Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/878ee787-0669-3692-ab00-d2153abeaaf5.roa
File:                     878ee787-0669-3692-ab00-d2153abeaaf5.roa (raw, json)
Hash identifier:          G3h2CxENecgdsk3SuMQO/GGu0weVhFcOhGLI7C5S7cw=
Subject key identifier:   93:3D:91:47:A3:5E:35:4D:9F:CB:B5:C2:29:AC:D9:77:D0:24:B4:AF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1612FD8F66314E2312752C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/878ee787-0669-3692-ab00-d2153abeaaf5.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.171.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:2f:d8:f6:63:14:e2:31:27:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=aa00ecb5-3eaa-4416-a645-141b04466537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:cf:60:dd:6e:29:b0:6c:cc:a7:49:74:72:
                    1a:60:86:c2:72:c2:29:ea:01:80:e9:a9:c4:49:99:
                    ef:7f:e1:66:6e:cd:c1:4a:b0:cf:fc:ef:82:c6:cb:
                    5c:a9:55:84:1a:d7:59:7d:b5:00:17:ff:de:fe:b5:
                    8a:b8:97:60:2b:33:4a:59:b5:7c:7f:40:6b:5b:77:
                    9b:a0:bf:68:01:65:1d:29:89:d5:a1:16:65:73:94:
                    ef:69:9f:d0:5f:e9:ce:8d:dd:ea:3c:69:1d:69:92:
                    77:27:32:01:57:9d:ac:9f:49:f6:85:d6:bd:45:94:
                    08:17:38:61:6e:c5:d9:64:54:6f:50:26:81:f9:c8:
                    25:ad:a5:73:34:0d:5c:b1:2f:bf:a8:39:06:93:91:
                    65:b7:ac:2e:70:b3:ad:31:76:3a:97:9f:62:f5:b7:
                    b8:38:6b:41:07:c8:ef:15:29:09:9d:5d:e9:21:82:
                    06:cc:25:e3:0e:1a:7a:e3:b8:52:b3:db:a2:32:3c:
                    85:5e:b9:28:9d:ce:a5:02:c5:86:eb:95:a1:03:cb:
                    04:7a:13:f2:79:31:e3:de:07:3f:37:b5:0a:66:56:
                    df:e0:bb:9f:14:18:35:df:98:a4:f9:c1:57:c9:6b:
                    a9:b3:29:1f:ba:9f:b1:c1:0c:68:39:d8:c9:9d:a6:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3D:91:47:A3:5E:35:4D:9F:CB:B5:C2:29:AC:D9:77:D0:24:B4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/878ee787-0669-3692-ab00-d2153abeaaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.171.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:a7:83:84:97:d5:c8:06:9b:eb:f1:b0:19:4e:fb:0b:81:
         fd:5a:c5:c4:64:ce:90:15:99:f8:14:30:3b:9b:d9:a6:04:2e:
         2a:11:19:74:d2:84:3d:06:a8:1a:00:4e:3c:6f:a2:8a:db:6e:
         ee:ea:e9:e4:d4:79:e5:4f:15:8b:64:2e:41:7a:b4:2f:97:4f:
         22:27:4b:e3:7d:30:4d:b7:af:66:46:51:49:9c:e4:e5:fd:e6:
         82:64:98:7b:67:11:e7:46:66:ab:96:75:7f:fe:55:40:5b:d2:
         8f:77:5a:86:20:a8:04:b6:7c:e8:4f:bb:3b:9a:6b:6a:d7:4e:
         f5:bd:17:6d:30:51:03:44:48:bf:92:1d:52:d1:df:b8:c1:aa:
         9d:38:82:0d:ea:47:09:56:45:16:b4:19:09:dd:c3:94:db:3a:
         cd:3b:39:5a:55:a6:c4:19:eb:fb:5f:40:98:42:19:6f:8d:d7:
         f6:3c:78:2b:e9:1d:ac:a8:8d:e1:00:a1:55:e7:fb:a6:eb:e8:
         f4:2b:aa:a9:9f:54:10:a3:4a:90:14:81:60:1a:ae:bc:be:18:
         f8:1b:f4:ad:f6:19:12:77:f4:16:ca:8b:3c:a7:98:12:d0:4b:
         f2:99:98:da:a9:8d:ea:52:00:ac:a3:e4:48:52:76:60:b7:ce:
         92:b6:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:10 2025 by rpki-client