Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa
File:                     c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa (raw, json)
Hash identifier:          RTQn5eaB+s3bu46aj5XgZpRyq/yMfn3vES3Djt+OFzI=
Subject key identifier:   7D:BE:E6:A2:F7:7D:F3:88:2F:46:4D:BF:AC:D4:58:F7:8B:2F:D9:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16148B9987218E3CD739700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.178.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:48:b9:98:72:18:e3:cd:73:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=fc8974c8-b289-44b5-8be3-fefd795b0f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:a2:95:22:aa:1f:e5:c9:83:c4:aa:f1:cc:
                    29:c3:68:46:9a:6c:7a:f5:92:3a:8e:59:a7:3c:24:
                    b4:56:ee:61:61:25:7e:55:c5:a6:3e:bc:b5:c0:fa:
                    ea:c4:ad:f1:c7:16:3e:c7:a3:1f:44:dc:da:ff:7d:
                    7d:cb:1b:05:f1:19:c6:05:91:f4:19:05:ce:5f:19:
                    93:9c:a1:15:d6:22:f4:b2:29:1f:b3:9b:3b:15:9c:
                    fa:72:f8:59:6b:5c:86:c2:c8:fe:7a:fc:38:68:c2:
                    d8:6e:e1:8c:b1:5b:7c:b6:e6:53:5d:00:b0:45:1c:
                    cd:82:64:f7:e7:a1:4d:3a:db:5d:76:7e:1b:36:09:
                    47:6e:aa:b4:e4:3e:b1:82:1c:52:98:a0:73:96:90:
                    38:e1:6b:54:85:31:c9:fe:9c:7b:1e:69:7c:4a:2e:
                    8d:83:c6:28:42:d1:36:80:66:f7:ef:77:62:04:8f:
                    bb:c7:d2:88:94:af:46:aa:da:dc:70:f7:36:63:27:
                    6c:62:6f:59:52:1b:c3:e2:d1:93:74:18:50:6f:93:
                    1a:a9:4e:2d:f5:df:c1:46:fd:bf:86:30:1b:10:39:
                    4e:f5:af:02:29:19:6f:12:c6:6f:a0:cf:e3:38:92:
                    fa:4a:10:e9:0b:d6:c9:26:05:33:18:36:5d:e4:fa:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:E6:A2:F7:7D:F3:88:2F:46:4D:BF:AC:D4:58:F7:8B:2F:D9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c5cd01a3-0227-3563-9ae3-f115bcb8daa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:c7:b2:d5:b4:f6:b6:b5:a9:52:9c:21:c5:e3:d6:be:32:
         63:44:48:07:ca:dd:d9:b8:1d:bc:c7:15:d9:ab:b1:f5:87:84:
         f8:09:6f:ea:21:bc:1e:b6:9b:ae:0e:37:36:c7:41:6d:77:30:
         a6:b9:31:f4:7d:31:ce:62:96:ba:63:93:0f:2f:ab:c2:c0:19:
         17:13:4e:b2:f1:57:ac:2d:bf:41:14:78:73:79:ad:e3:12:35:
         03:ec:d4:d5:9d:de:fd:f8:cd:ab:c4:17:3b:b1:c8:22:6a:5b:
         e8:c9:5f:74:48:b6:30:99:1e:ae:05:d4:80:42:ec:45:12:47:
         56:0a:98:1b:25:18:4c:9b:14:b5:85:39:30:de:fe:18:15:de:
         c3:8b:8e:99:11:89:0b:e1:fe:c2:01:c3:9a:09:ed:c2:86:de:
         69:4b:33:6f:5a:1f:c1:58:7d:9c:d2:cc:ec:f6:73:6f:8f:05:
         77:4b:16:25:2c:40:31:fc:57:6a:11:dd:d3:a4:a7:c4:b4:2f:
         b0:1b:7f:d1:2a:11:c6:09:45:36:67:77:26:4e:11:27:a6:d6:
         ef:d6:f0:b6:db:0d:5e:22:10:b7:88:a5:62:ac:10:a2:24:5a:
         e0:92:04:75:da:0d:76:33:63:17:95:42:ed:1f:3e:43:00:8b:
         09:20:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:05 2025 by rpki-client