Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24f1de78-6d69-3a97-8108-d40eb1918885.roa
File:                     24f1de78-6d69-3a97-8108-d40eb1918885.roa (raw, json)
Hash identifier:          GKUdGwx4jCFiZgjaDHXioFy6AHT9R1ymSO40Mvi3P6o=
Subject key identifier:   2F:54:FC:99:99:5F:33:81:31:61:36:1A:0A:BB:7F:86:8D:0B:8C:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1621306AEF303B746641F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24f1de78-6d69-3a97-8108-d40eb1918885.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        47.2.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:13:06:ae:f3:03:b7:46:64:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8db9a3c6-8b5b-4239-b0bb-95216eb3ca43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:f2:91:5a:0e:ec:87:65:03:92:9c:91:91:
                    00:63:3d:68:0c:3d:6a:e8:3d:51:66:ba:63:df:c6:
                    c5:a5:43:b1:d4:12:38:82:16:63:b9:66:02:f5:73:
                    90:0c:52:60:33:47:9d:08:e4:d7:fd:ff:7f:f2:83:
                    f8:7c:4a:f8:7d:a7:1d:3b:d5:ad:31:2c:bf:b3:70:
                    06:45:7b:5e:7a:7b:ec:5b:ab:c8:2f:09:08:dd:3c:
                    7e:05:bb:a5:9f:2b:ef:34:29:dd:2e:17:c7:3c:57:
                    6c:14:0c:2c:51:14:b7:e9:03:6b:1d:1b:7e:c9:e7:
                    10:15:55:93:c5:18:48:dc:28:51:fe:45:47:a0:77:
                    01:4e:9c:0d:49:72:c9:28:5a:63:c8:fc:67:72:ad:
                    eb:a4:6f:45:61:43:3a:fb:1c:5a:24:f6:e2:0e:2e:
                    08:95:a0:ea:52:02:85:ab:27:6b:d3:b7:95:1a:21:
                    f7:db:e2:30:a5:05:20:b4:9c:34:5f:ef:ed:db:97:
                    2f:3d:48:25:6f:9b:c5:3d:30:32:a1:6b:a5:85:91:
                    59:3e:c6:a8:80:26:6a:06:39:ce:af:82:fb:f5:21:
                    2b:ce:8d:fd:d7:3c:97:9a:f5:f8:83:d3:80:1a:04:
                    c2:e5:84:6f:ba:71:e9:dd:19:30:1f:fb:96:78:70:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:54:FC:99:99:5F:33:81:31:61:36:1A:0A:BB:7F:86:8D:0B:8C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24f1de78-6d69-3a97-8108-d40eb1918885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.2.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:61:91:b2:9e:3c:10:13:22:fe:a6:b4:90:be:37:6b:b6:e4:
         12:78:9a:0a:35:19:99:45:70:53:5f:41:b1:66:4f:e9:0f:8e:
         27:c0:46:74:45:bf:6e:fa:ca:cb:6c:ac:cf:2f:28:4c:5e:76:
         f8:4e:fd:69:f6:4e:a4:a9:41:da:44:54:16:48:c9:74:d6:73:
         58:0b:4c:8c:77:be:c7:4e:ad:af:da:27:28:f8:df:85:76:1a:
         73:86:1f:2a:5e:63:0d:d5:0c:b6:fc:e2:9e:b1:47:9b:07:f6:
         00:96:9e:10:17:67:ae:1b:67:f8:27:d6:45:42:2a:54:56:a8:
         88:41:f1:9d:9f:f6:6d:b9:7f:6c:a4:29:3c:a1:a1:b1:48:0e:
         9d:e1:97:c4:64:06:2d:fa:2a:6a:24:6f:46:1e:cf:4d:9e:79:
         93:6d:05:f1:ba:77:e5:67:53:04:ad:6f:b4:d2:50:32:df:18:
         13:cc:60:db:11:5d:78:22:69:ee:4f:1b:ea:1a:0c:9b:ac:63:
         55:fa:a8:9a:47:ad:e3:f9:32:77:7b:d9:e0:71:ec:75:ae:8d:
         6f:0e:b9:1a:94:07:40:93:a7:6a:7e:aa:30:5f:49:b3:3c:42:
         48:d7:b4:be:f7:92:c5:f1:fa:6d:b4:7e:a0:42:ea:a5:f4:72:
         49:44:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:17 2025 by rpki-client