Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1400fb9f-e854-3f5d-b0ab-047f0ef9709e.roa
File:                     1400fb9f-e854-3f5d-b0ab-047f0ef9709e.roa (raw, json)
Hash identifier:          5mbt+TlgqwBxPr6XRn7huT6cAbgPbhkgwqLY/lzSgbA=
Subject key identifier:   2E:E7:33:2B:85:01:4C:14:99:02:9A:6E:B2:06:D5:A4:6D:4E:8C:F7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161E316061B367B0CF9BFC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1400fb9f-e854-3f5d-b0ab-047f0ef9709e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.177.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:e3:16:06:1b:36:7b:0c:f9:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=87409bad-4cb2-4982-b6cd-c132f547714e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:32:7d:a6:eb:4a:58:43:6c:26:32:59:55:
                    a9:db:94:ae:48:03:57:08:54:b1:15:fb:14:94:91:
                    5c:ba:35:12:32:c1:ef:bc:a6:dd:29:fb:e8:c1:a1:
                    62:a3:d4:bf:94:91:44:e2:b1:c0:2a:52:51:a2:a7:
                    20:a0:0b:87:e9:77:57:e6:39:9d:33:c6:4e:f1:55:
                    74:60:b5:4a:9e:ae:ec:b0:2d:8e:e2:f2:43:0f:ef:
                    5f:46:d5:5d:5b:54:25:88:5e:87:64:0d:c9:d6:d6:
                    41:b1:41:70:79:67:66:30:63:28:85:11:79:fc:4e:
                    53:e2:67:42:6d:88:41:5f:09:d0:ee:c0:b5:10:69:
                    88:ff:21:d2:2d:6e:75:5c:92:03:fb:61:58:df:fa:
                    60:4d:24:86:2a:8f:f4:56:43:6e:a6:c7:f7:b1:59:
                    24:31:0b:11:c7:90:b6:56:21:8f:2d:1c:fb:7f:67:
                    3a:a4:5a:e4:e7:7c:14:0a:43:57:02:08:7b:2e:60:
                    4f:3d:de:d5:3b:5b:5e:24:12:8c:e2:b4:ce:75:11:
                    10:87:9f:cf:36:ce:0a:0a:40:8a:7d:07:f8:b5:07:
                    99:fd:79:5c:e2:64:11:98:de:c4:c3:59:4a:15:f4:
                    94:f5:07:4f:82:1f:8f:28:29:7a:37:3d:ab:be:86:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E7:33:2B:85:01:4C:14:99:02:9A:6E:B2:06:D5:A4:6D:4E:8C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1400fb9f-e854-3f5d-b0ab-047f0ef9709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:5e:2b:64:d4:5e:d2:14:d5:3f:ac:dc:06:f4:0a:f0:f8:
         9f:dc:29:e6:c9:fb:43:e5:c4:eb:1d:0f:e4:70:38:c4:67:c0:
         66:3f:4c:87:4a:9b:c1:eb:e5:31:14:dc:e5:dc:42:64:56:5a:
         6c:80:c5:99:4a:97:9e:50:d0:d3:a2:b4:af:a7:3a:10:89:f1:
         5d:ca:2c:d1:01:22:9d:4e:05:90:bf:a4:95:bd:8f:ac:01:bb:
         45:02:11:2a:b8:ae:e7:02:b6:4b:cc:32:5d:fe:5c:0d:e6:df:
         14:14:05:58:99:54:3d:66:46:24:ce:23:65:b9:74:ea:eb:07:
         f6:7b:78:a7:61:97:79:9a:76:81:2f:2a:97:45:62:71:34:44:
         18:ff:65:9d:67:1c:42:89:b8:f8:d1:44:66:a8:34:3d:c3:82:
         6c:6d:d2:d2:a5:b0:0c:b9:da:4d:58:a7:90:ff:7d:f7:14:ee:
         dd:72:57:25:ed:86:44:ff:be:b1:0c:b9:82:d0:13:29:15:b8:
         51:11:d1:93:f5:ef:b5:89:01:8d:98:3f:60:6e:be:51:58:b8:
         da:f4:02:da:fa:5f:cb:eb:0f:02:4b:aa:01:01:89:95:cf:85:
         40:34:28:53:c3:8e:d1:3a:bf:81:cc:06:b0:06:ae:68:b1:11:
         4e:00:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:38 2025 by rpki-client