Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87553942-b8e0-382d-8010-37d9c0bdc814.roa
File:                     87553942-b8e0-382d-8010-37d9c0bdc814.roa (raw, json)
Hash identifier:          Gq/wDxOvBp4QU3KRSuj2e450zgGn5q5u06VH/yMp+Gs=
Subject key identifier:   32:73:CD:3F:17:E5:CF:B4:57:3D:52:1F:E3:37:69:F3:37:CE:88:91
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D16B50BD4E1956F8D19A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87553942-b8e0-382d-8010-37d9c0bdc814.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.86.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:6b:50:bd:4e:19:56:f8:d1:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ea127591-7146-4147-9f44-3156a816fabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0f:a8:cf:5c:72:14:f9:85:6e:32:66:b5:7a:
                    da:8f:e5:2f:a1:00:54:97:23:56:a9:a7:15:78:d6:
                    4c:86:20:0f:ff:c5:59:1a:1c:cc:08:60:c7:88:99:
                    38:92:fe:c7:4b:18:47:39:ad:12:c0:a5:a8:01:9b:
                    a3:51:91:14:ec:9a:6c:a1:3a:ad:19:00:b3:a1:0d:
                    04:24:42:a3:fa:d6:39:59:e2:f8:a1:b3:fb:17:39:
                    b0:be:b2:ba:b2:d7:da:9f:70:7f:47:6a:2d:63:df:
                    98:82:26:bf:09:dd:3e:0e:23:3c:59:f7:20:fd:0b:
                    36:f7:01:cd:c0:c7:16:62:05:0f:7a:f2:a6:33:9c:
                    dc:03:8f:6b:8d:7f:b3:f1:db:74:45:08:65:45:39:
                    ae:24:5b:76:1b:e2:ef:a4:44:95:6b:12:84:2a:8b:
                    3e:d7:aa:63:a7:d3:2d:99:58:12:cf:31:71:ce:fd:
                    36:f6:42:d7:e6:8b:c7:d3:34:58:8e:b8:1d:01:cd:
                    1d:33:a1:5f:74:ab:8a:85:44:b5:28:fc:f7:42:0c:
                    9e:d8:72:28:3a:54:c6:6f:de:80:56:a5:e5:b5:41:
                    b9:bd:ff:f9:0d:bb:73:8f:b0:52:17:db:73:52:90:
                    a7:a8:94:f3:a0:b1:82:bb:8e:13:8e:a2:96:8a:e7:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:CD:3F:17:E5:CF:B4:57:3D:52:1F:E3:37:69:F3:37:CE:88:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87553942-b8e0-382d-8010-37d9c0bdc814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:31:23:90:93:a5:c1:ff:31:17:e9:0c:bb:f8:7f:3c:6b:93:
         f4:e4:b0:86:5e:08:d5:25:46:eb:db:9c:bc:f0:80:ca:5f:59:
         a7:1e:d0:64:be:f1:42:14:2c:c6:b1:e5:9d:c7:7b:1b:f5:e3:
         39:43:76:50:eb:fe:73:a4:ec:57:98:a0:24:8e:c6:4b:ce:94:
         dc:57:e1:8b:67:2d:d6:72:18:76:07:79:88:52:86:72:cc:ee:
         42:3a:42:43:e7:15:6b:39:43:0b:c2:00:69:b6:4d:e3:b5:05:
         64:79:41:58:c0:17:75:eb:a5:0a:ab:72:44:54:d1:01:7e:fb:
         fb:46:90:5f:50:25:14:ad:6b:64:8a:64:f2:e5:35:91:a7:7f:
         9b:38:fa:0e:79:97:12:95:39:9f:02:d3:7f:2f:b6:70:fd:e0:
         16:24:ea:a9:df:89:cc:fe:50:44:10:9e:c4:28:e2:f8:67:8c:
         e3:24:7d:6a:b5:74:fe:04:e1:7d:85:a5:14:6d:03:27:75:57:
         16:e9:33:75:c0:83:df:3d:3f:d0:3b:ab:e3:d9:9e:df:8a:86:
         8d:17:52:eb:5b:98:40:56:29:36:54:bd:fa:57:a0:dc:13:d0:
         05:0f:16:4f:7e:ec:4b:4b:1b:62:31:34:8d:b9:3b:e0:63:48:
         71:39:f5:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WtQvU4ZVvjRmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWExMjc1OTEtNzE0Ni00MTQ3LTlmNDQtMzE1NmE4MTZmYWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg+oz1xyFPmFbjJmtXraj+UvoQBUlyNWqacV
eNZMhiAP/8VZGhzMCGDHiJk4kv7HSxhHOa0SwKWoAZujUZEU7JpsoTqtGQCzoQ0E
JEKj+tY5WeL4obP7FzmwvrK6stfan3B/R2otY9+Ygia/Cd0+DiM8Wfcg/Qs29wHN
wMcWYgUPevKmM5zcA49rjX+z8dt0RQhlRTmuJFt2G+LvpESVaxKEKos+16pjp9Mt
mVgSzzFxzv029kLX5ovH0zRYjrgdAc0dM6FfdKuKhUS1KPz3Qgye2HIoOlTGb96A
VqXltUG5vf/5Dbtzj7BSF9tzUpCnqJTzoLGCu44TjqKWiucSCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJzzT8X5c+0Vz1SH+M3afM3zoiRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODc1NTM5NDItYjhlMC0z
ODJkLTgwMTAtMzdkOWMwYmRjODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1aQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYxI5CTpcH/MRfpDLv4fzxrk/TksIZeCNUlRuvbnLzwgMpfWace0GS+
8UIULMax5Z3Hexv14zlDdlDr/nOk7FeYoCSOxkvOlNxX4YtnLdZyGHYHeYhShnLM
7kI6QkPnFWs5QwvCAGm2TeO1BWR5QVjAF3XrpQqrckRU0QF++/tGkF9QJRSta2SK
ZPLlNZGnf5s4+g55lxKVOZ8C038vtnD94BYk6qnficz+UEQQnsQo4vhnjOMkfWq1
dP4E4X2FpRRtAyd1VxbpM3XAg989P9A7q+PZnt+Kho0XUutbmEBWKTZUvfpXoNwT
0AUPFk9+7EtLG2IxNI25O+BjSHE59TE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:22 2025 by rpki-client