Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02b1f691-7ddd-3cdb-82e3-3db8cb111a32.roa
File:                     02b1f691-7ddd-3cdb-82e3-3db8cb111a32.roa (raw, json)
Hash identifier:          1I9ZCsVMHlODfrT6nITHzJBCPi8O7Q+FxJqJj+b/5xc=
Subject key identifier:   E1:B7:0C:48:63:03:50:5E:03:E7:CE:BA:BD:DA:AA:0C:92:86:DB:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161EA5CBA913D8973763500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02b1f691-7ddd-3cdb-82e3-3db8cb111a32.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.12.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:ea:5c:ba:91:3d:89:73:76:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e804975a-4585-43f5-a67e-4466bed0d258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:e6:22:c5:b9:c5:d1:3f:b3:cb:9a:dd:99:
                    6b:f3:e3:84:e0:4f:f3:5c:6c:12:94:f0:c1:1c:12:
                    0e:2c:4e:45:ee:a7:22:bb:4b:3e:36:fb:80:e6:cc:
                    10:02:f4:fe:8a:c3:6f:f6:23:aa:4d:74:25:58:ad:
                    6b:15:bc:86:0c:9b:c4:fe:a3:9c:44:e0:53:3b:4c:
                    0a:fd:ce:e3:12:42:fc:5f:27:49:e7:4d:f2:c2:01:
                    27:25:01:92:2d:e9:26:e8:36:a8:6f:bd:7c:96:5b:
                    54:d2:7f:5e:b5:fd:16:ff:4d:58:49:07:fd:39:bc:
                    65:04:26:f7:59:b2:e5:06:88:1b:b6:09:a2:c8:60:
                    b9:37:92:1b:5e:82:43:d2:77:e4:8e:ea:82:c7:39:
                    34:4f:75:37:39:5a:f7:24:ac:3e:c5:34:c1:9a:17:
                    5a:2a:2d:dc:77:24:7e:94:ef:dc:12:f1:4a:a2:16:
                    5a:6b:37:27:9a:b8:ac:5c:d6:db:67:bb:50:41:10:
                    de:a2:1a:e5:86:ff:9a:e2:6c:c6:7b:c4:b3:5d:31:
                    6d:c4:0a:43:b6:af:ff:5d:06:19:73:75:ba:13:aa:
                    4e:aa:7b:18:c9:55:63:43:5a:3e:26:7b:b3:e2:f2:
                    a4:38:66:72:e7:62:d9:d2:2f:b7:43:a9:4f:75:02:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:0C:48:63:03:50:5E:03:E7:CE:BA:BD:DA:AA:0C:92:86:DB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/02b1f691-7ddd-3cdb-82e3-3db8cb111a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.12.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b5:e1:b0:5d:45:b8:16:3b:a6:72:3d:21:86:9a:dc:0e:ca:
         2a:70:43:6b:40:47:17:ba:23:0c:8e:36:51:69:0b:2b:9b:4e:
         cf:a7:1d:d0:01:ab:5a:db:92:af:34:66:b6:55:a5:59:3e:c9:
         5b:e3:e5:29:75:fd:69:5d:39:8e:66:64:57:27:a6:da:a2:d8:
         14:04:94:5b:45:70:e0:5d:41:a9:aa:e2:80:f9:79:24:09:46:
         d0:0c:8c:72:1d:8b:f4:a7:07:37:79:98:17:21:74:3d:a9:29:
         ca:96:50:d4:67:25:9b:b0:e7:ee:7e:2e:e8:ac:78:a6:d0:5e:
         1b:f7:5c:7a:11:21:37:67:a9:9a:2b:26:d4:08:4a:e3:aa:f1:
         9e:22:ad:cc:e8:a2:41:34:fb:3b:8a:a8:53:f4:43:06:42:a1:
         22:df:ec:c3:56:d8:46:2a:f7:b1:d4:c5:8e:67:da:b5:6f:8c:
         e7:7c:00:24:bf:9f:79:f3:dc:be:b0:18:f3:5e:e2:17:72:2e:
         21:14:8d:c2:e0:e4:da:01:f3:ac:92:92:12:6e:84:0f:3b:72:
         3d:94:99:fd:e1:a5:86:da:01:b3:1d:6a:4d:e6:d9:47:1e:2c:
         dd:72:7f:4b:ed:5a:3f:51:44:fd:eb:c0:af:26:a9:68:e2:ae:
         df:97:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:07 2025 by rpki-client