Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7a65c706-f83d-3d5f-8bbf-5e696f7a83ba.roa
File:                     7a65c706-f83d-3d5f-8bbf-5e696f7a83ba.roa (raw, json)
Hash identifier:          IH/zVlzu3lC3GyedIHn4kbgrP4nPlpBNCWMr19BTYU8=
Subject key identifier:   CA:7D:0B:98:57:7F:C5:44:E2:1E:3C:22:57:EE:4E:CB:6B:EF:45:7A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A72D1D6E81F2658C88700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7a65c706-f83d-3d5f-8bbf-5e696f7a83ba.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.247.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:72:d1:d6:e8:1f:26:58:c8:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a8d92c30-12c7-4086-aa53-dc7e1ff25195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:ac:3c:b4:cf:fc:71:50:62:84:ac:f5:7a:
                    d4:fb:73:30:a2:2e:f3:97:27:9c:2c:71:af:7d:27:
                    61:b6:51:66:f8:48:c0:76:9c:2c:d1:89:db:98:00:
                    2b:55:ba:4e:8d:d2:ca:ae:09:8d:e8:0c:2e:a1:2c:
                    74:0d:66:c6:62:2f:33:ee:52:0e:0c:c8:2a:8b:f5:
                    05:79:9c:7c:7a:a1:35:87:0e:f5:30:b9:a4:df:de:
                    22:41:69:e1:72:c5:09:8c:5e:92:2f:1f:7b:ec:3f:
                    fd:bc:8a:60:b0:cb:7c:01:1d:81:4d:e4:ff:71:88:
                    e6:5b:0c:b6:23:12:ea:a8:34:c6:91:26:a6:51:0e:
                    5a:cf:b4:62:8f:27:99:3e:66:26:d0:ad:50:c2:b0:
                    0e:ca:f7:9e:4a:9f:e3:fb:51:75:b1:31:24:f2:1f:
                    cf:3d:0c:7c:83:f6:4d:be:05:75:1b:93:1b:cc:2c:
                    ca:4a:48:37:36:8f:73:a9:3c:b4:98:d8:ac:07:c8:
                    7d:21:ba:fc:e0:fd:ca:67:d3:9f:2f:d1:8c:f8:81:
                    ca:b6:ac:97:cf:80:e3:9b:e5:33:41:4c:4a:50:56:
                    af:d0:4a:17:95:93:63:5a:10:6c:e4:15:c1:4f:6a:
                    9e:4a:95:1b:fa:6e:37:36:3c:f3:6a:63:0a:bb:c7:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:0B:98:57:7F:C5:44:E2:1E:3C:22:57:EE:4E:CB:6B:EF:45:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7a65c706-f83d-3d5f-8bbf-5e696f7a83ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.247.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:eb:35:a0:82:91:06:81:3c:4c:dd:1f:bc:55:9f:3a:ca:
         90:31:1c:10:c0:34:c2:7a:11:d7:18:b9:86:f3:64:4c:3f:b7:
         1d:16:29:ae:7e:a7:02:1e:a6:ca:50:9b:d9:4d:25:95:35:fc:
         24:37:de:0d:fc:3c:f6:fa:3c:1a:20:15:59:9c:62:78:8d:4d:
         4f:29:00:c2:ca:e3:a8:31:c8:1c:26:c7:44:19:10:9a:09:c2:
         cf:09:db:b5:44:27:23:f1:89:f2:b0:2c:e2:12:e0:27:b8:22:
         a8:d7:b7:aa:c3:59:63:3d:c8:a7:d0:b0:9d:d5:f8:cf:2d:02:
         73:a7:42:a7:3d:27:19:0b:f1:bb:0f:56:5b:b4:b0:86:57:be:
         fa:9c:91:9f:d9:c6:48:7c:c8:47:93:0d:a4:21:fb:2b:9f:6a:
         3f:ac:7c:85:a0:33:49:d2:ff:da:bd:2c:7b:c6:78:a7:91:41:
         c5:da:9d:3b:7e:d4:b0:4e:0f:86:54:a3:c8:6d:0c:09:8c:fe:
         01:8b:c5:85:f4:6e:f4:73:b4:a2:7b:db:c6:f9:98:1e:b9:f2:
         81:77:f3:d6:6e:56:bd:5e:f9:90:59:00:1e:7c:70:ff:ea:14:
         cc:c2:5c:0e:5d:08:2b:20:71:58:5d:34:f5:31:06:82:18:f3:
         7d:f5:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:52:44 2025 by rpki-client