Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c0dea98-6f24-37f2-99d4-cd39311a9bfe.roa
File:                     2c0dea98-6f24-37f2-99d4-cd39311a9bfe.roa (raw, json)
Hash identifier:          ZeW4IIy794/f1Hyv6DkCgwRID/c49c8maXrVnrVGugo=
Subject key identifier:   01:5E:CE:70:A8:A1:10:7D:BB:B9:79:D0:AF:0B:73:3B:3B:56:58:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B114DC19413538099B000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c0dea98-6f24-37f2-99d4-cd39311a9bfe.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        128.92.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:11:4d:c1:94:13:53:80:99:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=699d6bdb-ac65-4272-9504-16ac0c9b8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:dd:b8:1b:8e:da:2d:32:bc:f2:64:50:6d:
                    13:4b:95:8f:5c:c2:07:08:e1:78:be:f2:37:d0:93:
                    96:f8:72:f9:9e:b9:67:71:16:af:a8:fd:da:61:a6:
                    07:4a:c0:bf:ab:f2:c8:43:fd:00:c1:9e:bb:76:9f:
                    11:15:88:60:00:b5:fa:82:8b:5c:b4:07:30:b4:02:
                    fa:ba:e8:01:25:e7:f3:9d:75:d2:6a:f8:4e:85:a3:
                    16:af:24:cf:aa:5f:cc:bb:8f:c1:17:8e:07:ca:9a:
                    ad:98:0d:b7:1a:28:98:e2:b8:d9:74:67:15:17:60:
                    f9:d2:05:00:56:be:44:8c:39:2c:41:29:9e:9f:db:
                    6c:c6:b9:42:c3:e4:de:07:99:e8:d1:b7:1e:50:d4:
                    45:f1:f1:1b:d0:fe:4d:81:af:34:03:4e:78:51:11:
                    17:4c:f6:c0:22:9e:1a:8c:1e:ca:f4:a5:20:c2:4d:
                    24:7a:3e:f0:a6:ad:25:84:62:61:20:10:6f:e8:a8:
                    27:9e:d9:cb:03:44:d4:11:c3:d6:81:a1:8f:4e:72:
                    d4:92:f9:e5:21:a6:53:4c:b6:98:90:ab:0c:59:54:
                    44:23:99:70:c9:ec:80:68:11:fc:3b:b5:24:94:6b:
                    4d:4e:ca:2b:72:cb:02:2d:ee:e2:bd:9a:1c:1c:ea:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:CE:70:A8:A1:10:7D:BB:B9:79:D0:AF:0B:73:3B:3B:56:58:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2c0dea98-6f24-37f2-99d4-cd39311a9bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:4d:8c:33:57:c1:25:7e:56:e9:9c:ef:28:ca:2a:f7:f4:
         2f:48:05:ae:16:70:3d:7f:5b:e6:3a:d5:76:f7:83:36:fa:27:
         c4:70:ce:e7:80:01:ff:f8:90:44:8e:d9:87:a8:2d:f5:66:ce:
         c6:87:30:0d:17:4f:f7:f6:75:72:53:d1:ea:9e:4b:19:55:33:
         97:63:74:58:07:02:4c:f5:1b:42:59:f0:c6:e4:d3:b1:a2:db:
         f4:45:9a:9c:dd:3e:90:50:35:23:87:8f:2c:80:91:93:9a:a5:
         cd:1b:5f:be:73:93:da:26:de:c4:e6:f0:f8:2a:d0:7b:ae:f6:
         8e:8d:92:62:8f:b7:3d:d3:16:4b:a3:ba:93:20:9f:a8:d9:83:
         7c:e6:58:dc:cc:29:85:9d:77:80:e2:cf:a5:b4:ed:0a:51:fd:
         d0:f3:ae:e6:87:2c:83:7b:8e:09:1c:f7:0d:e6:4f:c0:a8:de:
         fd:4d:a4:9b:5c:25:b2:3b:57:0e:6c:76:5e:18:27:6c:cb:cd:
         d6:e2:27:cc:76:98:c3:96:ab:60:1b:a8:49:a7:dc:53:e6:cc:
         bb:bf:7b:84:8a:75:39:ff:f9:78:7e:01:28:90:6d:e2:94:b1:
         8d:86:14:08:de:53:c8:af:7c:88:13:ea:03:c2:68:f3:08:e4:
         5b:09:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:26:09 2025 by rpki-client