Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa
File:                     04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa (raw, json)
Hash identifier:          xgAfJ8Zh/kINvcJolyxT0a1T1CFJVLh/W2YivrQpjbA=
Subject key identifier:   10:9C:FE:21:22:9E:B2:02:8E:E7:A8:0D:2E:07:BC:7B:14:EF:C6:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7A471957A560BDFD3140
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.89.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:7a:47:19:57:a5:60:bd:fd:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9d98e6c6-57b0-4248-b3e6-40465d6747c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:41:12:7b:e8:48:0f:fa:9d:2d:17:cf:49:66:
                    cf:57:cf:fe:a2:82:60:85:c1:07:a6:5a:3c:45:f4:
                    65:ca:98:4a:50:a8:a3:80:0c:1c:8c:e6:8f:7d:94:
                    0a:32:98:b6:be:29:f9:2a:3e:8c:bd:f9:e7:42:e0:
                    40:f1:b4:97:b2:ba:38:e0:a7:c3:eb:cf:27:8a:aa:
                    9c:2c:72:f4:79:1c:26:a3:3b:38:de:46:4b:cf:cf:
                    fc:1b:f8:52:ad:3b:c2:90:35:8e:87:e2:13:b1:bf:
                    43:3f:7f:ff:8b:be:02:b6:df:bf:10:95:b6:c9:16:
                    94:d6:8f:00:40:96:91:9f:fa:a5:f3:5c:0c:53:42:
                    de:0b:2d:e4:9e:29:50:81:47:a7:05:9f:96:91:3e:
                    d2:4e:a2:65:03:5d:4d:75:40:d2:c3:07:13:7a:f4:
                    e9:02:8a:24:6e:34:b0:f3:72:2b:0b:37:49:0c:0f:
                    04:84:a4:34:e8:02:06:62:a5:3a:16:f8:a7:45:f0:
                    25:38:5b:78:01:70:7d:2a:33:37:e6:58:36:39:b3:
                    9c:02:60:e9:88:e7:32:79:35:6b:98:ce:c3:d8:f2:
                    68:e6:82:d7:20:d3:2e:8f:14:33:32:4e:3e:fb:8e:
                    3a:da:88:a7:8e:dc:58:57:6f:c5:dc:eb:9b:f1:0b:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9C:FE:21:22:9E:B2:02:8E:E7:A8:0D:2E:07:BC:7B:14:EF:C6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04b2b1ce-2b2f-3958-b44d-9b541fdf9417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.89.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:8c:43:05:6b:1e:8e:a8:b4:60:3d:58:8d:98:26:4d:61:
         e2:01:4a:17:59:30:a9:b5:fa:8e:1a:7c:22:3c:57:dd:bd:ad:
         2b:2d:8a:86:b6:b5:d6:80:ca:8c:6b:2b:9c:e4:11:a1:f8:dd:
         64:9b:36:ae:4e:2d:15:dc:35:b2:d8:83:80:b1:13:19:17:93:
         22:38:3f:78:f3:13:04:aa:54:b2:6c:37:7f:ce:e7:b8:0c:79:
         91:58:cb:09:e8:1d:bb:29:72:5f:be:cd:9c:76:c6:8c:b2:c4:
         07:24:4a:ff:88:d7:37:7e:8b:7a:c3:61:d8:aa:72:83:fb:a8:
         4a:ec:70:f8:10:ef:21:f0:6f:46:d9:1e:43:b8:8b:af:39:8d:
         ff:c7:4d:5e:7f:c1:1c:0f:fb:29:f4:b1:72:58:68:73:09:44:
         62:69:10:d2:97:40:84:bd:6f:66:d6:f8:1f:24:5a:af:22:3a:
         4c:66:fb:02:e9:a9:ce:e9:2e:41:85:09:25:13:c3:98:ae:c4:
         65:a0:96:a3:4e:17:76:45:38:12:1b:b7:fe:b2:eb:42:8f:43:
         67:db:d7:53:9e:ab:3c:db:cc:e5:42:8a:76:77:22:36:6f:3d:
         ba:1b:44:59:1d:61:57:ac:50:b7:9b:f4:58:0c:1b:71:9b:38:
         cc:a7:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:14:46 2025 by rpki-client