f2:5b:38:b1:3f:25:7c:7b:ad:61:88:80:3f:65:4b:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:99:26:03:32:B0:71:8C:59:FD:02:9B:64:80:48:78:55:1A:CD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/965fc560-ecbd-3eb0-b922-033ec3ae10f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.95.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:6b:64:e6:70:1d:26:dc:8c:39:24:aa:73:d7:73:04:d9:
         3f:52:ed:10:b3:13:b2:fa:5c:03:de:e3:f0:eb:8c:29:a2:ea:
         77:2d:1b:c9:c8:8b:cc:fc:c6:f1:08:45:62:55:1e:3c:9c:45:
         cf:3f:91:f0:8c:1d:fd:bc:1a:99:d7:7b:41:a9:5a:af:34:c9:
         60:cc:fd:f0:c7:62:46:44:4b:f9:27:b8:63:96:c4:18:fb:78:
         7b:ea:0a:50:f3:2d:d5:07:73:24:2c:87:e2:00:73:4c:7a:9d:
         6b:de:bb:a2:42:fc:5c:de:bc:d3:1d:6e:bb:a6:5e:48:ea:65:
         4d:42:91:ad:ed:e4:df:b1:3a:a1:78:ba:9e:f1:04:90:e7:2e:
         b2:21:c3:ca:88:84:29:cc:f7:73:62:30:cc:62:96:cd:49:0a:
         c7:70:ea:62:b3:98:ca:e6:02:f6:ed:00:98:ae:3e:d0:ca:bf:
         fe:61:e2:0e:11:ad:3f:16:e8:86:b3:89:ed:1d:da:b2:75:3a:
         37:54:0c:04:14:42:91:bf:c1:9a:68:73:b2:91:ea:3a:28:c1:
         79:75:93:eb:76:c8:7c:74:25:6c:f2:79:8c:75:2d:cc:3f:81:
         83:b0:99:7b:82:65:0d:0d:75:73:91:29:2c:7d:1e:46:77:c7:
         9d:0f:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:42:08 2025 by rpki-client