Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/635d0d9b-bba4-3830-b4e0-f1f841cd4d66.roa
File:                     635d0d9b-bba4-3830-b4e0-f1f841cd4d66.roa (raw, json)
Hash identifier:          6Yf2tdY7BOAcSwM9MVV5gdsRhZAsKklBJ3v2IDaUtx8=
Subject key identifier:   8A:1F:7E:08:D7:56:60:8F:BC:41:B9:5F:CD:A3:32:99:71:8E:47:17
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A81F9A2FF055EF2CA7840
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/635d0d9b-bba4-3830-b4e0-f1f841cd4d66.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.241.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:81:f9:a2:ff:05:5e:f2:ca:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=82892733-babc-41a6-81b1-fd3115c97679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:c1:43:bb:fd:ab:6b:8f:e5:1d:b6:c1:71:
                    1b:90:3b:0e:f7:71:08:94:7e:35:4c:89:95:ac:5d:
                    1c:a4:57:de:cb:ac:40:14:a6:73:77:68:b8:92:fb:
                    b1:9c:14:21:af:5f:be:fb:05:0d:59:25:f5:d1:6d:
                    1a:4a:eb:cd:76:2f:39:90:13:11:88:5a:53:0d:f5:
                    94:95:55:ba:e2:67:0d:13:a8:a2:ea:96:83:f1:bc:
                    41:c3:8b:a7:99:59:9c:d9:69:eb:e9:fb:56:86:4a:
                    ba:74:f6:12:d5:c6:b0:04:7e:b1:14:82:b6:50:36:
                    c6:23:fd:ae:95:3f:2e:65:dc:f4:58:8e:8e:16:81:
                    1c:98:ca:79:ba:07:be:c3:9d:09:1d:ca:d7:94:be:
                    16:5e:40:d1:b9:9e:47:dc:12:96:33:dc:ed:5d:89:
                    ee:0b:f0:17:c0:6c:4c:c5:4b:a3:91:72:36:0a:ec:
                    28:b8:84:5a:1d:0e:e8:37:9d:0d:77:5f:32:52:58:
                    7f:af:4b:d3:84:65:51:b7:d0:fd:22:73:00:b6:a1:
                    e5:af:a7:9d:7c:30:7b:7a:64:6b:37:b3:46:82:28:
                    f3:f9:fe:80:08:12:12:6e:b6:4b:f7:bc:03:fd:28:
                    b9:ce:a4:78:91:4c:2b:27:44:80:a3:41:4b:34:a5:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:7E:08:D7:56:60:8F:BC:41:B9:5F:CD:A3:32:99:71:8E:47:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/635d0d9b-bba4-3830-b4e0-f1f841cd4d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.241.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:57:ea:ed:9f:2e:3e:b3:d6:9b:6f:e2:1e:22:a3:76:e9:19:
         f8:f6:b4:dd:3a:ba:f2:61:0b:a1:ad:d3:0d:68:f1:93:83:e3:
         b7:c5:4a:ca:00:22:6c:90:7f:4b:ac:20:c1:59:0d:1a:81:88:
         11:a9:d7:10:fe:2b:6e:1b:b1:4d:23:dd:f3:5f:27:68:ad:36:
         4b:cb:d8:b0:39:40:e7:e8:63:ea:18:4f:53:c2:4b:ce:b1:35:
         90:59:45:c6:7c:66:07:a8:dc:9d:ba:ca:a9:65:ea:ef:a6:0d:
         25:f0:f2:cf:a8:51:ed:0a:5f:ff:b9:88:69:36:2e:c0:f0:53:
         6a:4a:57:8a:b2:99:7d:71:11:9a:b2:14:ab:be:22:e1:0e:3c:
         d0:c7:b0:41:50:54:9c:05:42:b0:94:d9:94:aa:7d:5b:66:4b:
         4e:3f:ec:a2:1d:d0:b2:9f:84:c5:9b:bf:55:b2:85:3d:38:3d:
         d3:ce:a4:c4:a4:85:3b:e0:e1:e0:09:e8:2a:71:51:b0:d9:05:
         e6:1d:bb:66:48:47:6a:81:fe:84:e3:cf:0b:c5:5e:a1:ff:43:
         52:95:4c:5e:cf:1b:55:06:95:6a:d5:9f:fb:25:4f:89:c7:28:
         77:ff:e7:78:8e:c3:76:24:d7:e2:9f:f1:5e:fc:fb:ee:0e:bf:
         38:99:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:31:53 2025 by rpki-client