Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa
File:                     69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa (raw, json)
Hash identifier:          ik4nbwnkx5a62lUcQ1qfYujW8I06Tn5JwLwrqAUsMS8=
Subject key identifier:   52:E3:99:0D:1D:E5:CF:3B:2D:8E:FE:00:D3:D1:C7:0C:37:E0:2C:4F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1615E4EB46CEC677643CE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.94.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:5e:4e:b4:6c:ec:67:76:43:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=bc345405-479b-4462-9923-ee66af73a81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:37:fb:b9:7f:18:9e:00:70:dc:04:8d:e7:05:
                    30:35:f0:ad:01:96:53:61:42:0a:ae:fa:ef:51:15:
                    4e:a9:3e:0d:50:e0:a2:2c:ff:b0:e0:73:09:6e:e0:
                    6d:26:11:09:50:0e:33:64:da:91:09:f5:eb:e9:30:
                    93:08:a1:e1:12:83:c3:1b:64:cf:d2:d1:a7:5e:98:
                    00:66:79:e4:7c:41:5a:15:23:22:7f:23:7c:2b:42:
                    9e:af:df:74:c3:ee:50:25:a8:a1:52:cf:f3:fc:3d:
                    d7:b0:dd:74:05:c4:70:3f:d6:73:ac:76:6b:b0:be:
                    62:c0:4f:60:40:bb:fd:d2:ef:57:63:74:bc:71:ee:
                    b0:06:51:7c:bc:79:22:4c:6c:73:e8:69:07:3f:e5:
                    62:f2:8d:5e:a6:8b:91:4b:91:5a:58:7c:df:e1:7e:
                    d5:8a:4e:c5:ef:6c:f8:8b:12:1f:cc:ec:cc:e3:e5:
                    4f:c3:4c:80:77:bf:dd:fc:92:e1:26:2d:12:17:df:
                    14:3d:ca:65:74:fa:71:b1:86:5f:7a:0d:37:81:93:
                    3c:c5:00:91:30:72:a0:f4:a5:54:90:33:1b:17:48:
                    47:7a:bc:60:db:3e:49:25:28:39:91:ee:13:fb:31:
                    7b:60:b3:ef:35:d0:08:4f:64:1f:6a:78:27:fa:e2:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:99:0D:1D:E5:CF:3B:2D:8E:FE:00:D3:D1:C7:0C:37:E0:2C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69e3e97c-4713-3cc0-a25c-f7f963a7f7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.94.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:f0:aa:74:66:14:4a:08:39:31:24:c8:b0:09:80:89:86:
         63:d2:01:87:70:82:d0:b6:61:40:75:f1:6f:59:40:b8:7b:94:
         fe:f6:df:9a:ca:bb:95:c6:8e:c3:84:a3:a9:af:8e:f3:6b:b8:
         d8:87:69:67:d5:19:3a:c4:18:5a:44:46:6c:a3:bf:1f:58:cc:
         02:b2:09:dc:64:c9:d0:1d:3e:13:81:7f:bd:cf:93:67:4d:96:
         8a:4a:f9:1d:86:91:54:e8:b2:79:83:93:c2:0a:62:bd:25:9c:
         7a:fa:a1:c3:41:fe:20:af:71:d2:27:5d:ef:94:4b:e3:83:85:
         2d:31:d0:b9:5c:a5:f6:6c:92:57:0e:12:20:98:0d:c4:f1:f4:
         ae:fb:2f:d1:b6:e4:61:16:d7:b6:3a:d6:75:65:4f:2e:2b:62:
         ac:db:3e:5f:5d:fb:0b:5d:ec:f5:96:1b:e4:eb:eb:1e:48:ea:
         bb:23:91:b8:fc:50:ea:e0:d3:ad:b5:f9:c3:97:fb:03:f4:20:
         41:92:70:2e:23:df:05:d1:57:06:ee:c3:78:aa:25:a5:cb:00:
         58:d0:03:c0:f3:09:e9:1f:14:e9:28:5d:39:d8:de:98:e2:ab:
         eb:bb:1f:7e:02:bd:52:21:e3:32:49:f1:26:1e:18:f9:d8:f1:
         9d:5a:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:20 2025 by rpki-client