Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a842b10d-ca97-3357-8561-d207469b7366.roa
File:                     a842b10d-ca97-3357-8561-d207469b7366.roa (raw, json)
Hash identifier:          IOF2SX6KFGtNf5PNEry8Yk2DziRRAt5PEiyNLqJO8Do=
Subject key identifier:   76:36:2F:84:7A:E8:A7:07:46:8E:C9:70:36:6F:DC:43:36:72:B8:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A480AEA7040B4DFB0907DFC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a842b10d-ca97-3357-8561-d207469b7366.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     20115
IP address blocks:        156.19.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ea:70:40:b4:df:b0:90:7d:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=f04f47c6-0188-4170-9602-6193e85cdf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:d8:40:ba:d6:85:83:94:59:10:89:53:67:
                    78:cb:58:ae:0f:6a:59:b2:30:31:b2:fb:e3:58:96:
                    5e:e5:be:34:49:9b:2a:20:1a:41:44:61:8c:31:7b:
                    5f:fe:82:c8:a2:4b:b0:1e:8c:34:6e:8d:08:ab:4d:
                    e4:13:13:81:a8:e4:0a:92:93:c3:86:fe:b7:40:7a:
                    24:2f:d4:b4:d5:c9:d5:96:c1:3b:ba:9a:4a:81:4b:
                    1b:b1:41:7a:28:98:2b:69:23:d2:fc:58:d7:d4:dd:
                    14:e0:59:73:7e:b4:cf:8f:ea:37:30:09:02:c8:00:
                    5a:a0:32:86:57:d5:1e:51:e4:11:84:e4:20:cb:f8:
                    59:8e:13:18:c5:42:1c:d7:20:30:a1:ce:39:96:2f:
                    bd:ef:0c:46:c4:f2:fb:90:93:a6:e1:ac:6c:d9:df:
                    f2:6a:a4:95:a4:39:95:ac:36:58:a8:9d:44:fe:d6:
                    67:2d:5e:7f:dd:02:0c:61:27:59:08:e1:67:6f:ee:
                    e4:23:ec:8b:98:10:0e:d2:7a:d3:cc:4f:4c:31:7a:
                    f4:8e:b0:db:90:96:6a:14:ac:e1:d3:0f:89:df:73:
                    ba:ac:45:11:d2:19:fe:ae:31:f2:c8:b6:15:87:7d:
                    96:71:74:65:bb:11:15:92:bf:75:63:9e:93:0f:85:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:36:2F:84:7A:E8:A7:07:46:8E:C9:70:36:6F:DC:43:36:72:B8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a842b10d-ca97-3357-8561-d207469b7366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:ac:3c:e1:e4:bc:25:14:a6:21:3f:e2:a6:6b:db:fe:b0:
         f7:a9:6c:21:27:7e:da:b8:e8:58:7b:86:5a:9c:aa:d3:d2:dc:
         c5:06:1d:69:aa:16:fd:1d:5c:48:75:cf:03:b3:0e:32:21:fb:
         55:e1:38:50:cf:03:e7:72:a0:a8:dc:cc:60:2f:d5:65:fa:a7:
         56:54:0e:8d:0f:ad:9a:dc:12:e8:3a:c5:b5:c4:8c:71:b0:1b:
         36:cf:ad:82:d7:a9:d0:56:f5:13:60:24:23:c0:dd:3b:72:2e:
         bf:c4:cc:80:bf:4d:3b:d0:b6:e2:d8:f7:22:ab:90:d9:7e:fc:
         aa:0d:38:89:f0:08:7a:30:85:5e:6f:20:a8:72:05:cf:70:3f:
         44:7c:c5:0e:0d:6d:a2:2c:52:83:14:87:35:9d:88:91:9e:64:
         05:b5:dd:1f:c3:1c:31:76:8d:d4:75:46:ca:14:2c:d8:f5:e1:
         8e:b0:d5:52:ea:ec:e6:ae:ad:e0:8d:b5:df:97:df:26:2c:d9:
         36:63:7e:34:45:47:88:c9:72:17:30:13:c3:22:de:2a:e4:5d:
         84:b1:ac:d4:d8:9b:43:31:e8:30:82:c9:47:76:1f:71:d5:2d:
         64:b2:bf:93:14:0f:48:c2:5f:12:db:f4:1c:11:3b:8a:53:cc:
         ee:75:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:43:18 2025 by rpki-client