Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1e6f0ac-5103-379c-a8c8-c519f2224e25.roa
File:                     a1e6f0ac-5103-379c-a8c8-c519f2224e25.roa (raw, json)
Hash identifier:          iHy3+U0P7MYfJ1qOEHHqHsNpDNEdmYCSkljpG0D3S58=
Subject key identifier:   A9:44:BE:29:4B:E3:37:CF:02:5F:34:6B:F0:CF:5C:3D:53:B5:99:E0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D19421B9B0FCFB737CB000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1e6f0ac-5103-379c-a8c8-c519f2224e25.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        75.141.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:94:21:b9:b0:fc:fb:73:7c:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7a3c621b-81b3-4633-98a3-58a3e698d480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8d:08:1f:fd:24:11:68:d5:4f:c6:73:0a:44:
                    30:82:6c:a3:7f:5b:2f:ad:65:ae:b2:3c:63:c1:c3:
                    17:7f:85:3c:1f:fc:50:e7:89:fc:14:46:f3:c6:25:
                    d4:e5:c0:02:1b:4f:8d:61:e6:58:4b:7d:f1:66:1f:
                    b0:76:7b:43:11:3a:d1:d8:a1:5a:c4:c4:27:67:69:
                    87:3e:ab:93:7a:a6:83:9c:0f:ab:2c:81:3f:69:4e:
                    14:bf:18:37:26:71:1a:f5:ee:a9:08:6d:42:b6:72:
                    ef:15:82:b4:c0:2f:ff:41:17:86:6b:52:59:fa:41:
                    fc:2d:a7:72:92:4d:50:c8:f5:52:6d:b5:a5:4f:c2:
                    9a:5a:83:f7:68:91:a6:35:cd:4a:75:17:3f:69:d0:
                    59:28:b0:19:32:4d:ae:6c:ca:78:f9:6d:7c:8f:eb:
                    d8:21:d4:fa:01:52:68:dc:ee:ed:00:7b:84:96:3f:
                    d0:42:9f:35:d9:53:92:3a:ab:e7:c1:94:82:30:d6:
                    2c:a3:14:8e:dd:71:cf:e9:ee:43:ff:cf:7e:66:53:
                    5a:12:5d:0d:ad:f9:4e:37:65:0e:ce:6f:a5:7e:2f:
                    85:6d:7b:91:b3:d3:4f:a5:42:99:db:aa:49:33:50:
                    6f:44:bb:38:6a:6b:c2:f5:85:f3:0c:57:10:5e:d2:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:BE:29:4B:E3:37:CF:02:5F:34:6B:F0:CF:5C:3D:53:B5:99:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1e6f0ac-5103-379c-a8c8-c519f2224e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.141.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c1:61:05:38:3a:c6:f1:74:c1:2b:dd:10:9b:4c:b8:ff:f1:
         9d:9b:af:2d:36:fa:72:f8:41:e4:f9:63:3d:02:82:45:1e:d7:
         24:70:f3:f6:2b:b7:9d:6c:90:53:99:b7:8d:d5:e5:8c:b8:b4:
         92:46:03:36:e8:16:8a:3e:a1:f8:da:6d:eb:e2:1e:b0:62:33:
         1a:84:e9:0b:4e:40:59:b0:42:db:92:f2:47:43:06:19:c2:b2:
         18:00:20:30:66:0e:74:c3:bf:02:3a:2d:bf:70:8f:f2:75:0b:
         de:05:92:e9:49:92:c3:e4:b8:31:39:a8:ca:58:0d:50:94:6a:
         5c:42:44:00:9b:07:6b:e4:7a:ef:19:c0:79:75:ba:83:9a:67:
         06:95:65:15:2f:c2:5d:9c:ee:8b:6b:28:66:1a:f9:a4:07:32:
         92:49:7d:ef:fd:c0:3b:1b:0f:db:b1:f6:eb:2f:59:75:1d:c5:
         e7:85:79:eb:47:d3:5b:7d:a2:b6:2b:fe:53:2e:d2:66:c5:db:
         5c:4a:12:c1:b8:03:94:43:59:50:df:af:bc:24:77:1a:3e:fc:
         89:19:44:56:31:af:80:16:5d:5d:4c:41:3d:32:a6:ca:c3:ca:
         c8:5b:02:b1:bb:f9:bb:95:ad:08:50:e8:f0:ce:a2:30:4a:58:
         a9:19:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:01:20 2025 by rpki-client