Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0723210d-cbcc-3b84-986e-b17c7298cdde.roa
File:                     0723210d-cbcc-3b84-986e-b17c7298cdde.roa (raw, json)
Hash identifier:          3tp/4/yQIGf1yFe8DAWspqwITOYQ++NFlB3gejol2y4=
Subject key identifier:   26:E7:83:45:D9:B3:81:EE:F6:0F:2B:A7:8C:55:42:9F:7C:F9:1C:BA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1EC059EC2B7152853BD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0723210d-cbcc-3b84-986e-b17c7298cdde.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.85.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ec:05:9e:c2:b7:15:28:53:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=27308042-9e16-41db-bfbb-ad9b0d6c8e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:4a:5c:56:a1:c0:74:66:2b:9a:7e:fb:5f:
                    13:e4:1d:25:01:05:e1:38:32:31:7c:2f:4b:ae:c2:
                    76:73:dc:38:aa:76:eb:dd:bf:77:83:4c:60:87:57:
                    75:ba:33:61:53:6b:e1:71:2f:e4:a4:18:e3:fa:d2:
                    ed:2a:e6:93:16:58:ae:21:85:f9:a7:60:5a:85:bb:
                    c9:eb:c1:89:44:25:04:bb:45:6e:13:4d:60:c8:3f:
                    d0:6f:e5:f8:ff:61:02:4c:40:a3:1a:96:99:8f:c2:
                    5d:c4:13:6a:07:c5:5e:8e:7b:0c:02:dc:70:57:eb:
                    c5:b2:80:f1:86:89:11:c7:db:21:4e:21:6b:e7:01:
                    fb:c5:72:30:40:7b:e1:3f:ac:99:cf:be:1d:84:c6:
                    2d:29:fc:c9:fb:e9:a6:b6:7f:7f:2e:40:51:0f:a4:
                    3e:a3:30:8e:f7:21:b7:1f:d7:19:e6:49:0c:79:dc:
                    ac:25:2e:d1:69:41:fa:85:3a:cd:3d:85:d7:1a:6e:
                    5a:a8:48:59:58:08:23:b6:68:c4:b9:15:4f:9e:24:
                    c9:bc:27:8b:9e:3a:01:e5:e3:ee:73:14:e5:39:5d:
                    29:a3:7c:52:f6:e6:86:25:e3:2e:ba:c0:f5:71:d8:
                    90:71:6f:4a:02:65:6d:fa:2c:1e:e1:e9:ef:aa:26:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:83:45:D9:B3:81:EE:F6:0F:2B:A7:8C:55:42:9F:7C:F9:1C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0723210d-cbcc-3b84-986e-b17c7298cdde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.85.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:9b:6a:8a:5f:6f:6b:e1:f8:f1:82:a7:8b:79:3e:53:8e:
         37:75:6f:72:9e:48:77:75:a7:6c:bb:5f:20:d6:98:e5:95:38:
         81:4c:d0:a1:f1:7e:41:24:fd:23:df:54:61:69:d7:21:12:0e:
         34:ee:54:e4:1b:68:ba:fe:74:f4:bd:5f:b2:4e:59:d1:4a:9f:
         9a:dc:7b:b4:4e:45:18:6e:94:ad:9a:ee:1a:23:ab:b9:bb:46:
         25:01:3b:d7:44:b6:bb:d8:2c:ea:e5:a5:6a:3a:40:f8:01:53:
         40:fa:f2:79:0a:29:5b:26:3f:70:09:8c:32:58:61:f0:31:bd:
         8c:35:ad:c2:ef:de:dd:e4:28:98:80:11:2e:a2:87:a4:b8:81:
         2e:69:84:d3:14:a9:4a:e3:a1:51:d2:52:dd:9b:a5:ad:4e:24:
         54:10:4a:33:0c:51:1b:10:f1:30:bb:b7:32:29:2d:fe:ab:e6:
         50:e8:e4:59:54:b6:73:ad:f3:9e:a2:06:22:7d:b3:be:eb:ff:
         49:6b:f6:19:ce:75:8f:cc:4f:69:ef:85:cf:9f:8c:9b:36:be:
         25:b4:40:f5:66:fa:64:42:11:02:4c:65:de:d9:f3:71:37:0b:
         d4:d1:9c:0d:96:57:ae:67:6b:4b:79:be:24:09:7f:ba:82:f1:
         b6:a9:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:16:12 2025 by rpki-client