Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa
File:                     c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa (raw, json)
Hash identifier:          qHOfHw0SInq4uel/vmIpvafqOfeAkp7mGAy4GlKAtZY=
Subject key identifier:   E1:E3:D2:81:63:3C:C2:AE:D4:E0:05:9D:11:DD:97:C8:87:A2:2E:9B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1615C75660BF3CD163B7400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        71.9.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:5c:75:66:0b:f3:cd:16:3b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4bff1cad-c8c3-4ee5-bc8f-fb1e3be5a919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b6:b8:c8:23:39:70:b9:70:89:3a:80:87:4b:
                    8c:9f:37:31:d2:88:86:10:3c:1a:e0:16:ff:f0:15:
                    ce:a8:7d:eb:9f:d1:38:b9:07:dc:d2:28:f6:90:a5:
                    50:61:8f:2c:30:7a:0d:c3:c9:d7:d8:4c:3f:dd:63:
                    e0:a2:26:74:7d:12:d7:06:11:a7:09:d8:c1:6b:6c:
                    9d:fb:a4:8a:2e:ad:62:58:ea:ec:d0:05:e4:6b:fd:
                    8f:4e:be:a5:12:b2:13:7c:2a:48:41:b9:f2:f8:4a:
                    64:d3:c7:2e:29:42:a6:44:31:61:5c:05:c3:a4:5d:
                    24:c9:a6:7c:a5:79:b3:2e:d1:9b:49:2d:eb:79:bd:
                    a0:90:26:66:27:93:cb:f8:15:c8:28:c2:94:e9:a3:
                    65:b3:5a:59:05:76:11:77:ae:56:c5:57:cc:dd:93:
                    50:60:2b:97:05:08:09:87:0b:b5:68:43:fc:09:64:
                    3f:33:14:af:05:2e:09:1b:66:33:6c:79:81:4b:ad:
                    86:24:4f:fd:d8:c4:82:9f:e0:66:d1:8a:d0:14:9e:
                    66:ea:83:d2:0e:b2:bd:2a:15:9a:e1:73:e7:ad:c8:
                    80:2a:ef:c0:f6:c3:15:44:f6:c5:9b:60:02:07:a7:
                    28:0e:a7:94:c6:88:24:2d:ba:62:6d:0c:db:a3:ab:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E3:D2:81:63:3C:C2:AE:D4:E0:05:9D:11:DD:97:C8:87:A2:2E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5219478-4150-3efc-b41e-7b4c3af4cdbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:85:02:93:a8:f7:77:1d:9d:a9:a4:49:a0:11:70:d0:2a:
         3c:f4:42:57:20:70:54:0c:69:12:95:47:4d:17:cb:7d:41:70:
         43:5d:09:8d:9a:1c:d4:ff:1e:f9:95:79:ed:a1:b0:a1:cf:a8:
         ea:e0:cb:09:5f:98:c7:22:22:db:65:fb:4a:74:4f:67:a2:c6:
         a9:9d:ad:bc:c8:13:a9:e5:88:8a:16:26:d0:77:6b:63:e8:32:
         0a:64:58:70:ec:fb:ea:33:51:f0:77:4c:f3:45:d7:2b:72:b3:
         f1:7c:f2:65:a1:7a:b4:4d:cc:1f:d7:30:dd:55:ed:8a:43:e3:
         dd:9f:5d:f3:91:57:1a:1b:a9:d5:0d:ee:e6:77:32:65:58:cd:
         10:30:80:7c:b6:61:41:8b:e9:20:0c:97:50:9a:6d:39:cd:29:
         7c:2b:e4:31:64:18:1e:1e:b5:31:d5:02:6e:48:14:a7:0c:63:
         66:35:80:92:e6:3e:85:c4:82:26:34:6f:e3:b6:b1:26:05:a6:
         84:1a:f3:31:9c:9a:80:8a:03:5a:ea:3c:37:79:f8:72:da:97:
         42:43:09:d6:62:a6:cc:64:01:af:0e:ee:52:d8:3a:d1:b0:a8:
         0a:be:c9:87:6e:e0:dd:95:d9:8f:a4:24:c9:eb:16:c4:58:5b:
         1c:d8:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:53 2025 by rpki-client