Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98361b63-60c7-341e-b817-00443a79a66f.roa
File:                     98361b63-60c7-341e-b817-00443a79a66f.roa (raw, json)
Hash identifier:          wewhZxh4jLXg/QbuExrZSx8kVSjWo541QxsIHXGpH4U=
Subject key identifier:   0F:37:65:D1:7D:CB:1D:D5:8C:2D:BA:F5:8E:F0:64:38:BB:F6:15:D3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A872F37D0E46B4ABF1D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98361b63-60c7-341e-b817-00443a79a66f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.240.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:87:2f:37:d0:e4:6b:4a:bf:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d8df10e2-71ed-4d6b-b780-6950b34c4c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:7f:ab:a6:e3:13:1d:15:91:f9:c2:9b:24:
                    77:c7:70:4e:f2:89:ad:34:c0:e4:ae:7e:e8:2c:df:
                    c0:0c:be:12:88:b3:33:df:22:5c:ce:fd:a8:72:1b:
                    8e:0d:84:9e:bf:20:a8:fc:a9:b3:71:b8:82:23:49:
                    1f:e6:17:7e:8b:86:bd:92:06:b6:c9:e5:b5:57:1b:
                    08:8a:f2:19:dc:fe:68:04:81:00:73:3a:f2:00:60:
                    aa:02:29:f0:52:96:b0:0c:09:82:2b:ca:07:3b:bb:
                    6e:cc:0e:a1:73:ad:4c:9d:e9:d0:4f:f3:ae:1c:82:
                    e4:2c:8b:fe:2b:ca:48:cc:7d:2d:a9:d2:25:95:b4:
                    d6:41:31:a2:72:c9:68:9f:fb:ff:fb:d3:f1:63:77:
                    c5:21:c8:c7:42:8f:d5:ac:a6:b2:15:9a:a8:6c:8f:
                    01:8f:33:96:b8:c5:2e:f7:17:9b:83:fe:a9:0d:fd:
                    50:36:fa:f3:a8:fb:94:88:0b:e7:bf:7a:ac:11:21:
                    fa:7a:c6:ab:4c:87:01:11:7a:7f:7c:d0:47:d8:7e:
                    21:f0:f2:0c:81:a0:23:e9:ec:7f:63:f0:40:10:ae:
                    7c:72:88:7d:4a:43:61:47:26:ae:49:b6:79:12:d0:
                    48:dc:6e:1c:bb:98:c2:87:b7:de:f0:de:ad:8f:98:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:65:D1:7D:CB:1D:D5:8C:2D:BA:F5:8E:F0:64:38:BB:F6:15:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98361b63-60c7-341e-b817-00443a79a66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:73:3d:c4:14:d8:1b:b2:1e:c4:3e:69:da:cd:e3:eb:24:09:
         1f:2c:e2:20:ea:3a:87:a5:e1:fb:71:87:2e:cf:17:93:a1:38:
         6e:e3:01:5f:07:5d:6f:6d:c3:13:96:44:6d:a3:ec:11:5a:b7:
         14:c4:56:55:6b:11:8b:5f:73:b4:ee:88:0e:45:37:d7:4e:c5:
         30:21:a7:6c:38:57:24:c0:27:ad:c9:86:bd:50:f1:5a:1e:ea:
         b0:77:6c:83:f9:7d:71:f4:2f:74:b0:0e:64:49:26:57:85:63:
         0b:d8:41:40:d9:7b:b9:d4:e8:93:f5:7a:8f:29:43:61:c1:7c:
         87:4a:56:d1:00:da:ed:21:09:94:b9:b1:8f:00:3c:76:06:5d:
         47:eb:c4:a1:34:0b:29:a1:46:50:f3:73:5c:88:94:d2:cd:fc:
         37:2d:72:91:69:32:4d:2f:1a:70:d2:90:c2:d2:28:5c:be:15:
         f2:4d:14:f1:c8:dc:f4:cc:6c:3d:cb:20:12:99:83:a4:c3:3a:
         b2:79:6e:eb:f1:c3:7f:37:26:61:ac:85:fb:e1:ae:42:1c:11:
         24:be:1c:3c:11:16:35:39:26:4a:b5:57:d9:aa:5a:bb:b5:ec:
         98:c0:29:96:fb:16:ea:5d:4b:00:a5:e9:bc:b3:a5:70:e7:73:
         f7:4d:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:46 2025 by rpki-client