Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b12fb1b-65bb-393f-8cef-2e3b24305afd.roa
File:                     9b12fb1b-65bb-393f-8cef-2e3b24305afd.roa (raw, json)
Hash identifier:          ncHCrkRe3D/xyQV9jun/KAQFH1suNqfK5xOBoJaU8UM=
Subject key identifier:   3B:E5:CA:CA:39:C4:52:B1:F3:93:98:BA:8F:B6:32:94:E1:33:4F:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF990C719CABEB0CE0720
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b12fb1b-65bb-393f-8cef-2e3b24305afd.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        96.41.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f9:90:c7:19:ca:be:b0:ce:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=38909454-f855-4768-bbca-9f2154de7af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:bc:9f:d5:73:c5:83:88:bb:0f:e8:31:f0:
                    f2:e2:11:3c:15:84:76:8d:a7:dc:84:a4:86:eb:c9:
                    a8:f2:4c:28:00:c6:d7:e8:15:a2:8e:1b:bb:c7:84:
                    06:01:9f:06:e9:45:85:8e:85:65:c9:b1:b9:84:44:
                    1e:42:50:b9:d8:a6:6d:b0:f1:3a:34:30:79:27:60:
                    96:00:1a:9e:69:f2:c9:ed:46:cc:23:04:e2:1d:0d:
                    95:da:f7:4b:0d:1e:98:76:4d:4a:6e:85:9e:5f:6d:
                    6e:73:8e:f0:1b:21:13:8c:20:09:06:b8:db:c8:55:
                    cc:c6:a6:78:8f:49:af:ec:36:72:4c:49:79:91:37:
                    11:3d:37:85:19:65:13:4e:fe:36:7a:2d:ef:27:a7:
                    54:57:76:70:00:8b:77:4d:07:6b:1b:45:1f:82:09:
                    63:91:5d:63:4b:dc:97:d5:7d:cc:d9:22:29:b8:cd:
                    92:21:a6:5b:f8:bd:b6:b0:9c:13:a2:20:b1:ff:5e:
                    b4:5c:ca:70:1c:42:a1:ae:83:97:f7:0b:33:56:1d:
                    e0:8e:ac:e7:18:52:27:4d:39:e2:e4:4a:55:7c:bb:
                    73:af:c2:9c:b6:3c:4b:ad:0f:b2:c3:6e:26:95:93:
                    a2:4b:ca:37:63:0c:bc:da:85:e8:35:d7:66:68:bd:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E5:CA:CA:39:C4:52:B1:F3:93:98:BA:8F:B6:32:94:E1:33:4F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b12fb1b-65bb-393f-8cef-2e3b24305afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.41.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:e2:60:dc:1f:ef:a1:5b:68:5d:bb:a9:e1:f3:5b:59:1c:
         d3:31:57:25:fd:61:4a:d7:f7:34:6b:3c:6d:20:0b:c1:e1:27:
         81:6e:49:d0:87:d3:2e:61:ea:c4:33:7a:3e:ff:68:3e:c4:48:
         6e:b2:67:67:7a:7b:5e:c9:c9:a7:9e:fa:d4:59:59:bb:61:2e:
         2b:76:9a:44:df:09:97:47:83:83:11:32:65:13:57:0c:7c:ed:
         3e:5d:05:32:1d:62:09:95:82:e8:02:aa:ac:94:d4:0c:ea:2f:
         ca:81:db:2a:3c:0d:ba:8f:f8:3b:dc:44:ee:92:45:63:36:2d:
         5d:50:fa:54:2e:c9:a4:bb:5c:c1:2f:f2:f5:15:dd:e0:53:5c:
         e1:1a:00:39:41:7b:77:19:3e:7d:3e:ed:96:87:fa:da:a0:f7:
         de:d8:bb:38:cb:c2:a7:5e:64:a4:ed:b9:6c:79:cf:b5:f2:f7:
         86:20:37:69:e4:22:5b:82:d6:93:03:08:61:5f:72:42:21:da:
         bf:f2:dc:88:ec:1b:da:71:82:c4:b4:ad:17:7d:7c:37:a8:83:
         9c:6d:ff:65:9b:55:c0:dc:1c:89:e2:f4:b6:34:8e:14:68:6f:
         b9:59:42:5f:b8:77:4c:ee:ef:75:18:42:74:69:d4:8b:18:e5:
         08:7c:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:44:19 2025 by rpki-client