Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f7e343e-ce70-3204-9def-f1d932fa2770.roa
File:                     3f7e343e-ce70-3204-9def-f1d932fa2770.roa (raw, json)
Hash identifier:          ZElHRc8SdjBatOTDSfq9uLT+DX4+77zUoWY89twRYZM=
Subject key identifier:   43:00:10:79:74:C8:95:4F:F7:A4:21:AC:E6:47:D6:75:B3:24:5E:C8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D17EF05C97663CE5EDC400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f7e343e-ce70-3204-9def-f1d932fa2770.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.87.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:7e:f0:5c:97:66:3c:e5:ed:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=042a7c5c-99f2-4d6c-9064-abd15fe57c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:9d:d2:97:00:28:d1:a0:c5:c8:f2:cf:ed:
                    e1:69:fb:45:de:1f:80:f1:83:b9:eb:bd:97:fa:96:
                    5a:ec:d2:f9:78:c3:a8:9d:69:78:60:4a:44:36:84:
                    52:25:6a:08:00:99:1b:cf:fb:b3:bf:95:f6:72:f8:
                    07:af:0e:df:c1:1f:72:75:69:10:22:49:13:50:ea:
                    f0:94:7f:dc:7a:aa:e6:de:a1:2b:bd:3a:85:fd:d5:
                    1a:77:0e:a6:c4:ce:91:42:c0:7b:c5:95:07:48:ab:
                    98:0c:24:4b:75:f0:af:e4:53:b9:17:d6:22:5d:9a:
                    aa:f8:21:c0:5f:75:06:72:5f:52:8d:33:94:d5:16:
                    50:7d:11:3f:0d:53:2e:6d:28:bc:32:0c:a9:52:10:
                    f8:86:a8:59:4d:ec:0a:d9:7d:75:1d:63:1f:02:e9:
                    16:b8:89:58:02:11:c8:95:61:c6:88:d8:2a:47:a1:
                    4e:f9:52:c8:ef:3b:69:76:64:c1:45:30:a7:ae:43:
                    fb:cc:69:ce:79:72:95:a1:73:00:de:5e:3b:b5:a4:
                    c6:ad:aa:06:4b:9a:d2:4c:b7:a1:34:bb:ce:b2:c7:
                    ac:ee:6c:81:c6:ed:40:d3:55:d3:d3:da:a7:06:6d:
                    a8:1a:ca:32:ef:4f:09:08:7c:9f:aa:ea:82:33:1a:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:10:79:74:C8:95:4F:F7:A4:21:AC:E6:47:D6:75:B3:24:5E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3f7e343e-ce70-3204-9def-f1d932fa2770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.87.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:69:33:57:79:e2:10:1f:3e:31:37:fc:97:ca:41:ce:d6:e7:
         ac:b0:92:e4:96:36:21:b2:79:79:83:84:c4:8f:d8:b1:33:f1:
         c1:d3:f7:5e:3f:81:88:30:1e:8c:11:5f:e0:f3:e6:e9:b5:fe:
         e3:a5:93:18:4c:75:a7:b6:2e:45:50:f8:a1:18:f0:27:c1:bc:
         b9:c4:cf:d3:14:0b:c6:41:91:5e:06:13:32:25:b9:f3:42:be:
         fa:00:bb:d7:60:d3:2e:be:28:68:8c:7f:e5:df:24:55:af:8e:
         d0:28:84:b4:1d:11:bf:17:ff:a3:fa:d5:13:82:0b:d3:b0:5d:
         0f:8e:2b:d1:36:39:55:f6:ed:6f:67:e2:fe:8e:1e:9b:3a:b0:
         8c:ab:f2:e7:6f:37:55:0a:f7:31:40:68:04:be:d4:f0:f7:ac:
         e9:3d:2e:99:f5:df:b5:13:82:af:6c:fd:36:9a:38:f2:e9:29:
         f6:24:42:74:06:31:23:fd:42:34:e8:7d:14:91:07:0c:38:3c:
         08:43:50:74:08:62:9b:80:da:d5:83:1f:62:f6:20:b5:de:f2:
         7d:34:b2:8a:ca:18:a2:0f:c0:81:27:4b:db:40:6f:b0:7f:9a:
         b9:0b:7d:6e:38:a1:cf:28:46:c6:e1:ec:83:51:56:3d:74:eb:
         2e:e2:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:36 2025 by rpki-client