Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e24b99b3-167a-3a1c-a678-f4d22643bad5.roa
File:                     e24b99b3-167a-3a1c-a678-f4d22643bad5.roa (raw, json)
Hash identifier:          5xuQNH9sWHAq1QBbWHA0ZC9ailYHbUgdVvNff6b6SCE=
Subject key identifier:   F6:09:B9:44:F1:4D:21:7E:9B:54:8D:49:3A:FF:A9:8A:AA:4A:5A:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D751D6D1B03381F2FCA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e24b99b3-167a-3a1c-a678-f4d22643bad5.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        71.13.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:75:1d:6d:1b:03:38:1f:2f:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=4808cba5-fe85-4a23-a5be-f7686513d31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:c3:a1:54:09:68:4c:d5:e2:ce:69:1d:ad:
                    03:65:0b:17:7d:80:e2:c1:f2:f4:9b:e3:86:3f:7d:
                    6a:34:45:8c:3f:f5:65:f1:0b:f3:1d:b9:8f:9c:56:
                    c9:58:09:0f:82:88:a5:51:59:f1:43:e9:a1:1d:89:
                    01:18:5f:d6:75:26:16:33:5e:74:7c:ef:08:65:83:
                    5e:77:63:bf:75:23:8c:55:8b:af:f5:ff:97:c9:3a:
                    85:54:fd:d2:74:95:bb:50:e2:36:b5:02:b3:56:be:
                    95:0a:a4:f9:6a:4c:3f:95:97:2f:72:5c:ae:f7:79:
                    c9:99:98:92:81:bb:9d:bb:d0:91:6d:20:75:b6:30:
                    84:3c:a0:90:0e:dd:a0:d5:c7:5e:e8:38:2a:89:93:
                    26:71:c4:95:fe:cb:50:1b:ba:54:2f:ca:e6:f7:9e:
                    ff:41:a7:a3:42:da:c6:0e:01:35:f1:b6:ed:ea:86:
                    70:5e:b1:58:58:b2:63:76:ef:e9:bc:f1:3b:b8:33:
                    d5:53:cc:57:66:53:87:54:91:0e:fa:03:67:67:ce:
                    47:ee:71:93:3e:0d:40:89:a8:7d:fb:bc:31:1c:8c:
                    a4:d2:8b:9b:b1:39:5b:47:f0:fe:4c:29:f0:b4:b2:
                    c4:23:f0:8e:ce:ef:a9:b6:17:7d:50:49:40:4f:f2:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:09:B9:44:F1:4D:21:7E:9B:54:8D:49:3A:FF:A9:8A:AA:4A:5A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e24b99b3-167a-3a1c-a678-f4d22643bad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:03:3a:2f:39:9b:c0:64:0d:c5:a3:a4:65:2d:9f:7b:fc:e0:
         3d:29:09:2b:c4:c3:38:93:05:72:44:35:42:89:28:46:c1:ef:
         9d:e3:31:95:8d:79:12:10:4b:a3:b7:70:d9:38:04:88:59:f3:
         a5:0b:02:ad:ae:84:4e:a7:d3:cc:f0:38:f7:f6:a3:f3:6f:91:
         5c:b4:ba:51:77:1f:b6:8d:2b:74:e1:63:43:4e:73:44:a5:8f:
         47:b3:b5:de:12:07:6c:33:1d:b0:07:42:54:e0:b4:95:b1:e2:
         1b:e8:7b:f0:98:72:c0:9a:99:4a:43:8c:02:83:a0:84:35:6b:
         b2:e1:26:e3:48:e7:20:b0:e4:00:a2:37:b1:41:e9:a8:a4:1a:
         b8:be:23:ec:84:ad:09:eb:01:fb:9a:9c:ec:11:91:29:59:9c:
         b8:7a:e6:ee:b4:9c:e2:63:cc:40:69:58:b9:1f:53:2c:70:ed:
         ba:bd:2e:2f:54:1c:9c:5d:c4:09:f2:af:ba:ce:1f:8a:99:ff:
         1d:a1:54:9d:82:8f:47:a3:a1:f4:db:7a:37:14:28:9a:47:a5:
         64:34:36:03:8d:ed:22:bc:5a:90:e4:f9:26:8a:6c:1a:93:2d:
         b3:62:d9:17:d7:89:94:01:d1:f3:90:0c:fa:bf:af:2a:fd:58:
         99:c4:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:56 2025 by rpki-client