Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa
File:                     af075a20-4673-3bd1-bb12-ab58c38e8135.roa (raw, json)
Hash identifier:          vgpHqnIZlnyfh1ba7dWdei4On2JHR3kC+QQUAYm5DdI=
Subject key identifier:   0F:2F:47:1B:17:BF:58:8D:85:50:38:03:E9:7E:4F:F6:A9:77:1B:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161367C7D3A3DA084515A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.87.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:36:7c:7d:3a:3d:a0:84:51:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=52069d1c-e819-44d7-aacc-4b87cca21c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:4b:6b:d0:50:d1:53:4f:70:d2:3b:59:8d:
                    c2:65:11:e9:37:ea:67:77:87:7e:5a:bc:f8:ee:3e:
                    78:48:48:19:e3:3e:4c:4a:37:09:78:e6:49:fe:fe:
                    2f:35:4f:41:9b:33:d2:81:04:87:1e:85:9d:ed:cc:
                    01:e1:d4:30:90:18:a5:01:75:2b:7c:ff:96:b0:7d:
                    5a:3c:07:98:5f:7b:29:12:85:e6:ea:8c:aa:bb:62:
                    dc:be:73:dc:5e:b5:7d:31:ff:a5:3f:e2:e9:a3:e3:
                    20:e0:a4:f4:eb:58:14:77:d5:5d:c6:f9:f6:b7:22:
                    74:62:53:c9:a0:e8:90:29:39:bf:f1:30:c7:7c:c0:
                    d0:b3:6d:22:d5:70:89:e0:17:0b:5e:e2:15:05:f4:
                    d5:63:87:5e:03:3a:a9:bb:a5:42:69:67:af:fc:48:
                    25:04:81:4c:89:bd:e4:fb:6f:76:3a:56:75:e3:8f:
                    ca:3c:64:74:6b:ac:cb:70:47:0c:2c:c7:2f:11:0e:
                    3b:b7:98:19:52:b9:17:25:44:6c:db:b2:1d:6a:d3:
                    79:b3:f5:9b:c0:3b:3f:06:ba:dc:b2:2f:38:e4:8d:
                    af:d5:35:96:7e:50:40:5b:2e:94:94:e8:7f:9a:b8:
                    a7:32:ba:40:d3:c7:93:9f:58:2f:7d:c5:61:e4:d3:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2F:47:1B:17:BF:58:8D:85:50:38:03:E9:7E:4F:F6:A9:77:1B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:e2:cc:55:10:cd:47:10:db:b8:c7:55:2f:bd:c1:26:7f:
         95:94:22:18:59:da:30:47:7c:14:c2:b2:56:8a:c2:02:6d:e8:
         0c:70:f3:d8:c9:da:5b:bc:62:77:61:c9:08:77:10:69:2e:86:
         81:60:b2:73:75:e2:87:1f:8a:c0:ba:bb:f9:70:be:18:95:76:
         80:71:7f:d6:d9:ab:e0:75:09:d2:69:70:03:6c:8b:1d:1a:58:
         ae:ce:33:ac:8e:85:ba:7c:3e:9d:d1:c3:40:cb:4f:3a:d5:c4:
         de:f4:13:ce:05:84:4a:2f:7c:b1:12:2e:6e:8f:53:87:7f:52:
         1b:d0:63:f0:aa:55:90:8c:4b:f4:95:47:4b:75:02:b0:2f:07:
         cb:0f:7a:61:4d:d0:60:fd:9b:73:71:2a:2f:77:23:06:f8:c3:
         5d:01:d3:59:bf:21:42:dd:a8:38:df:b2:16:9e:f5:74:69:47:
         81:ae:6b:b9:00:8c:da:be:fd:b6:d8:48:8f:47:d7:4e:7c:6a:
         a8:b3:56:84:3d:11:a6:fe:a6:1a:c4:20:46:a8:5a:bc:3a:6e:
         44:09:b2:b8:e7:0d:53:04:f9:f5:76:50:e8:ed:ab:cd:63:dd:
         ff:42:5b:cc:12:f6:bc:8b:77:c2:70:2f:7a:d5:8d:36:a6:56:
         a0:ef:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:29 2025 by rpki-client