Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa
File:                     6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa (raw, json)
Hash identifier:          bJVl65aXfDr7IUB75PzoBSOyC3ZXI6m540Gw/Qz4aI8=
Subject key identifier:   1D:56:BC:0E:7B:2F:67:44:5C:D2:A3:AC:A3:6B:68:96:EA:24:D1:7A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1ECE4F422D334BAB48440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.90.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ec:e4:f4:22:d3:34:ba:b4:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a554d77a-851a-4e67-910a-6523d228d6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:ae:79:54:a4:3f:ad:fa:25:91:9d:ff:11:
                    4c:96:ef:50:d9:17:f3:01:eb:0c:06:70:96:23:f0:
                    1e:3f:bd:c0:a1:04:71:ef:75:cf:25:f0:ef:0b:ad:
                    5a:50:a4:7f:89:ad:c0:71:56:f9:2e:7d:2e:03:e9:
                    3d:e0:cb:d4:55:80:f9:89:f9:9f:9b:18:7b:70:6f:
                    71:d9:8b:4b:26:c5:62:5b:8f:ac:c9:a7:11:e7:f7:
                    2c:ac:e7:46:b9:8f:9f:b8:d5:da:a7:53:8d:b6:1a:
                    14:c9:e0:26:c7:09:8a:5e:de:b6:cd:6c:31:ee:30:
                    59:cf:5d:21:b4:b9:dc:d1:85:a1:3f:ca:a8:96:5c:
                    85:1c:98:19:2f:00:77:db:ea:01:38:1f:21:d6:e7:
                    a4:6f:90:71:8b:c3:96:2c:f4:29:8a:7b:89:a2:c0:
                    b0:94:c1:4a:b2:22:e1:4e:0e:60:7f:72:a8:41:8f:
                    a6:ea:e4:e4:16:ec:53:7a:5f:58:b8:85:2c:4e:cf:
                    4c:a4:aa:93:75:a0:47:e6:b0:8d:29:d6:9d:90:b0:
                    24:ae:e0:37:02:23:3d:3c:11:23:f9:23:d5:0b:1f:
                    1e:b7:2e:c8:1e:66:61:52:21:c0:c9:4f:5e:fa:fc:
                    bb:62:0c:b1:62:5b:a3:b5:dd:e2:88:19:a8:55:57:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:BC:0E:7B:2F:67:44:5C:D2:A3:AC:A3:6B:68:96:EA:24:D1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6f35095c-50ac-3149-8dc3-9cbf5a661afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.90.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:30:bd:48:db:17:0a:87:b2:64:ba:54:ad:02:82:16:c7:5d:
         4c:08:57:3d:9b:5c:9b:70:5b:eb:ab:0c:90:35:b8:b9:64:f6:
         fd:9c:d8:53:58:25:08:b9:35:c2:97:39:d3:b1:c5:57:43:7a:
         aa:bc:ea:1a:d6:82:ab:03:ed:84:e2:a0:f1:b6:50:68:88:1c:
         0c:d0:64:a4:87:51:40:63:05:79:06:c1:54:26:1e:b5:27:17:
         62:4a:71:d9:18:56:36:f1:df:d4:fc:70:5d:7f:d2:6c:40:22:
         14:35:34:29:58:5e:86:39:86:f8:f0:fa:af:ac:2d:61:83:1c:
         9f:85:5a:a5:6c:5f:de:db:55:6c:0d:3e:73:50:17:bb:36:96:
         e4:5a:cf:db:60:70:85:fb:11:38:c7:1c:15:4b:9c:65:c6:cb:
         b3:6f:f1:de:52:ec:ba:03:c2:e1:8c:21:1b:c5:d9:2c:e9:e5:
         77:80:f8:de:84:c6:52:62:83:9a:f1:ef:ed:b4:42:dd:2f:0e:
         04:10:d1:4d:9d:b1:4f:41:71:0d:30:b9:85:d2:c8:02:ad:39:
         dc:77:eb:5b:3b:96:95:57:cc:4b:b0:cc:55:4a:5b:36:a4:64:
         0d:9b:1b:bf:57:2c:88:db:e4:2a:00:e3:37:f7:9a:a4:31:10:
         1e:ac:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:04:28 2025 by rpki-client