Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe4deb23-65bb-3673-9ef3-c3b5408fad44.roa
File:                     fe4deb23-65bb-3673-9ef3-c3b5408fad44.roa (raw, json)
Hash identifier:          BEPD/ah1IxLTUov1sIXUSykjvhtOngEs6aByCqk9ZRQ=
Subject key identifier:   90:F9:70:44:25:7D:6D:CE:0A:48:2F:06:D6:87:AB:C4:D0:79:17:7A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161D9E436C8F5686545A05C
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe4deb23-65bb-3673-9ef3-c3b5408fad44.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        24.176.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:d9:e4:36:c8:f5:68:65:45:a0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=87d573f5-90a1-48a3-9765-64eb9a4ab701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:90:d2:08:ce:aa:75:a5:48:02:8f:6d:fb:
                    d3:ad:69:51:e3:96:66:7e:b7:ad:a8:17:ca:7e:78:
                    44:32:98:f8:00:01:83:67:6d:be:f1:34:32:a5:15:
                    44:56:82:c8:0d:16:42:1f:bb:61:cb:71:dd:91:7e:
                    f7:14:32:32:d3:b7:6b:fe:55:24:45:f0:35:41:23:
                    06:07:64:a1:88:4a:4b:34:da:2d:5d:26:07:ba:a7:
                    b3:c8:b5:ea:e3:44:37:a8:60:56:86:33:dc:5f:3f:
                    bc:80:2d:08:4a:5e:08:78:07:0f:aa:0d:60:3a:87:
                    dd:f2:ad:31:64:93:ca:a0:83:4e:aa:05:bc:da:2c:
                    59:cc:ae:bc:c9:7d:15:ea:44:15:31:b5:02:31:8d:
                    f7:07:af:56:a2:84:2d:02:3c:6e:55:ae:eb:b4:e4:
                    bd:d7:da:8a:bd:cc:1b:9f:63:50:19:5c:fd:3f:48:
                    47:99:50:7b:f6:7d:ce:8e:f8:7b:93:db:99:7e:1f:
                    6d:ff:0b:70:f5:f2:d0:f1:e9:90:f2:cd:df:33:43:
                    d9:00:34:c4:3d:10:bd:bf:73:9c:65:5d:6e:f2:d3:
                    aa:c7:f0:be:f1:59:5a:e9:03:af:ac:16:f8:0a:cc:
                    78:c5:01:70:f0:0a:62:e9:52:22:c4:07:13:92:93:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F9:70:44:25:7D:6D:CE:0A:48:2F:06:D6:87:AB:C4:D0:79:17:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe4deb23-65bb-3673-9ef3-c3b5408fad44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:12:4e:8b:5d:bd:0e:3b:c8:12:af:47:fa:ef:22:36:12:56:
         df:e2:ce:45:0d:51:14:66:48:13:a5:29:91:aa:a0:cd:49:c8:
         59:52:4b:26:34:20:09:4a:33:19:33:6d:07:97:cf:21:fc:c6:
         cb:70:2e:1c:be:3d:bb:cb:2a:a4:88:5f:cf:0f:00:a6:1a:71:
         f7:9e:ce:9b:4f:68:18:50:79:55:6a:e3:72:35:53:42:ce:4a:
         74:7d:b9:50:b2:74:10:8a:44:0d:f3:ee:33:d9:17:f7:dc:21:
         3e:52:70:7f:8b:2c:74:3e:e2:ce:f7:ce:bb:cf:55:37:07:4d:
         e0:81:b2:86:9a:18:a7:48:a5:bd:8f:18:25:31:3a:12:e0:4c:
         91:12:10:c6:bf:35:60:db:87:68:22:fb:8d:70:5e:c0:e0:46:
         f6:85:f9:b4:d0:0a:17:10:aa:df:f6:14:b6:d5:ab:9b:cb:00:
         9d:dd:89:fd:ea:07:70:be:2c:9a:1d:9c:aa:45:fc:65:01:c8:
         a8:d1:b4:35:39:ae:81:db:54:41:0b:e1:5a:81:3d:ab:b3:6d:
         e7:10:ac:77:c0:61:4a:de:56:71:4c:b9:52:af:b8:3d:a1:03:
         f1:1e:b5:b8:47:18:29:f6:d0:56:ec:d3:dd:d2:f8:1b:22:1a:
         b2:89:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:23 2025 by rpki-client