Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bcba81e9-605b-3a7f-af5f-88f006aa8d19.roa
File:                     bcba81e9-605b-3a7f-af5f-88f006aa8d19.roa (raw, json)
Hash identifier:          Vy4asSdwpe9oKadrd8xTu8uobU3TN/8TyOOnMHVh8m8=
Subject key identifier:   AA:0A:36:67:38:54:6C:30:8B:5F:19:C2:06:7C:24:4B:8F:EC:83:24
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A75C6910969C18C828D1E
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bcba81e9-605b-3a7f-af5f-88f006aa8d19.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        96.42.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:75:c6:91:09:69:c1:8c:82:8d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ecc5111f-4601-4dd6-84bb-a49fc8629b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:80:13:53:45:56:43:eb:1f:9d:68:dc:f7:
                    86:da:a7:15:05:af:88:f2:49:71:0d:aa:78:d2:af:
                    26:e2:b6:df:9b:69:5d:59:df:0a:22:bc:95:55:bf:
                    b9:4b:a2:87:ee:0f:b5:0f:fc:dd:e0:63:b3:9b:30:
                    30:fc:b3:d6:63:58:aa:16:ec:0f:16:e4:f7:78:46:
                    5e:20:c4:4f:55:30:ef:ce:f9:d0:3d:d4:78:c2:89:
                    e4:15:cf:1e:4d:c1:9d:85:06:97:47:a4:56:bc:82:
                    61:73:e9:90:6c:51:e3:8c:02:8c:67:53:54:c5:70:
                    c7:97:ee:d0:53:ff:ad:0d:27:3b:08:40:2f:f4:17:
                    37:c6:07:27:11:5a:9a:1d:57:56:7a:e8:f3:67:11:
                    9d:cf:4d:25:b8:85:d9:b1:51:98:5a:31:9d:77:3b:
                    87:b7:e7:16:83:ae:20:c2:de:b3:90:47:30:37:fa:
                    1c:ef:f8:c7:5c:b1:16:6c:08:ef:4e:dd:29:16:85:
                    0e:42:ee:66:01:af:b1:c0:26:72:3a:a7:12:d6:a8:
                    b2:9e:78:bb:e3:c9:75:d3:56:2d:86:e3:8d:5a:8d:
                    db:2b:85:bc:34:20:bf:c3:a1:21:b8:ee:6f:96:ca:
                    50:c1:72:51:da:50:f6:3e:03:24:e6:6d:fc:cb:e1:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:36:67:38:54:6C:30:8B:5F:19:C2:06:7C:24:4B:8F:EC:83:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bcba81e9-605b-3a7f-af5f-88f006aa8d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.42.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:a1:d7:a0:a3:f6:3d:06:9b:42:fc:e2:5d:bb:1c:dd:a0:
         90:f9:3a:97:a7:90:16:3b:e3:94:3b:59:5b:24:89:b9:a3:36:
         ca:a7:73:3c:60:0d:2e:80:37:6f:69:65:61:b0:43:76:17:05:
         39:69:5c:b3:56:d5:8e:82:fa:9d:af:8f:9b:a4:f8:f2:1a:de:
         ee:8f:50:e3:0c:36:28:b2:24:26:9a:0c:96:2f:a1:14:7f:f0:
         14:3e:07:fd:81:c3:b6:5e:fc:d0:98:9b:90:e9:88:3b:b9:87:
         ad:48:14:79:d1:c9:29:eb:66:11:73:3f:f8:32:48:dc:41:14:
         ec:b4:4a:99:71:f7:30:c6:7d:50:4d:b3:42:7a:dd:17:55:91:
         05:b3:e4:84:73:6f:ea:19:bc:71:3c:ec:3c:a2:9c:08:da:4e:
         3f:1a:7c:79:36:45:bf:63:68:d1:67:3a:f7:8f:15:fa:c3:78:
         ec:10:bc:4d:e1:29:ac:8b:f7:26:d3:3f:8c:81:a7:25:a9:10:
         d0:32:94:c9:b5:72:a6:28:93:63:60:90:e4:81:22:e0:97:31:
         1a:65:e6:98:5c:7d:73:62:2d:b2:f3:e3:fb:55:82:36:a1:37:
         c2:70:6c:54:b8:21:15:7d:ed:d4:e3:68:5d:f3:da:9b:b2:78:
         9e:95:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:40:03 2025 by rpki-client