Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8215d721-c4c3-3a5c-8f0e-5f1e239aadd6.roa
File:                     8215d721-c4c3-3a5c-8f0e-5f1e239aadd6.roa (raw, json)
Hash identifier:          rxgGHdAeY+5z2lJIchM2C+8M+SXN1CZWjpwWoSA7iMc=
Subject key identifier:   B4:A9:44:50:D4:D1:5E:E9:90:2E:9A:69:48:FE:C1:2B:7B:FD:86:0E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161DB1BED5628B6FBF3D450
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8215d721-c4c3-3a5c-8f0e-5f1e239aadd6.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.182.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:db:1b:ed:56:28:b6:fb:f3:d4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=ab7d050c-9895-4486-bbd7-da852b90d94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:63:ec:98:ff:38:52:d6:ae:f2:0f:a6:28:
                    8f:3a:92:ea:da:1b:ea:57:50:76:69:01:35:d5:b1:
                    99:eb:7c:9f:17:63:86:17:c7:1d:1b:d6:ff:53:c2:
                    fd:1b:6d:09:fb:ad:af:d6:af:9a:6e:a3:ed:90:09:
                    4f:c8:4c:7d:04:84:ae:06:cb:4e:49:c2:f3:c2:6e:
                    d7:ac:d8:39:c2:55:83:5e:72:d9:e2:7e:57:6e:4e:
                    a1:5a:b1:85:9c:ac:0d:cc:b5:9b:00:d2:ac:c8:15:
                    76:8a:cb:a9:79:f0:16:4d:f2:d6:a6:52:1e:09:2a:
                    44:1b:00:30:2a:ec:1f:68:c5:1e:ec:12:7e:e9:96:
                    ec:b1:2b:4a:9e:bd:97:ae:a8:1c:a9:31:ff:ff:36:
                    9a:59:e4:66:47:55:4e:eb:e7:73:e0:7f:c1:bb:15:
                    37:48:51:ff:b4:a0:bc:57:6a:09:c9:b3:20:f1:4e:
                    2b:7e:15:3e:a9:43:00:e7:b1:3a:3b:da:78:4f:b7:
                    99:00:4d:2e:8c:0f:91:06:aa:b6:d8:d7:75:09:d9:
                    d4:ee:3d:30:dd:4f:e9:06:27:07:c6:1f:d6:9b:00:
                    04:6c:1f:bc:f3:d7:7c:d3:b9:eb:69:96:19:87:30:
                    14:06:ff:b4:ed:6b:b1:44:24:52:19:30:8f:6e:06:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:44:50:D4:D1:5E:E9:90:2E:9A:69:48:FE:C1:2B:7B:FD:86:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8215d721-c4c3-3a5c-8f0e-5f1e239aadd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.182.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:35:6c:19:ec:64:68:aa:24:54:b3:e1:a5:23:9e:09:0b:
         f9:7b:fc:f4:4b:a5:c0:a3:39:10:68:00:de:26:81:1c:d9:9c:
         3e:74:51:b7:d8:bf:3a:21:d0:bb:6f:f1:18:43:f6:79:1e:cc:
         b7:60:d3:c4:32:7c:8e:0a:02:b4:3b:8e:1f:0d:4d:09:8b:36:
         aa:95:cf:98:bb:68:ad:39:bb:e1:69:fb:45:aa:1c:05:d6:3e:
         b2:b5:34:03:9e:3c:1d:79:9f:c3:ae:c4:15:3e:59:9c:43:b1:
         80:13:a8:f0:df:00:a1:4b:cc:52:f6:3c:87:e3:6e:cc:3e:71:
         78:54:60:1f:cf:e3:c5:cd:5e:b8:59:06:a3:fb:56:53:63:c2:
         95:4b:9f:d7:1a:fc:22:8c:7a:b9:c2:e9:c2:94:db:e7:66:f2:
         d5:14:69:c4:59:71:1a:34:b8:5d:89:6f:91:71:fb:15:10:bb:
         02:34:d0:86:dc:dd:be:b2:b6:d7:55:ea:66:df:27:a7:dd:33:
         d9:f2:ec:b6:5d:70:66:e3:c7:22:d0:4f:a5:04:b6:67:f2:1d:
         f3:0e:4c:9c:78:f2:9f:23:85:6c:0a:91:a6:34:6e:e8:b0:1f:
         94:19:b5:a6:c6:b1:27:58:1c:75:bf:a4:a5:4c:c1:bb:cf:58:
         1f:b9:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:19 2025 by rpki-client