Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24f8a3f1-8bdf-3151-93d6-915e9a25c8a1.roa
File:                     24f8a3f1-8bdf-3151-93d6-915e9a25c8a1.roa (raw, json)
Hash identifier:          MONk2TB4KJQuHf6P8BzD1zgjNd+zPGEKwzFvY6GKxX4=
Subject key identifier:   AB:63:6E:30:A8:82:54:CF:49:DA:07:73:0F:8C:20:85:88:D7:70:00
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16152A18B74FE217BC9C300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24f8a3f1-8bdf-3151-93d6-915e9a25c8a1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.13.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:52:a1:8b:74:fe:21:7b:c9:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c772777e-40f4-4382-beda-e31f5b66093c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:52:27:91:64:dc:48:c3:72:2e:c2:c5:04:
                    e3:f1:b7:31:b6:76:02:60:3b:07:69:ff:19:76:e9:
                    ec:93:7b:af:6f:76:5b:e5:d7:aa:30:5c:1f:6a:1a:
                    16:52:16:6e:96:2d:b1:c2:7c:00:0b:36:1d:fb:e9:
                    cb:c0:54:43:4a:f4:c3:8b:e6:c0:f4:e9:b5:4a:e7:
                    b9:69:6b:31:1f:0a:cb:db:3e:79:c9:95:02:7b:e9:
                    3e:dd:28:0c:a3:9f:5b:4e:14:52:24:3c:45:8f:e7:
                    b3:e4:0f:5d:a8:ba:8b:86:86:79:10:51:a5:d2:31:
                    11:4e:3e:c4:8c:7e:13:7c:d0:22:64:de:a4:79:53:
                    51:33:cf:59:bc:42:85:d8:2f:13:4d:0f:e8:a5:09:
                    c3:5d:dd:e9:78:05:4b:59:f4:89:4d:71:62:41:5b:
                    1e:93:39:ba:79:f6:6a:53:e8:93:5a:5a:8b:2f:be:
                    a0:9d:51:9c:40:43:f2:39:73:e7:6e:b1:da:ed:0a:
                    1d:d4:82:80:7d:7a:c1:57:d0:de:7e:e2:ca:7f:e4:
                    36:df:85:f0:c8:c8:03:98:bc:fa:78:55:74:4a:59:
                    95:16:fb:58:f2:1b:4d:d2:f8:d5:51:ee:72:94:d7:
                    96:6a:79:d2:08:f2:98:b0:9c:fa:c4:93:a9:37:d1:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:6E:30:A8:82:54:CF:49:DA:07:73:0F:8C:20:85:88:D7:70:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24f8a3f1-8bdf-3151-93d6-915e9a25c8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:82:3a:6f:f1:14:a3:23:2e:5c:3e:0e:35:49:f2:7b:9c:03:
         a4:77:c2:07:6a:8a:48:c4:da:29:1a:c3:06:bf:ac:55:39:58:
         6c:2c:04:b7:de:3f:7f:6b:33:f8:6c:ca:97:09:1f:27:14:52:
         91:a3:d2:af:41:16:8f:1d:8b:44:5e:d8:cb:45:8a:d7:c7:3d:
         be:01:98:4b:43:90:02:b8:13:3a:75:fc:93:ad:7b:a5:78:cc:
         d5:40:e4:52:24:af:24:88:21:42:19:51:33:59:be:83:b7:b5:
         09:41:44:e8:43:06:bb:e7:3e:38:f1:74:5a:30:43:e8:46:e0:
         73:b1:34:b3:13:55:15:d3:1e:f6:1a:f5:da:aa:aa:2d:49:78:
         9e:f7:08:91:70:aa:d4:00:5e:66:70:a2:74:53:55:3e:8a:27:
         12:89:4b:9e:8f:b7:2e:64:3c:c9:fd:a0:30:98:23:7c:10:73:
         c6:fd:29:22:e9:7d:65:1f:5f:f5:c9:4d:9e:ba:ff:31:38:55:
         44:73:aa:52:95:62:02:91:02:ea:9f:f5:6d:fd:b8:70:64:67:
         ff:7a:58:3a:f4:f4:41:68:0c:23:1c:23:d0:1f:40:ad:6f:88:
         24:ab:19:b7:62:ff:37:76:e8:cb:a6:24:98:38:99:83:a3:5f:
         e3:a4:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:17 2025 by rpki-client