Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ef04698-b845-3cf3-bcff-fd85a621945e.roa
File:                     3ef04698-b845-3cf3-bcff-fd85a621945e.roa (raw, json)
Hash identifier:          CHFf7Ye5l9GZ2ADxElqZlXpHaoAJ683KXeBbyFOAZeQ=
Subject key identifier:   B1:26:19:5C:57:F3:A5:6F:D4:30:5F:17:08:9A:B2:F8:CD:D6:DC:9A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161EE86FF9D772B522C10A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ef04698-b845-3cf3-bcff-fd85a621945e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.13.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:ee:86:ff:9d:77:2b:52:2c:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4211e955-8cc2-4256-a10a-cd8702cde38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:06:0e:fb:86:10:68:2c:4d:d3:02:d6:06:
                    b6:24:42:e6:f6:93:4e:e1:80:3b:12:29:7e:5c:be:
                    c5:a0:c8:e9:2c:dc:85:c1:cc:56:88:26:63:31:7e:
                    f2:a5:52:3a:8f:23:58:aa:2c:bf:8a:87:59:6c:1e:
                    cd:04:e4:43:6c:9e:55:23:f4:69:fe:b5:b9:2c:9e:
                    24:6a:98:f0:f6:16:15:61:d1:1f:96:54:b2:28:6a:
                    67:6e:c7:9b:94:b5:05:46:66:8f:8f:2f:35:c0:0e:
                    19:db:c9:8f:a7:75:36:c0:d3:2d:14:78:07:c8:6c:
                    9f:03:64:f1:18:c2:d9:0b:44:3d:ab:13:27:4a:5c:
                    cf:7e:2a:d2:7e:44:b9:9f:97:ee:ce:78:b2:a9:49:
                    ef:ff:2d:8a:d4:52:69:12:2d:20:60:f7:68:e4:05:
                    db:ad:cf:97:8f:8a:f7:23:3c:5b:4f:dc:cd:d1:84:
                    02:6c:a6:7c:de:76:f2:16:60:2c:ba:bd:e3:a6:53:
                    a3:41:57:3e:7c:e4:10:b2:16:26:40:61:14:d4:7a:
                    66:1e:e3:28:cd:f2:ab:e2:e2:b9:46:c9:0e:fd:77:
                    7a:60:49:4b:9b:c7:60:2d:46:79:21:0d:44:b9:3d:
                    36:e2:6f:06:27:83:fe:3a:1b:52:5b:ab:4d:45:00:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:26:19:5C:57:F3:A5:6F:D4:30:5F:17:08:9A:B2:F8:CD:D6:DC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ef04698-b845-3cf3-bcff-fd85a621945e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:6f:67:bd:f4:ef:b9:ef:5d:bb:12:1e:72:e3:b3:5d:15:07:
         82:54:1e:9b:91:13:bf:79:fd:d4:69:14:ed:16:f7:f6:c3:a8:
         ba:51:ee:d5:84:70:8e:08:15:c2:41:fb:04:90:34:1d:f7:06:
         c8:5d:2c:92:3f:77:e3:e8:7c:b1:4c:03:79:f6:a5:7e:7f:b3:
         ef:27:4f:81:23:3e:32:82:51:d2:f4:a6:e3:02:0f:42:a6:38:
         96:20:e4:f8:23:b9:a5:4a:c3:c8:31:b3:30:cf:7f:61:c6:71:
         85:e6:26:a3:a4:ec:da:5b:42:24:93:70:b9:f1:91:81:87:f2:
         ef:1a:88:65:38:2e:95:34:f3:bc:5d:1a:af:f3:91:4c:d7:01:
         b8:47:da:6d:9e:0a:d6:ba:00:78:c0:20:03:2c:43:3b:44:12:
         a6:18:3a:08:58:63:ab:01:db:39:f6:f8:e1:ce:f6:9b:be:37:
         d6:54:26:f8:00:eb:7e:35:73:3f:fe:0b:1c:ba:00:8a:9b:66:
         ef:44:87:4e:ae:81:77:e1:cf:a2:55:9d:01:8e:54:4a:b7:2d:
         52:2e:a5:75:4d:91:1c:4f:c5:a7:6e:9f:96:27:3e:6e:b1:31:
         85:24:5b:21:5a:0f:ab:09:da:99:fd:aa:18:13:ad:f9:60:8c:
         74:b6:e4:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYe6G/513K1IsEKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
NDIxMWU5NTUtOGNjMi00MjU2LWExMGEtY2Q4NzAyY2RlMzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo8GDvuGEGgsTdMC1ga2JELm9pNO4YA7Eil+
XL7FoMjpLNyFwcxWiCZjMX7ypVI6jyNYqiy/iodZbB7NBORDbJ5VI/Rp/rW5LJ4k
apjw9hYVYdEfllSyKGpnbseblLUFRmaPjy81wA4Z28mPp3U2wNMtFHgHyGyfA2Tx
GMLZC0Q9qxMnSlzPfirSfkS5n5fuzniyqUnv/y2K1FJpEi0gYPdo5AXbrc+Xj4r3
IzxbT9zN0YQCbKZ83nbyFmAsur3jplOjQVc+fOQQshYmQGEU1HpmHuMozfKr4uK5
RskO/Xd6YElLm8dgLUZ5IQ1EuT024m8GJ4P+OhtSW6tNRQBl1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEmGVxX86Vv1DBfFwiasvjN1tyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2VmMDQ2OTgtYjg0NS0z
Y2YzLWJjZmYtZmQ4NWE2MjE5NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARw2zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL5vZ73077nvXbsSHnLjs10VB4JUHpuRE795/dRpFO0W9/bDqLpR7tWE
cI4IFcJB+wSQNB33BshdLJI/d+PofLFMA3n2pX5/s+8nT4EjPjKCUdL0puMCD0Km
OJYg5PgjuaVKw8gxszDPf2HGcYXmJqOk7NpbQiSTcLnxkYGH8u8aiGU4LpU087xd
Gq/zkUzXAbhH2m2eCta6AHjAIAMsQztEEqYYOghYY6sB2zn2+OHO9pu+N9ZUJvgA
6341cz/+Cxy6AIqbZu9Eh06ugXfhz6JVnQGOVEq3LVIupXVNkRxPxadun5YnPm6x
MYUkWyFaD6sJ2pn9qhgTrflgjHS25NE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:49 2025 by rpki-client