Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/de38c7d5-d3f1-3d4e-b6d1-e4ea4475bbf0.roa
File:                     de38c7d5-d3f1-3d4e-b6d1-e4ea4475bbf0.roa (raw, json)
Hash identifier:          OiAbZH1EnxiQfn6A4R5orjuANzKaKS5yv3AARQlho9U=
Subject key identifier:   D0:B6:3C:82:D3:F9:39:D7:36:19:38:B8:78:32:27:7A:AC:88:BF:C2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D204DFBB1A5F00687A1E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/de38c7d5-d3f1-3d4e-b6d1-e4ea4475bbf0.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.8.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:04:df:bb:1a:5f:00:68:7a:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=c9337a20-e257-46e7-a22c-c6e7154c5137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:b5:28:8d:7a:82:bd:47:fa:b1:97:3b:38:
                    ae:36:d5:b7:39:cf:15:16:81:09:09:00:3f:5b:e8:
                    fa:03:2b:16:66:b8:4c:1f:9d:ef:21:42:2c:e9:e7:
                    3c:23:92:2c:a6:fd:62:d5:be:f3:be:78:d1:93:6c:
                    b7:a5:7a:a0:24:46:99:43:ea:6a:e4:8d:c5:ba:d5:
                    ac:06:a4:4f:24:df:44:55:08:32:f3:c1:61:25:17:
                    ff:18:8b:97:c2:40:ab:78:e9:b1:63:5f:05:f5:1a:
                    53:b1:f4:3c:e0:ae:b1:0f:f0:30:b0:04:86:da:60:
                    14:63:f5:59:9f:70:a1:61:e7:ff:93:2a:53:a7:96:
                    11:54:6e:49:e1:8c:ee:ae:bc:f7:5c:46:ee:c8:e8:
                    fd:f4:02:33:91:e7:95:83:57:17:9e:dd:62:c6:79:
                    f1:b1:d4:7b:0d:c5:b4:a5:99:eb:aa:a2:fe:ff:6e:
                    23:ea:81:78:0f:c4:ac:52:e8:bd:60:31:83:c2:90:
                    df:cf:5b:8e:58:39:b0:3d:fc:be:62:89:77:40:6a:
                    ea:ec:61:23:dd:33:fb:b4:98:d9:a4:32:8a:f2:2d:
                    45:67:24:4b:f4:5f:28:e4:24:a9:97:10:3e:71:ab:
                    a7:3b:93:67:62:00:a7:d8:90:a7:7d:29:97:ec:8a:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:3C:82:D3:F9:39:D7:36:19:38:B8:78:32:27:7A:AC:88:BF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/de38c7d5-d3f1-3d4e-b6d1-e4ea4475bbf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.8.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:7a:e1:ea:32:67:ff:0c:90:7d:1a:06:c6:61:81:bc:2b:
         b7:e0:dd:c4:77:e6:da:eb:4b:43:00:74:25:d2:a3:30:be:6b:
         be:23:06:bd:bf:4b:38:46:bf:74:81:a6:b8:28:1d:12:98:42:
         f9:4f:9e:f2:80:97:59:4a:2a:27:95:9b:15:7e:39:da:f2:fd:
         f5:6b:a1:3a:fb:52:5d:ef:4f:b5:ff:3c:ea:80:ea:b3:38:ae:
         43:da:4d:f0:31:f2:c4:a0:bf:3a:24:a5:b0:2b:22:4d:7d:6d:
         11:3e:07:77:19:23:a0:b9:a4:70:dd:52:76:87:60:cb:85:e8:
         b5:72:7d:a7:14:6c:2d:f6:25:de:99:c9:73:6e:d6:08:34:c3:
         3a:08:81:da:6e:0a:69:16:32:2a:75:0e:54:24:61:88:a7:55:
         0d:f8:d1:f0:e3:10:f8:92:c1:05:aa:f5:54:dc:ff:06:8f:06:
         45:6f:4f:62:0d:26:c6:bc:9f:00:5c:39:1c:df:4d:f3:7e:85:
         02:f2:48:8e:28:d4:04:48:d5:3c:9b:a8:2f:11:a3:01:ff:88:
         da:6f:3a:d2:9a:e5:3c:79:c3:0d:fd:cf:81:68:24:4c:ec:a5:
         fd:5d:59:68:96:42:49:37:14:a3:b9:41:74:4d:28:5b:83:eb:
         4a:23:f8:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gTfuxpfAGh6HoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzkzMzdhMjAtZTI1Ny00NmU3LWEyMmMtYzZlNzE1NGM1MTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh61KI16gr1H+rGXOziuNtW3Oc8VFoEJCQA/
W+j6AysWZrhMH53vIUIs6ec8I5Ispv1i1b7zvnjRk2y3pXqgJEaZQ+pq5I3FutWs
BqRPJN9EVQgy88FhJRf/GIuXwkCreOmxY18F9RpTsfQ84K6xD/AwsASG2mAUY/VZ
n3ChYef/kypTp5YRVG5J4Yzurrz3XEbuyOj99AIzkeeVg1cXnt1ixnnxsdR7DcW0
pZnrqqL+/24j6oF4D8SsUui9YDGDwpDfz1uOWDmwPfy+Yol3QGrq7GEj3TP7tJjZ
pDKK8i1FZyRL9F8o5CSplxA+caunO5NnYgCn2JCnfSmX7IrIjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNC2PILT+TnXNhk4uHgyJ3qsiL/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGUzOGM3ZDUtZDNmMS0z
ZDRlLWI2ZDEtZTRlYTQ0NzViYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwhwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGPeuHqMmf/DJB9GgbGYYG8K7fg3cR35trrS0MAdCXSozC+a74jBr2/
SzhGv3SBprgoHRKYQvlPnvKAl1lKKieVmxV+Odry/fVroTr7Ul3vT7X/POqA6rM4
rkPaTfAx8sSgvzokpbArIk19bRE+B3cZI6C5pHDdUnaHYMuF6LVyfacUbC32Jd6Z
yXNu1gg0wzoIgdpuCmkWMip1DlQkYYinVQ340fDjEPiSwQWq9VTc/waPBkVvT2IN
Jsa8nwBcORzfTfN+hQLySI4o1ARI1TybqC8RowH/iNpvOtKa5Tx5ww39z4FoJEzs
pf1dWWiWQkk3FKO5QXRNKFuD60oj+Ck=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:34 2025 by rpki-client