Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b03c651f-2805-3380-bdd9-2b8a47f5fd85.roa
File:                     b03c651f-2805-3380-bdd9-2b8a47f5fd85.roa (raw, json)
Hash identifier:          BFFX4gjN6h7ExptmbsemZuftgvPCRxkqO3mk5rL7JAc=
Subject key identifier:   A3:52:44:BB:85:C6:11:E5:E2:17:11:E6:99:97:CB:1A:29:DF:86:0C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16148E8318278127BD1D540
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b03c651f-2805-3380-bdd9-2b8a47f5fd85.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.178.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:48:e8:31:82:78:12:7b:d1:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=132ea3f3-a04d-48ca-b8ca-cf9637a8ba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:26:a4:b0:57:5d:e9:d9:62:17:ec:52:70:
                    68:25:67:7a:2f:4a:66:87:3d:7d:06:33:cf:d0:ba:
                    77:70:d9:c9:57:b1:b8:7e:08:0f:9f:75:96:07:ae:
                    3d:29:4d:bd:30:16:1a:1c:f4:18:29:b6:14:4f:77:
                    fa:03:26:53:42:38:3f:82:4f:b3:33:f8:0b:2e:c4:
                    95:f8:ab:7d:6d:61:e9:f6:af:a3:ef:0d:ba:f7:d1:
                    2a:50:11:f1:f7:19:a1:06:e8:8d:4a:d2:ed:87:68:
                    6b:64:db:21:5a:c2:46:e8:8b:03:e2:7a:fd:70:53:
                    1b:4b:4b:a0:6f:9b:d6:fc:d1:e3:dd:37:7b:47:be:
                    b0:d4:d2:06:86:02:3b:d0:ce:79:46:00:10:dd:9b:
                    ab:11:9c:6b:fa:2b:b0:08:df:36:78:97:52:b9:20:
                    0e:7d:18:1b:f5:52:d6:eb:4b:79:9d:e6:71:2b:ad:
                    ac:77:3b:1d:9c:ab:cf:0e:03:97:bd:a3:c6:ca:7a:
                    ca:81:77:73:c9:cd:d0:37:c7:2f:bd:15:66:60:3b:
                    e6:c7:be:bc:51:73:f7:81:03:90:d8:55:da:c5:21:
                    d5:c7:87:54:44:99:d5:ff:73:f6:3f:bc:8d:bc:af:
                    88:13:51:ce:a8:1b:e9:00:7b:3a:2e:13:de:d8:46:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:44:BB:85:C6:11:E5:E2:17:11:E6:99:97:CB:1A:29:DF:86:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b03c651f-2805-3380-bdd9-2b8a47f5fd85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:c3:7b:6a:ba:59:f6:c5:51:25:03:65:b4:f5:8a:83:47:
         7d:b1:9b:b6:55:18:f9:1d:7b:d5:16:03:23:d5:a8:db:39:ec:
         86:75:d9:eb:d9:30:66:90:6e:28:3a:ca:5b:9a:c4:dc:fa:2e:
         84:07:76:1b:cf:9d:ac:77:fa:cf:55:c2:13:67:b9:07:18:26:
         60:c4:68:52:ae:00:a4:f5:83:d4:41:76:93:15:90:2d:4e:30:
         37:82:e2:36:88:45:7e:89:1e:aa:ba:41:ea:12:3e:fc:24:7d:
         3e:75:f1:8d:6c:4c:dc:bc:19:9a:55:7f:32:8c:c2:30:48:9b:
         7e:0b:42:56:70:1e:8f:9b:85:b0:10:5a:78:45:91:84:6b:78:
         e9:84:4d:fc:91:91:54:6f:c6:be:82:f8:20:98:aa:b0:e7:f0:
         12:b2:1d:33:51:ed:3e:23:09:27:fd:f8:2e:9e:83:21:40:91:
         cf:99:44:80:ce:11:33:52:d6:06:7c:8b:b8:59:9c:e3:a4:15:
         a8:d9:bc:c5:72:9c:1a:8b:2e:5f:ca:eb:4c:8b:79:52:bf:68:
         e1:a6:77:85:98:88:cd:f2:74:0c:20:18:81:53:cb:41:2b:7f:
         47:76:1e:5f:75:fd:89:4e:f4:d0:0d:22:d8:e9:f8:f3:02:72:
         0a:26:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:42 2025 by rpki-client