Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c05f45b9-3577-3591-82cf-4a87343ee563.roa
File:                     c05f45b9-3577-3591-82cf-4a87343ee563.roa (raw, json)
Hash identifier:          VI9po4GETfs1HLiBu2mOijHC6B8KWJefCcPPfIGbV5s=
Subject key identifier:   4D:C8:86:91:57:13:7F:D6:6A:63:FB:D0:E3:6C:D3:0E:B5:8B:34:C1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7AB75438F9FD9622A700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c05f45b9-3577-3591-82cf-4a87343ee563.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.95.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:7a:b7:54:38:f9:fd:96:22:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=060772d4-2c12-4fc7-a01b-7ba526b362dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:5a:f0:12:a9:4d:02:42:34:d6:79:fe:d4:
                    ad:fb:bb:6d:57:6f:f3:ea:58:2e:33:a5:b3:0c:89:
                    e3:03:d1:6c:0b:7a:b4:71:2d:d9:3a:32:22:c9:19:
                    62:fb:7d:a8:7f:6a:83:db:f8:bb:33:c5:d6:de:91:
                    aa:16:a7:44:bd:16:74:20:53:1a:b1:77:50:eb:66:
                    ec:2a:3c:d6:0d:d5:cb:08:21:9b:00:37:cc:c4:e1:
                    0b:02:89:a5:d3:9b:dc:ef:78:3f:b5:3f:0b:38:04:
                    26:29:ad:e7:d4:3c:c2:87:ac:d1:49:45:3b:6a:a7:
                    e1:e2:36:ed:96:46:66:76:23:0a:4e:74:08:8d:8c:
                    d2:c5:cb:e4:9a:b3:5f:c4:9a:03:68:70:cb:22:21:
                    e8:21:8c:e6:bd:6c:11:5f:de:d9:cc:05:7c:fb:f1:
                    0f:19:fc:f2:de:f5:bb:d5:d8:63:22:16:bb:d9:fe:
                    d7:f9:41:83:9b:f1:c3:55:73:3f:2d:72:67:7a:61:
                    a1:91:74:33:3d:d3:33:93:9f:54:44:45:4a:b1:29:
                    f7:31:ef:d3:06:7a:30:da:75:e3:c9:30:5d:98:0e:
                    e7:d3:76:65:2a:96:d8:ee:55:30:98:64:c1:0e:b6:
                    35:53:82:6c:e6:19:02:71:7e:c6:6f:e5:6a:a5:45:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:86:91:57:13:7F:D6:6A:63:FB:D0:E3:6C:D3:0E:B5:8B:34:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c05f45b9-3577-3591-82cf-4a87343ee563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.95.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:69:29:47:dd:96:02:66:bf:49:0d:f7:7b:75:79:b2:53:10:
         84:95:b0:da:1a:59:11:62:e6:78:34:f1:e0:af:29:38:32:20:
         a4:0f:82:8e:3b:5f:d6:a1:66:d5:10:e8:69:5c:39:66:47:24:
         b8:c9:a8:df:24:32:d3:4f:40:37:d4:3b:ca:fa:16:f2:d9:bb:
         23:44:61:f0:e1:11:86:0d:1b:e8:d1:ab:19:fd:fe:db:64:8b:
         56:42:e6:11:27:b7:6e:d6:25:2c:fb:d3:74:bb:f6:3e:47:6c:
         94:1b:de:7e:21:95:e8:69:a1:36:b6:2c:ef:b3:b6:81:11:b4:
         01:56:1d:67:42:48:cf:b4:50:d2:30:2c:ef:0f:8a:cd:44:53:
         6e:6e:74:1f:10:f1:ca:34:ec:02:77:ed:e0:f7:3a:4f:92:35:
         90:bc:61:58:2f:be:09:b4:b2:6e:b3:bb:60:4f:59:76:e9:16:
         9d:95:d9:be:84:a4:04:b7:4e:0e:94:3b:81:02:73:fa:32:00:
         8b:0b:ae:f6:7f:f2:da:83:70:7f:93:cc:8c:17:31:3b:e5:df:
         1e:b8:60:ec:16:e2:1f:0c:e7:9a:81:68:a4:c7:80:1b:66:f2:
         53:6e:1e:04:6a:a6:4a:1b:fc:4d:8d:4d:2c:dc:40:af:85:2c:
         75:36:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:30:19 2025 by rpki-client