Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb238d12-9701-387c-b32f-5033350d98ad.roa
File:                     eb238d12-9701-387c-b32f-5033350d98ad.roa (raw, json)
Hash identifier:          8oMM1tUvbbX+diTtgL49lh7ZL9ZUS6UMJI8+T72r84g=
Subject key identifier:   8A:5E:36:55:5A:D1:AB:AE:CF:39:C8:AD:ED:6B:BC:E8:D8:4D:DA:72
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7C499237723E13A05180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb238d12-9701-387c-b32f-5033350d98ad.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.86.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:7c:49:92:37:72:3e:13:a0:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a67ba021-b340-4f40-be64-e403531491e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:72:9d:32:5c:b8:43:17:3b:60:48:2a:56:
                    b9:05:36:7f:5f:fd:6d:aa:52:a5:83:c6:26:6c:43:
                    9d:4a:ed:28:71:7c:29:ae:fc:84:54:54:02:26:fc:
                    16:88:16:c0:40:ad:fb:d0:29:ed:14:4f:fb:aa:fb:
                    42:1c:0f:cc:9d:05:23:d0:64:bd:ad:3e:d8:59:4a:
                    e6:fe:c9:a3:3a:22:93:8e:3c:52:f6:09:b6:65:b7:
                    13:91:4f:42:28:a2:ba:07:57:f4:48:7e:e1:46:ba:
                    e0:ca:a1:f5:33:ad:bc:9d:ec:f6:32:8e:55:ca:c0:
                    77:a2:bc:be:80:83:2c:9a:ab:14:43:b7:3b:7a:9b:
                    64:a3:f7:ac:be:bd:1a:60:53:89:5c:f0:92:07:2d:
                    3f:a6:11:9b:10:36:27:4e:47:ac:d0:68:3a:31:67:
                    55:86:de:a4:ab:3d:38:74:ac:73:42:c2:23:f5:fb:
                    0a:aa:d3:95:a7:44:5a:5e:b0:51:4b:60:46:c0:9f:
                    6c:45:29:aa:0b:34:08:9e:5a:09:5c:ef:78:c4:cd:
                    6c:e0:bc:49:1e:6b:43:b8:08:2c:8a:29:c5:36:97:
                    04:2f:c9:45:bb:25:ca:ac:2d:0f:af:cf:40:6b:1c:
                    34:02:96:b0:7c:91:5e:49:04:52:64:f4:c2:49:fc:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:36:55:5A:D1:AB:AE:CF:39:C8:AD:ED:6B:BC:E8:D8:4D:DA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb238d12-9701-387c-b32f-5033350d98ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:d1:57:df:f6:8f:6c:58:09:28:db:7c:77:43:a8:e0:7d:
         7b:9a:00:75:51:b2:8b:27:d1:c0:19:bc:f3:c0:72:39:64:20:
         15:56:4c:53:11:6d:6d:eb:b9:72:b4:94:a8:04:11:b0:bc:97:
         9b:85:38:70:1e:71:e5:84:95:0b:96:25:b0:5f:86:87:44:50:
         8d:af:a2:f4:21:5c:85:ea:a6:90:5e:06:cb:86:0d:51:0a:ee:
         41:a6:c6:11:14:f2:3b:c7:8a:c5:5a:ed:44:e9:fd:ee:66:92:
         a1:c7:d9:ea:44:2c:6e:6e:46:c4:6f:c4:de:01:92:81:c3:99:
         c8:59:c3:cc:ca:f6:f5:5b:e9:81:0e:d4:7a:e0:66:7e:30:b8:
         c4:39:de:6f:75:06:fc:1d:fe:39:84:9e:d9:95:65:75:34:33:
         ba:35:53:e9:89:3c:db:f4:8c:b6:a2:a5:d4:8c:df:00:b6:ce:
         96:29:33:74:db:28:08:c3:99:f1:eb:1e:bb:bd:e4:9e:68:99:
         db:3a:38:ed:68:e9:c4:e4:3d:64:6b:03:4e:05:1a:8d:94:24:
         49:e1:a8:1e:6f:a9:6f:26:42:f2:cd:5b:3b:a7:bb:94:55:aa:
         0a:21:eb:02:5c:40:04:ba:35:31:c8:d7:ce:0e:7e:84:49:e9:
         18:67:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:09:15 2025 by rpki-client