Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9cddcc01-a0b7-3d61-8f5d-39d841457898.roa
File:                     9cddcc01-a0b7-3d61-8f5d-39d841457898.roa (raw, json)
Hash identifier:          keUq9YKLEMQbkWCUGNZuY1YIcd4zjXwAvj7ABhIwqtM=
Subject key identifier:   13:0F:D1:BF:4C:30:F8:F0:C1:BB:41:09:6F:43:C8:DC:4A:2B:08:D4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A97C71E44E4B48A9BB580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9cddcc01-a0b7-3d61-8f5d-39d841457898.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.87.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:97:c7:1e:44:e4:b4:8a:9b:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b1471afc-56ff-44c6-8deb-69094be2cd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:f4:c7:8d:ab:c8:68:61:f5:19:d7:31:6e:
                    a8:e3:c4:fd:4f:63:f7:2c:a0:24:4b:c0:2a:8c:76:
                    00:f7:ce:39:20:e8:c0:d8:8f:58:16:ba:b5:1e:b8:
                    96:1d:b8:d7:bf:2d:e0:c2:f9:1d:8b:61:17:e1:28:
                    fc:5f:26:ca:33:4b:33:19:22:c9:c7:35:5f:4c:c2:
                    d2:a3:fd:d2:4d:f5:5b:f9:72:cd:87:5b:92:3b:37:
                    7b:65:aa:b5:92:c5:78:df:bb:93:62:6f:64:da:8a:
                    fe:98:0f:dc:49:5a:a0:d4:30:2d:87:c9:a0:8f:71:
                    c2:d3:f5:46:2c:5d:20:23:a5:01:d0:a1:88:bf:fa:
                    0b:f0:a5:ac:5b:b4:22:a0:64:5d:36:61:c3:c3:8e:
                    16:14:59:f2:73:4a:6a:2a:df:f4:14:7d:c4:17:aa:
                    28:e8:f1:85:b6:3e:1d:47:b5:66:65:a3:b3:8e:b3:
                    9d:0a:f1:d9:34:61:64:ff:da:f5:62:49:31:4b:c4:
                    24:34:d8:9d:9c:65:65:57:66:6e:c9:3c:3d:e1:65:
                    ae:19:9b:96:00:80:ef:3f:eb:eb:4e:8c:d2:cb:3d:
                    87:b7:ca:80:55:15:c5:e7:a2:b3:09:69:e7:5d:d4:
                    92:71:1a:f1:2b:ee:3a:dc:56:76:f9:b0:18:74:17:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:D1:BF:4C:30:F8:F0:C1:BB:41:09:6F:43:C8:DC:4A:2B:08:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9cddcc01-a0b7-3d61-8f5d-39d841457898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:39:61:d1:c8:51:ad:92:27:b0:82:10:f9:b5:0e:cc:bf:
         c2:43:f0:ed:bd:e2:fe:5d:c9:bc:79:5f:46:e3:50:ba:98:f8:
         c6:7c:34:6c:bb:6e:89:45:ca:c2:04:6d:4d:ba:ec:83:29:ea:
         c1:83:eb:ca:61:71:f4:34:80:75:66:14:04:71:e6:90:62:fa:
         d5:27:6b:3b:99:5f:eb:92:e5:16:2c:99:36:24:54:80:15:d1:
         29:df:97:0d:45:cf:7b:76:bd:a6:23:9f:a5:b1:74:72:6c:dc:
         a5:32:7a:7d:7a:f5:a8:e3:bf:26:60:36:77:e9:a8:f7:fe:7d:
         1e:eb:0a:c9:00:73:0a:f1:c5:78:88:94:9b:f7:c4:9a:f2:47:
         80:6f:6d:17:6b:70:b3:48:7d:db:39:2a:ba:ae:d8:01:1d:ae:
         0f:68:05:2d:77:c7:51:25:1e:87:95:91:1d:85:75:ef:fb:55:
         98:7c:42:dd:f4:96:8a:40:8e:a8:59:ea:b8:8d:91:79:1c:6e:
         85:5c:7d:5c:31:92:44:15:00:73:a8:d5:f8:45:94:e8:71:9f:
         09:77:0a:63:1f:b8:0f:5e:ff:ba:f1:ff:c5:a3:a0:8c:11:98:
         d6:90:5e:0d:f1:77:a1:43:3c:21:79:02:cf:7e:1a:37:09:4e:
         ea:49:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:22:38 2025 by rpki-client