Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa
File:                     b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa (raw, json)
Hash identifier:          1UoEw/xGOtC4biXJvdsovB7Hojl2ppTzSGyaHOPl908=
Subject key identifier:   C3:F4:0D:A0:C4:8E:79:38:F2:B0:95:38:FA:97:1C:31:0A:42:EA:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584902EC329C3BCF505C6B38ABF0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     701
IP address blocks:        71.127.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:32:9c:3b:cf:50:5c:6b:38:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=a66fa7ba-fd65-4173-9683-813c06c60aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:74:f3:96:c3:1b:9d:b8:14:d5:c3:f5:da:
                    e0:fe:7c:1b:c7:54:c4:27:94:08:b8:1d:a2:d8:75:
                    56:cf:c8:00:b2:73:aa:6c:f3:ce:3b:7e:c1:54:0e:
                    56:d6:48:2a:99:74:e7:20:50:8d:5f:24:71:1e:09:
                    f5:01:f9:0e:2b:7a:b4:45:bf:32:b1:fd:ee:0a:d5:
                    09:56:94:48:d6:d1:47:3c:59:ff:b7:71:7c:9a:84:
                    83:43:a2:00:0a:ce:e9:81:ed:a1:af:3f:7d:ee:62:
                    54:cb:85:33:66:04:24:eb:99:d7:b7:bd:f7:80:ae:
                    99:9e:15:fa:d9:aa:e7:c2:ca:76:32:8a:fd:9e:4d:
                    43:13:b5:59:0d:d8:5b:f2:5b:e0:c5:4a:d0:02:94:
                    a0:38:62:10:19:1e:ae:56:47:12:f7:47:3b:2f:45:
                    c2:ed:06:f2:20:07:b3:58:ba:22:3f:c1:08:2b:ba:
                    04:6f:0a:03:0a:5b:9f:38:a6:fd:eb:cc:2e:44:95:
                    30:88:23:91:58:22:6f:b4:08:6b:0d:1a:79:30:38:
                    a5:c7:1a:5c:54:ff:3c:63:a2:8e:46:f9:57:d4:2d:
                    ed:57:de:4c:0f:ee:d3:95:8c:31:38:64:2b:0c:76:
                    53:ba:55:d7:bd:b1:33:de:2c:b4:19:f1:98:ac:c6:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:0D:A0:C4:8E:79:38:F2:B0:95:38:FA:97:1C:31:0A:42:EA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.127.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:73:f6:48:08:de:2a:51:8e:80:a9:5e:ba:ec:8e:a1:32:
         b4:f7:40:4a:04:0a:be:8f:65:8e:e5:57:ce:4a:d5:8b:54:37:
         86:7f:ca:2d:5c:59:5d:ad:dc:80:23:2d:6c:1b:db:56:f8:1c:
         1c:05:34:13:8d:8f:b7:b9:f4:a5:27:30:b7:eb:f8:b6:82:34:
         06:70:df:cc:f8:5b:b4:d7:91:89:db:fa:6f:c4:87:a1:af:bf:
         3e:22:26:be:63:1e:dc:76:b1:d2:7e:a5:a8:98:70:e5:ae:09:
         ae:a2:72:bd:11:78:ba:fd:5c:e1:ed:42:de:06:1d:7b:4d:39:
         0e:31:2c:e8:f5:3d:3f:75:8d:4e:a7:54:70:f3:f6:ab:ee:ec:
         b3:9b:ff:f2:7d:6e:38:58:61:70:68:98:71:a9:14:e5:fe:19:
         ec:a1:57:bb:c5:19:a8:31:ef:8c:31:cf:df:03:de:fa:34:bb:
         d3:fb:26:12:ca:85:03:08:e2:f2:27:ba:73:68:04:49:66:25:
         20:82:70:e4:ef:e8:a9:4c:8f:5d:7b:28:8f:38:ab:d8:70:d6:
         eb:d6:86:cd:f8:9d:02:99:e2:80:90:ba:ad:ab:f0:ef:58:47:
         0b:56:26:dd:10:ee:e8:c2:61:d3:c6:54:ac:cd:4c:46:56:be:
         77:92:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:22:13 2025 by rpki-client