Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7768e63d-9d18-3d24-8195-06335e9626ab.roa
File:                     7768e63d-9d18-3d24-8195-06335e9626ab.roa (raw, json)
Hash identifier:          yJrJxZ/9Fo9ccMF5wkB6NqeYGtkGxmCkVjhJVHWI6jc=
Subject key identifier:   4B:69:21:93:48:6E:01:68:8F:D1:A6:FD:CD:C9:EE:C5:EA:76:88:EA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161DA805A735B30F9301DC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7768e63d-9d18-3d24-8195-06335e9626ab.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.178.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:da:80:5a:73:5b:30:f9:30:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=f41342c8-5109-43c3-8e05-6c061a7ac727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:58:a5:10:91:e8:e1:78:e8:c2:67:aa:db:
                    9b:19:5d:2e:c6:f7:fe:ae:43:78:5a:a9:84:cc:88:
                    40:32:1d:11:2e:e5:fe:87:d2:67:c0:0b:9e:d5:98:
                    31:e7:cb:a9:a7:23:85:f9:38:6e:72:ba:76:66:08:
                    ac:40:d8:39:e7:ce:d2:11:69:64:bd:69:00:ec:d2:
                    a5:f0:b2:d5:a6:92:ee:b3:f8:bf:0e:ab:c3:cf:ac:
                    47:df:2d:f1:81:79:89:bd:5c:ae:fe:ac:6a:1e:d0:
                    2f:33:c9:3b:77:97:54:bf:eb:73:3c:0a:3c:54:41:
                    19:d4:af:eb:dc:68:6f:ee:0b:14:1b:8c:1e:c2:4e:
                    16:81:72:09:68:6b:dd:0f:9f:2c:ef:13:08:1c:0c:
                    74:25:6d:49:c3:15:e3:7d:3c:6f:d2:f3:64:d2:0b:
                    cb:a3:4a:f8:a2:fa:d7:f0:62:fb:82:c4:9b:a8:f9:
                    94:2e:cc:a3:c4:aa:d1:41:ac:d6:a5:08:49:f2:52:
                    9c:06:17:d4:b5:69:2d:05:8a:50:f4:8c:39:65:eb:
                    90:dc:66:9c:89:27:a7:42:c0:d3:a3:28:10:a9:f4:
                    03:16:cb:3b:39:c1:87:4e:90:f0:52:3f:03:14:db:
                    ee:ca:ca:75:1e:33:57:59:b2:c9:e1:55:6f:d0:57:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:69:21:93:48:6E:01:68:8F:D1:A6:FD:CD:C9:EE:C5:EA:76:88:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7768e63d-9d18-3d24-8195-06335e9626ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:30:a5:dd:71:78:dd:08:f5:fb:41:a1:5d:3e:20:6c:b9:01:
         69:90:57:ac:90:e3:64:54:3f:4c:04:99:2a:fe:81:da:94:8e:
         49:85:bc:21:97:87:59:6a:5b:39:27:c1:df:7e:d2:35:4d:14:
         6a:29:e3:4e:dd:44:e7:df:b4:40:66:90:bb:8f:f4:b2:d5:ad:
         a4:90:11:74:d4:59:3f:d3:08:be:64:42:aa:5f:fb:3c:df:46:
         92:a1:88:98:45:81:52:d4:47:93:ae:7e:3f:a6:2c:25:5e:f5:
         e1:98:17:1a:6f:69:80:09:ca:57:42:77:8a:b7:27:87:e5:c4:
         58:98:10:f5:84:cd:fe:ee:1c:e1:b2:dd:41:8f:87:41:03:fa:
         39:a2:47:9f:81:47:41:4c:d6:b3:9f:7d:a1:71:8e:ee:42:c5:
         a4:9a:89:a9:9a:0c:83:6c:f1:91:7f:95:c6:ed:2f:16:73:28:
         dc:26:59:1c:30:6b:9e:46:f3:96:12:44:a6:a2:70:f2:01:ed:
         1f:41:24:e8:eb:38:cf:d3:0a:da:6e:1b:00:4c:df:9a:92:a8:
         e6:1e:a3:72:0d:e1:ad:d9:a8:e7:96:6a:41:05:57:f9:c3:55:
         54:87:33:da:3b:61:c5:57:5a:cf:cc:71:49:96:a9:dd:62:e2:
         31:ea:90:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYdqAWnNbMPkwHcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZjQxMzQyYzgtNTEwOS00M2MzLThlMDUtNmMwNjFhN2FjNzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDZYpRCR6OF46MJnqtubGV0uxvf+rkN4WqmE
zIhAMh0RLuX+h9JnwAue1Zgx58uppyOF+Thucrp2ZgisQNg5587SEWlkvWkA7NKl
8LLVppLus/i/DqvDz6xH3y3xgXmJvVyu/qxqHtAvM8k7d5dUv+tzPAo8VEEZ1K/r
3Ghv7gsUG4wewk4WgXIJaGvdD58s7xMIHAx0JW1JwxXjfTxv0vNk0gvLo0r4ovrX
8GL7gsSbqPmULsyjxKrRQazWpQhJ8lKcBhfUtWktBYpQ9Iw5ZeuQ3GaciSenQsDT
oygQqfQDFss7OcGHTpDwUj8DFNvuysp1HjNXWbLJ4VVv0Fc0EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtpIZNIbgFoj9Gm/c3J7sXqdojqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzc2OGU2M2QtOWQxOC0z
ZDI0LTgxOTUtMDYzMzVlOTYyNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGLJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcwpd1xeN0I9ftBoV0+IGy5AWmQV6yQ42RUP0wEmSr+gdqUjkmFvCGX
h1lqWzknwd9+0jVNFGop407dROfftEBmkLuP9LLVraSQEXTUWT/TCL5kQqpf+zzf
RpKhiJhFgVLUR5Oufj+mLCVe9eGYFxpvaYAJyldCd4q3J4flxFiYEPWEzf7uHOGy
3UGPh0ED+jmiR5+BR0FM1rOffaFxju5CxaSaiamaDINs8ZF/lcbtLxZzKNwmWRww
a55G85YSRKaicPIB7R9BJOjrOM/TCtpuGwBM35qSqOYeo3IN4a3ZqOeWakEFV/nD
VVSHM9o7YcVXWs/McUmWqd1i4jHqkNs=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:48 2025 by rpki-client