Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/57f429a8-6a8b-3d6e-9775-40d27f3cd34a.roa
File:                     57f429a8-6a8b-3d6e-9775-40d27f3cd34a.roa (raw, json)
Hash identifier:          H5wvFNituuJ2kK5pWIVR//iP9lX3sWRaWtDBtJorXo4=
Subject key identifier:   92:0B:9F:B8:63:8C:53:4F:F8:9F:5B:49:A3:51:C7:EE:B9:C3:C4:6F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161C1A6D0349720F1860D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/57f429a8-6a8b-3d6e-9775-40d27f3cd34a.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.240.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:c1:a6:d0:34:97:20:f1:86:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d4490482-f16a-46ec-ad3f-b078d675b146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:19:0d:90:04:a0:91:c8:c6:b4:17:0b:d2:
                    50:58:b0:8c:de:ba:5e:55:e0:b2:27:92:8b:cd:21:
                    16:af:57:4b:d3:c0:5d:cf:a3:56:01:3c:23:4a:d3:
                    23:e6:6e:08:a7:da:4b:33:b6:49:20:89:c9:5b:48:
                    d9:c1:80:aa:71:32:22:58:0c:b6:16:e9:c3:9b:9a:
                    c0:8a:5f:7d:ba:96:bc:d9:24:3c:c0:b1:c3:fd:05:
                    71:5b:04:2d:f1:12:33:3b:0b:51:30:4e:11:ef:bc:
                    bc:34:02:92:2a:0b:6b:92:aa:27:b1:95:63:3b:d5:
                    b3:b8:15:1a:69:db:0f:18:0b:ee:45:09:f4:17:63:
                    f9:e2:78:5a:42:d6:e0:89:33:84:b6:da:2e:b8:5e:
                    85:ad:64:e1:a3:5c:4d:57:5e:54:4c:42:3b:a1:fc:
                    7e:89:68:83:6e:ab:e3:05:b8:04:b3:e1:ef:43:36:
                    cc:76:ea:8f:59:5f:68:28:5f:4c:af:ff:3d:10:79:
                    5e:0b:d2:d2:38:05:2d:98:aa:45:96:da:1e:9f:73:
                    14:fc:57:92:be:8b:50:bb:f3:b8:82:84:16:66:c7:
                    0a:b7:67:4b:87:b8:56:2a:77:d6:5a:b7:7f:ab:0f:
                    ba:8f:a9:55:34:8c:06:75:5d:1a:fc:9b:0b:b2:ae:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0B:9F:B8:63:8C:53:4F:F8:9F:5B:49:A3:51:C7:EE:B9:C3:C4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/57f429a8-6a8b-3d6e-9775-40d27f3cd34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:32:41:5a:1c:96:ba:34:e2:b8:c8:b1:17:f6:5f:b5:f6:fe:
         f0:33:6b:bf:da:38:1d:52:87:b8:69:1f:e1:7e:03:ed:d2:3b:
         1c:a4:ed:45:3c:7b:ee:65:ba:bf:2e:f3:36:33:c6:1f:ec:6e:
         76:fb:79:bb:1c:e1:c2:92:81:d1:62:e1:8b:fe:71:a3:3c:a5:
         dc:7e:14:a0:bf:14:57:d7:60:61:4c:78:1b:29:68:ee:5c:a1:
         d9:5a:15:46:01:1f:c3:57:c9:9c:03:7c:24:f5:96:3e:13:fe:
         ee:de:23:3e:d7:98:b8:9c:6f:52:b8:b3:9e:a7:d6:09:79:dd:
         a5:af:62:5b:bb:e0:bc:62:61:f6:27:b7:40:de:7f:0f:ed:12:
         17:26:47:76:29:af:6c:7c:0f:fe:50:ae:10:b4:b3:7d:ad:c5:
         cf:57:a6:1e:78:4c:73:e3:90:61:45:3e:c3:a2:3c:1a:21:da:
         78:69:78:1b:16:d5:ae:79:9f:08:08:45:0e:c5:71:c3:ef:44:
         c5:f0:98:07:69:b0:4c:1b:86:ee:21:ce:e4:ca:2a:af:25:93:
         c7:52:08:b8:0f:af:ae:f0:37:0f:ac:14:7f:82:f0:d9:78:08:
         4f:e4:58:7c:30:68:4f:41:2a:76:7e:3b:e9:b6:51:55:8d:db:
         64:e3:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:15 2025 by rpki-client