Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa
File:                     ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa (raw, json)
Hash identifier:          JguOdQQ2YhsK40UMx62vm4itNJGsvO5c2nFJs5UXnk4=
Subject key identifier:   BC:25:26:3D:03:64:15:E0:32:E8:0D:5F:A6:1D:45:48:3F:DD:52:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161372B8F080BB14FEC9740
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.197.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:37:2b:8f:08:0b:b1:4f:ec:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=41475ad6-dcd2-4ff3-8651-5d656d626bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:2f:d6:0e:e9:95:86:f0:e0:0b:d9:d3:5d:
                    b5:a1:1c:a6:aa:35:ce:e3:68:cd:e1:c1:38:59:af:
                    d3:71:6a:04:6b:35:cc:e3:37:d0:2e:3c:53:60:82:
                    ee:27:d2:96:86:ee:41:3f:ed:e8:30:ba:73:b3:e8:
                    e0:b1:70:b7:47:34:4b:3d:06:96:fe:e4:c6:ce:6d:
                    17:75:71:e2:c1:43:01:61:69:29:8b:8c:0b:a0:f1:
                    70:48:86:eb:06:92:0b:9c:9d:51:a1:da:4c:87:00:
                    c9:90:9d:a5:84:75:2d:ff:df:e4:3f:e7:cd:56:9d:
                    38:78:c1:2d:d3:5a:e2:ab:3e:44:03:6e:a0:55:56:
                    65:13:b9:7e:5b:5f:67:e7:ce:96:85:5b:ed:98:54:
                    b7:30:6d:33:79:ef:39:07:ae:f4:70:8a:4c:0a:e7:
                    5f:33:54:20:f7:4b:68:c9:29:d0:35:c3:bb:cf:57:
                    18:58:a4:32:65:a4:2c:5b:7a:2e:51:77:cd:40:38:
                    10:cf:ba:1e:1c:3e:c6:ac:a9:3e:40:c4:d4:98:1d:
                    eb:ba:ab:eb:fe:d2:43:ce:ac:8c:fc:4b:c0:b7:1b:
                    e4:3d:0d:ea:59:28:a6:02:d8:a9:81:41:e6:7c:6b:
                    69:14:9a:d7:c3:11:71:4e:24:d8:10:2f:cc:da:da:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:25:26:3D:03:64:15:E0:32:E8:0D:5F:A6:1D:45:48:3F:DD:52:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:47:5b:33:d1:bb:62:9f:d8:e6:08:78:ed:4b:1a:23:67:
         3f:81:2d:19:c0:cb:57:76:f1:a6:8c:6d:e3:d8:8e:4e:6e:20:
         52:bb:44:85:c5:6e:cd:14:37:fb:82:e9:c4:89:23:4b:25:e2:
         0a:2b:3b:c7:ab:ab:ac:f2:2b:74:97:24:73:c9:a7:d5:b1:ab:
         2b:d1:1c:11:d7:95:5b:a0:1b:16:57:47:52:b3:e4:be:33:56:
         b7:4b:32:ae:cd:d6:b4:23:11:0e:7b:ab:f7:8b:8a:08:54:d6:
         28:09:98:ae:1b:da:c1:c0:ae:6d:98:c9:b4:e2:b8:68:b5:c0:
         ee:19:27:aa:01:ef:31:80:b7:56:cc:39:b2:ae:57:a0:ae:c8:
         95:0b:18:1b:af:55:b4:8a:a9:87:69:25:9a:aa:f4:12:27:22:
         98:59:90:a4:0a:d9:f3:56:79:ca:99:06:3d:4f:28:28:90:05:
         3c:dd:87:9e:89:f6:e6:88:78:13:f6:55:9b:c1:30:09:57:90:
         a8:d3:7f:a6:20:9e:c6:b0:23:ee:28:a5:9a:68:93:6c:7d:6f:
         72:d0:92:c5:44:05:0f:12:08:1e:59:08:8d:42:e4:f7:fa:fc:
         96:58:59:33:19:f9:7c:e4:d6:1c:ae:e5:bc:6d:af:32:11:30:
         53:32:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:18 2025 by rpki-client