Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7410a638-36f3-3f4c-bce7-0148337db5f5.roa
File:                     7410a638-36f3-3f4c-bce7-0148337db5f5.roa (raw, json)
Hash identifier:          FvwhkOkBYlne2Qtrzb+eeE6Ph0DkNIcMolnX1Syz3Wk=
Subject key identifier:   42:4C:92:46:EA:3E:9F:F5:24:0F:E7:5A:FE:7D:00:F6:AA:93:20:7C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0C2389C1396C1F457CF1
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7410a638-36f3-3f4c-bce7-0148337db5f5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.107.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:0c:23:89:c1:39:6c:1f:45:7c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ab77c46c-71f6-4563-9518-533821b42e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:c0:7c:fa:f7:8e:2b:5b:fe:69:cd:80:7a:
                    3a:17:2e:65:73:10:2b:09:cf:74:0f:bf:6e:6a:33:
                    1e:a5:11:57:f0:0e:a3:92:cc:31:6f:6a:ca:85:34:
                    a8:91:bb:97:46:5e:aa:01:4f:88:2d:9d:9a:8e:86:
                    fb:fd:be:70:1d:d6:28:60:4c:2f:35:25:f5:bd:41:
                    29:db:f9:92:b9:e4:85:7c:60:4c:2a:9f:3b:24:52:
                    6a:1f:5f:59:00:1b:93:45:58:26:03:51:ff:c9:ac:
                    62:46:6d:3f:c3:e3:e4:df:9c:6d:91:50:24:ac:eb:
                    fa:b8:c8:17:3b:72:60:99:5d:9d:22:6c:0d:9d:dd:
                    6d:48:fc:77:ae:5e:65:83:42:d9:25:fa:41:7d:74:
                    d7:f9:9f:e4:ae:56:11:ea:f0:36:06:00:04:9f:4f:
                    f0:9a:ec:bf:4c:a1:0b:89:75:e4:7e:3c:cd:08:fc:
                    95:56:8b:d6:c3:ff:3d:10:54:97:b1:b6:53:78:01:
                    97:f4:78:9c:a9:15:4b:0f:3e:a2:2f:5c:ab:87:d3:
                    85:bc:f0:56:f7:bf:38:3d:d4:4b:b2:5f:74:53:82:
                    83:d8:f5:66:f8:6a:bb:67:42:51:4d:b4:22:f6:11:
                    77:e2:31:86:1b:92:0f:1b:25:4c:42:18:3f:91:1f:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:92:46:EA:3E:9F:F5:24:0F:E7:5A:FE:7D:00:F6:AA:93:20:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7410a638-36f3-3f4c-bce7-0148337db5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.107.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:66:a9:ca:00:02:aa:e3:64:7e:c4:13:cb:8c:cf:eb:01:
         70:25:75:42:e1:22:67:70:fb:76:41:f5:47:6c:bb:bc:76:28:
         a5:24:d7:0a:fd:fa:2a:08:96:63:ff:dd:1d:b1:59:71:1a:d7:
         e6:73:90:f2:93:a5:ce:00:84:e4:ae:04:47:2d:20:ba:b3:a2:
         44:bc:67:4a:8d:38:73:18:05:21:7e:b0:26:f0:06:8c:3f:47:
         1b:70:25:e7:ef:ad:fb:ea:b6:41:a1:12:ea:fc:c8:84:59:dc:
         b3:4d:5d:a1:62:0e:77:f8:79:f7:1d:fa:e5:7e:61:4e:0d:b9:
         3c:bc:5d:bf:13:bd:bc:a2:fb:ab:cf:4d:25:5c:04:6b:7d:90:
         23:48:ef:76:dc:32:22:6c:9e:87:46:b9:5c:3b:53:e7:e1:b7:
         63:ee:76:9b:ae:f0:86:c0:69:bf:72:11:19:9b:34:a8:44:1f:
         00:2d:3b:e8:f0:ef:d5:2a:23:1e:f5:f2:a7:d0:4c:6b:78:f8:
         eb:53:3b:21:bf:55:e7:f1:1c:55:31:0b:d1:a2:2b:67:e2:d6:
         ae:9d:ec:d5:b3:5b:97:3a:36:fd:29:a4:fe:4b:cf:d0:1f:e6:
         64:d5:0e:79:22:de:5a:cf:30:5c:b5:8a:6a:69:52:47:95:2c:
         3f:0a:a1:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCwwjicE5bB9FfPEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YWI3N2M0NmMtNzFmNi00NTYzLTk1MTgtNTMzODIxYjQyZTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinfAfPr3jitb/mnNgHo6Fy5lcxArCc90D79u
ajMepRFX8A6jkswxb2rKhTSokbuXRl6qAU+ILZ2ajob7/b5wHdYoYEwvNSX1vUEp
2/mSueSFfGBMKp87JFJqH19ZABuTRVgmA1H/yaxiRm0/w+Pk35xtkVAkrOv6uMgX
O3JgmV2dImwNnd1tSPx3rl5lg0LZJfpBfXTX+Z/krlYR6vA2BgAEn0/wmuy/TKEL
iXXkfjzNCPyVVovWw/89EFSXsbZTeAGX9HicqRVLDz6iL1yrh9OFvPBW9784PdRL
sl90U4KD2PVm+Gq7Z0JRTbQi9hF34jGGG5IPGyVMQhg/kR9D0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJMkkbqPp/1JA/nWv59APaqkyB8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzQxMGE2MzgtMzZmMy0z
ZjRjLWJjZTctMDE0ODMzN2RiNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGGugMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJn/ZqnKAAKq42R+xBPLjM/rAXAldULhImdw+3ZB9Udsu7x2KKUk1wr9
+ioIlmP/3R2xWXEa1+ZzkPKTpc4AhOSuBEctILqzokS8Z0qNOHMYBSF+sCbwBow/
RxtwJefvrfvqtkGhEur8yIRZ3LNNXaFiDnf4efcd+uV+YU4NuTy8Xb8Tvbyi+6vP
TSVcBGt9kCNI73bcMiJsnodGuVw7U+fht2Pudpuu8IbAab9yERmbNKhEHwAtO+jw
79UqIx718qfQTGt4+OtTOyG/VefxHFUxC9GiK2fi1q6d7NWzW5c6Nv0ppP5Lz9Af
5mTVDnki3lrPMFy1imppUkeVLD8Koeo=
-----END CERTIFICATE-----
Generated at Fri May 9 12:37:22 2025 by rpki-client