Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4b97d56-fd9b-3570-a110-bdd7fa9361f8.roa
File:                     f4b97d56-fd9b-3570-a110-bdd7fa9361f8.roa (raw, json)
Hash identifier:          R7XJ6qxkGJE3nxvpS52AbgVtMP19aJvTKUoXU8Ee35I=
Subject key identifier:   73:43:25:83:63:4F:05:AE:63:B5:50:6F:31:71:AF:D6:0F:36:77:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A97D3030582368E369560
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4b97d56-fd9b-3570-a110-bdd7fa9361f8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        71.9.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:97:d3:03:05:82:36:8e:36:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d77da5b1-8517-4fb3-b3d1-be3cbd22dc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:53:a8:6f:29:47:cc:11:9b:4e:a2:9b:95:
                    a4:f8:88:eb:39:3b:74:b7:db:de:28:8b:c7:bf:51:
                    0f:99:08:29:04:92:19:66:9d:b1:42:27:c9:55:36:
                    4b:5b:26:83:fe:10:aa:8b:1a:82:02:ac:ec:b0:d0:
                    8c:5f:dd:2d:66:da:eb:85:2b:f2:fa:39:f0:e9:62:
                    be:7b:6e:5a:20:99:b1:6b:98:24:e8:91:91:9a:4d:
                    17:8c:d9:0c:82:05:ae:8a:c2:b8:94:e2:43:cc:a0:
                    aa:cc:af:9d:39:3c:4e:7d:1c:bb:3b:9c:49:b3:18:
                    ed:24:93:6c:8f:00:c3:70:dd:19:56:57:24:09:bf:
                    4b:24:5f:66:ad:b6:01:63:bd:74:fb:a9:e5:67:f4:
                    0a:d0:a7:68:c1:cd:c2:d8:c2:81:3d:df:17:ac:fc:
                    33:0d:d7:8d:b4:d0:bd:69:89:f1:3e:76:34:7b:39:
                    58:ba:bc:da:48:06:37:dc:45:37:58:02:d3:0d:d0:
                    8b:55:0e:fe:40:0f:79:61:37:16:26:8e:47:e7:09:
                    e4:ea:cb:5b:77:00:bb:29:40:35:d1:10:df:14:35:
                    33:6c:29:11:50:8a:aa:98:4e:8b:03:39:83:45:cd:
                    9f:68:ac:fc:d9:12:e2:9f:f2:c6:1f:91:30:9a:53:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:25:83:63:4F:05:AE:63:B5:50:6F:31:71:AF:D6:0F:36:77:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4b97d56-fd9b-3570-a110-bdd7fa9361f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.9.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:40:50:e9:30:d2:6c:98:23:11:bb:fe:8a:7c:f2:71:e5:
         33:49:ff:98:82:c0:71:c0:70:97:6e:f9:30:af:97:a1:5a:4f:
         3d:46:0d:61:81:0f:79:34:ff:8a:cd:9a:28:d0:1a:a2:fe:c6:
         fe:72:b6:a3:fc:bf:8d:04:db:ba:77:74:22:31:46:e4:e9:0f:
         5b:3e:6c:3d:ab:52:2b:19:5d:a5:b7:89:c2:a8:ab:d5:52:f0:
         f2:80:6e:06:7a:8a:e0:46:6a:20:d3:d1:bb:34:8e:d6:7c:d8:
         ad:34:06:09:47:18:8b:01:7b:c9:93:35:9c:11:d4:d1:c3:f1:
         e8:e5:80:47:67:5b:18:ca:c0:f9:8a:25:bf:b5:d4:a4:64:50:
         28:c7:36:37:6c:bd:45:57:08:64:5a:69:8a:2d:81:90:01:32:
         88:ff:71:84:06:80:1d:52:c7:f4:4c:2a:dc:68:60:89:62:cd:
         c9:e8:93:4d:57:9d:a6:b3:12:c8:7a:6d:e2:2b:50:05:d6:e1:
         bd:f0:d0:34:dc:52:9a:f5:77:f0:8f:de:eb:e1:c2:ba:de:e0:
         2d:7a:f1:67:96:39:d3:0f:b9:0c:d9:14:9d:14:4a:fe:0f:de:
         da:83:1e:23:cd:f4:26:70:98:ee:93:06:64:7b:74:ae:f7:51:
         39:5b:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:11:05 2025 by rpki-client