Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d0e29e9-2b3c-3fde-be2d-fcd61c985489.roa
File:                     8d0e29e9-2b3c-3fde-be2d-fcd61c985489.roa (raw, json)
Hash identifier:          Lf+ob0QEpOh6hnMW0/d8aqGQqBSF+kDCpBxTuC1Vj7s=
Subject key identifier:   E8:E3:C7:91:82:A9:EC:CD:BF:0F:F3:98:13:B0:2D:3F:AA:E7:F8:3F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1DC6B6D92AB4BFF108B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d0e29e9-2b3c-3fde-be2d-fcd61c985489.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     16787
IP address blocks:        71.85.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:dc:6b:6d:92:ab:4b:ff:10:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a3ee0fef-74cd-4a0a-b74e-714887382ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:5d:90:26:80:9f:89:86:ad:33:48:73:62:
                    d1:df:62:ba:85:d1:e5:cc:aa:ae:18:db:be:55:9e:
                    0b:b9:9b:c8:09:49:d1:70:7b:49:90:98:fc:40:47:
                    86:f3:8b:f5:db:1d:03:db:64:9b:72:20:a2:27:a9:
                    14:04:76:46:76:37:7b:73:67:a1:b2:d5:5e:88:16:
                    dc:b7:93:02:ea:94:61:7a:29:35:73:40:71:32:c2:
                    80:c0:35:de:5e:88:f6:f3:5e:9b:73:e0:d0:80:b1:
                    44:66:0f:c2:1a:06:69:cc:ee:52:19:3f:46:52:6d:
                    56:91:9e:fa:2d:5a:ef:27:e8:15:dc:fd:a6:b8:84:
                    41:3a:df:fe:76:b8:61:57:c1:ce:7b:04:91:69:a7:
                    54:7f:cc:b3:dc:dc:87:97:14:74:c9:a1:2e:46:36:
                    5f:11:59:c8:5f:88:f5:94:03:5e:95:5b:a1:8b:d4:
                    e9:a7:c2:ad:5f:2f:af:15:1e:83:d5:f8:0b:da:49:
                    6b:8e:0c:f2:0f:34:0d:0e:b8:3b:fb:0c:80:65:77:
                    68:9d:76:27:62:af:c5:35:57:04:9e:2a:11:b2:5d:
                    c3:6c:34:1a:8a:97:94:23:40:59:96:11:43:85:7e:
                    0d:4e:1d:de:77:fc:3c:e6:93:91:80:84:e8:41:57:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E3:C7:91:82:A9:EC:CD:BF:0F:F3:98:13:B0:2D:3F:AA:E7:F8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d0e29e9-2b3c-3fde-be2d-fcd61c985489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.85.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:5e:ea:cb:d4:d9:93:57:55:21:b4:1e:55:a9:63:9f:53:db:
         8e:f3:56:a3:d6:d5:53:ac:5a:42:40:43:a0:cf:8f:4e:bf:45:
         42:61:7b:a5:e2:90:8a:b0:40:09:a3:7e:36:e2:d9:ea:bd:e7:
         d3:e7:94:e7:b6:34:ab:fd:eb:2b:22:bf:cd:37:4c:6b:b8:f0:
         c0:79:75:b7:a2:5f:fe:94:e1:0b:bb:c3:b5:b2:f5:06:df:23:
         12:0f:c8:35:2c:06:46:d4:1c:4d:7f:b4:20:e5:b2:1b:77:89:
         79:35:9b:ba:e5:23:d1:d3:f6:03:b1:44:1d:16:1d:8e:d3:0e:
         e1:6b:3c:19:c6:a3:54:54:6e:cf:71:de:26:96:8b:b9:a1:cc:
         7d:bf:3c:02:13:ef:84:9d:92:8f:f0:7d:5e:0e:45:b4:51:ae:
         c0:18:81:7c:ab:6a:b5:cf:f8:5a:10:5f:be:85:85:ce:a6:14:
         fa:aa:12:b8:aa:1e:4b:07:5e:c0:93:fb:94:b7:97:06:21:69:
         17:69:cf:64:60:2a:26:f7:d0:e0:ad:cd:ca:a2:29:cd:83:4e:
         bb:49:fe:02:ae:38:4c:21:c9:a7:77:76:4b:14:6f:96:71:bf:
         b3:d5:1f:92:bb:e0:27:a0:0a:d5:06:2e:a3:b8:8f:40:96:b0:
         79:d1:a2:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0dxrbZKrS/8Qi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YTNlZTBmZWYtNzRjZC00YTBhLWI3NGUtNzE0ODg3MzgyYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga1dkCaAn4mGrTNIc2LR32K6hdHlzKquGNu+
VZ4LuZvICUnRcHtJkJj8QEeG84v12x0D22SbciCiJ6kUBHZGdjd7c2ehstVeiBbc
t5MC6pRheik1c0BxMsKAwDXeXoj2816bc+DQgLFEZg/CGgZpzO5SGT9GUm1WkZ76
LVrvJ+gV3P2muIRBOt/+drhhV8HOewSRaadUf8yz3NyHlxR0yaEuRjZfEVnIX4j1
lANelVuhi9Tpp8KtXy+vFR6D1fgL2klrjgzyDzQNDrg7+wyAZXdonXYnYq/FNVcE
nioRsl3DbDQaipeUI0BZlhFDhX4NTh3ed/w85pORgIToQVdwCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjjx5GCqezNvw/zmBOwLT+q5/g/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGQwZTI5ZTktMmIzYy0z
ZmRlLWJlMmQtZmNkNjFjOTg1NDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1VQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMpe6svU2ZNXVSG0HlWpY59T247zVqPW1VOsWkJAQ6DPj06/RUJhe6Xi
kIqwQAmjfjbi2eq959PnlOe2NKv96ysiv803TGu48MB5dbeiX/6U4Qu7w7Wy9Qbf
IxIPyDUsBkbUHE1/tCDlsht3iXk1m7rlI9HT9gOxRB0WHY7TDuFrPBnGo1RUbs9x
3iaWi7mhzH2/PAIT74Sdko/wfV4ORbRRrsAYgXyrarXP+FoQX76Fhc6mFPqqEriq
HksHXsCT+5S3lwYhaRdpz2RgKib30OCtzcqiKc2DTrtJ/gKuOEwhyad3dksUb5Zx
v7PVH5K74CegCtUGLqO4j0CWsHnRosE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:46 2025 by rpki-client