Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/420f3c4c-66cf-3ac2-8041-ac46083f4e73.roa
File:                     420f3c4c-66cf-3ac2-8041-ac46083f4e73.roa (raw, json)
Hash identifier:          GxmEMZS9F3+1YtA8iJWyfWBQbRUc25J737n1ItmvtcE=
Subject key identifier:   E4:94:05:33:C5:82:D9:DA:32:44:BA:95:71:67:85:8C:01:B4:B8:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16149C5EFF30C5E9E328C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/420f3c4c-66cf-3ac2-8041-ac46083f4e73.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.181.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:49:c5:ef:f3:0c:5e:9e:32:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3d9d2ba2-7b7e-4ecb-819c-3806498d80e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:ea:58:04:3f:34:2e:49:a3:38:66:8e:c0:
                    44:4d:66:46:d4:ed:78:b5:83:44:1a:e7:e6:e1:01:
                    ce:3a:7f:8f:17:1f:71:ce:40:ac:1b:6b:93:6d:8e:
                    4d:d6:6e:7c:9a:6f:e8:f2:a3:d1:8b:6a:ae:b0:31:
                    3a:9c:91:f1:3a:b2:bf:4c:20:29:05:87:4c:3e:23:
                    a0:84:87:83:52:71:be:10:af:b3:96:55:be:0a:66:
                    bb:b9:db:53:f9:ad:eb:6d:02:ba:d2:c1:6f:ca:b1:
                    cc:4f:45:be:86:e7:89:ba:bd:a0:7f:eb:c8:a4:95:
                    0b:72:f8:0c:79:69:c7:27:cd:e4:1d:df:40:4f:03:
                    79:c6:93:0f:4e:19:28:f9:de:18:51:6a:fe:bf:fe:
                    b7:c2:b7:07:04:36:84:3a:8f:3d:c1:0e:a3:ec:a8:
                    aa:91:ac:e7:f1:99:ab:18:f2:6b:ec:ea:f2:33:89:
                    ee:d6:02:ea:41:6e:2c:36:24:b3:91:e5:80:80:96:
                    b2:6d:bd:c3:24:db:bd:e7:43:42:86:b4:13:d3:dd:
                    57:9a:08:6c:45:9d:4f:e6:4f:a3:35:02:cd:66:19:
                    b0:bd:11:e0:ce:2b:3d:79:90:bc:74:67:20:49:45:
                    2d:c5:f8:f6:71:59:43:00:49:0d:ab:16:cb:a0:b6:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:94:05:33:C5:82:D9:DA:32:44:BA:95:71:67:85:8C:01:B4:B8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/420f3c4c-66cf-3ac2-8041-ac46083f4e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.181.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:22:65:45:f1:44:fa:76:9d:a5:68:17:33:9f:c0:47:d4:d2:
         02:39:d8:d3:37:2b:92:57:cc:62:3a:68:bc:99:a4:6c:2f:0f:
         c0:49:12:34:35:7c:9c:a0:3c:e1:92:c1:ed:87:a4:88:77:92:
         1d:be:27:a3:e0:91:97:e4:5a:09:ab:9b:ed:86:0c:9f:ff:13:
         49:c6:99:12:67:9e:fc:5b:e5:05:04:a2:0c:64:dd:9f:df:5d:
         8c:cb:10:0b:94:78:f9:0f:8d:ff:98:98:0b:2c:16:63:42:56:
         94:ea:6d:b4:67:3f:53:00:bf:e2:13:24:7b:9f:95:b4:6b:be:
         f8:13:11:a9:c4:80:75:48:27:5d:89:96:3e:01:47:b4:41:5d:
         33:34:0b:9c:bf:b0:38:f9:28:ae:ed:d0:b3:59:f3:1d:49:5a:
         c2:d5:c0:76:a6:9a:e9:64:18:9a:5e:7e:c4:a9:cc:e9:c1:d0:
         7b:ce:f5:ff:ec:eb:f3:a3:d3:99:3d:00:65:d6:cd:75:20:8c:
         8d:ea:ef:02:11:a1:64:58:08:d8:bf:94:ea:87:b3:4a:29:86:
         bb:95:99:3b:e4:e4:cc:dc:fd:c4:9a:fa:32:dc:11:18:24:72:
         67:63:af:b8:56:d5:de:0d:c5:69:06:1b:44:25:9e:91:51:5c:
         d3:5b:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:20 2025 by rpki-client