Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fe951cb-0a2a-369b-9b59-a5c37a6603c0.roa
File:                     5fe951cb-0a2a-369b-9b59-a5c37a6603c0.roa (raw, json)
Hash identifier:          M6Jcb3rA/nWVl3NH6EC4+smeCgDPqHOAxk9LEjE2oBI=
Subject key identifier:   A4:5D:36:8E:E5:EB:C2:18:0B:FC:F5:A8:99:53:78:48:97:64:AB:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161C8CE930D7F07F4027380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fe951cb-0a2a-369b-9b59-a5c37a6603c0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.81.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:c8:ce:93:0d:7f:07:f4:02:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=ecbed161-7532-4410-b8c1-8988ea58dd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:c8:51:d9:f8:78:9b:17:8f:28:b9:fe:9f:
                    43:d9:1e:c6:d1:9c:17:44:0d:e3:20:4f:e8:c9:70:
                    02:9a:c8:0b:8a:c6:58:a0:ca:49:fe:91:94:86:b9:
                    22:36:12:e3:bb:bf:fb:e9:20:56:5f:09:b7:9c:bd:
                    8a:e1:89:a0:92:4c:58:7d:d2:ce:60:a9:5f:f3:be:
                    eb:98:e0:3f:79:d5:a7:00:22:12:aa:17:2d:0d:03:
                    db:9c:62:e2:37:97:f1:a6:91:2f:dd:14:0a:a7:f1:
                    ca:d1:fc:b9:61:90:66:c0:0f:17:7f:c9:f0:31:2b:
                    82:43:9f:00:53:74:13:91:79:af:39:7a:62:ae:11:
                    d3:c4:90:9a:21:f3:8d:29:2c:ed:ae:86:12:88:0c:
                    5c:b7:d2:03:37:fc:50:eb:77:60:7a:46:ca:13:e8:
                    60:5a:d1:f7:06:ca:2e:df:2c:7e:e6:d1:db:bb:61:
                    0d:a0:31:76:85:66:89:a3:d7:66:2a:e9:b3:93:f6:
                    39:d5:d5:1a:2f:9a:27:7a:a0:f7:b8:b8:f9:66:ed:
                    8e:53:60:35:36:55:fa:4f:b6:06:a7:80:4b:4c:4b:
                    2c:3e:1c:76:27:58:ba:a2:cb:72:11:de:66:1b:89:
                    e4:21:e0:12:11:b4:51:72:3a:6b:48:c8:f7:71:46:
                    86:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:36:8E:E5:EB:C2:18:0B:FC:F5:A8:99:53:78:48:97:64:AB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fe951cb-0a2a-369b-9b59-a5c37a6603c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:00:64:dc:ef:04:5e:ee:6f:63:58:0f:02:44:39:bf:d0:84:
         98:38:f8:54:e2:4f:be:73:c1:1f:e4:db:12:7b:77:c1:b6:74:
         1e:14:99:8d:c9:88:d0:3a:20:a5:c5:86:19:c4:42:63:0d:f5:
         c4:56:49:75:0a:8b:db:cf:1a:86:48:46:ef:18:2a:08:df:83:
         ea:b8:7e:c7:89:6e:03:b9:cd:3f:2b:70:5e:95:7a:e0:b2:8a:
         60:a9:e4:6d:98:8b:03:f7:16:14:4e:59:12:ba:cd:bb:e9:59:
         97:81:98:a6:66:ef:43:a9:3e:7f:af:0a:78:77:c4:35:d9:ca:
         ac:3d:43:80:35:82:d4:7f:72:65:23:bb:de:77:1d:43:ce:e9:
         03:1a:7e:5d:55:b8:58:bb:e0:aa:38:ac:d9:d8:fe:c3:54:88:
         c3:90:1d:b4:22:de:4c:71:3e:f2:ef:41:f7:1b:ae:2f:7e:ce:
         71:3a:8b:53:f8:4a:3c:05:e1:a9:85:41:9f:72:c0:73:6a:20:
         a4:c3:21:0e:5e:6c:f3:55:d1:d1:50:5a:66:4b:be:81:0b:71:
         d0:71:e0:82:66:8d:2d:c4:cb:6b:9a:c3:d9:95:00:47:3e:fd:
         8e:0a:84:7c:52:1e:60:45:c0:28:cb:4a:e1:29:34:7e:68:4c:
         97:36:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:19:40 2025 by rpki-client