Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad5ff852-d908-31cb-8365-106f479591fc.roa
File:                     ad5ff852-d908-31cb-8365-106f479591fc.roa (raw, json)
Hash identifier:          7VLPdZ7kitQqwmEOVvG0m8fdz56n/cas1OeDjB5quWg=
Subject key identifier:   15:A9:0E:76:5A:17:F7:AF:97:F0:46:3C:E2:78:3C:81:C9:A5:BD:3E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AFE4447E39A19A1431500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad5ff852-d908-31cb-8365-106f479591fc.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.216.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:fe:44:47:e3:9a:19:a1:43:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=35c49734-fb56-4f97-b9a6-6857d8edce97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a4:5a:95:d5:db:78:4d:d7:2c:14:9d:09:e5:
                    bc:16:bf:84:d2:da:0a:d8:44:ba:dd:ec:7c:65:d0:
                    a8:d7:ec:31:f6:8c:c6:80:5a:9a:53:66:13:da:9c:
                    11:45:fa:b4:93:6d:67:70:84:19:62:0a:5d:91:ec:
                    71:f6:bc:f7:49:3e:7b:43:5d:83:20:5b:f2:f1:01:
                    94:41:5e:00:25:fb:48:7f:91:81:6e:0a:28:f7:52:
                    df:cf:fb:ee:9a:71:4f:f7:34:c9:c3:5d:fa:02:99:
                    23:e6:2b:14:1e:1b:02:9f:59:66:1e:87:c9:34:4f:
                    37:79:ff:24:76:c6:88:74:da:08:ad:a0:d4:96:a0:
                    05:4f:1e:b3:30:3b:19:fa:2e:e9:6a:53:bf:9c:14:
                    a3:3e:f7:f3:fa:80:41:c9:5f:bf:da:0f:ab:fa:d3:
                    1f:16:5e:cf:d6:3d:60:11:44:a1:a4:12:f2:d3:e1:
                    c2:49:27:d3:af:d1:d3:8d:21:06:7b:63:98:58:47:
                    44:73:41:3b:a5:7b:f7:b8:da:c0:2a:eb:84:ba:f0:
                    11:e5:a5:1c:c5:64:47:da:4e:ad:32:3b:98:43:ae:
                    73:5e:05:1e:3f:2f:76:4a:6a:b8:d8:43:49:43:06:
                    b6:72:ab:86:c6:3e:e8:b9:5d:03:4b:d3:f3:2f:9c:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:0E:76:5A:17:F7:AF:97:F0:46:3C:E2:78:3C:81:C9:A5:BD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad5ff852-d908-31cb-8365-106f479591fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:20:6c:82:28:83:f1:14:56:01:01:9e:d6:2c:52:fe:50:
         ba:2a:30:32:b4:16:4a:be:86:3d:15:2e:b5:05:b4:ef:a5:dc:
         8b:59:e2:99:0d:9f:2b:ec:0b:80:ac:9b:3f:70:cd:ea:d0:fd:
         5a:d6:f5:75:4a:c0:7e:12:45:ff:0d:ed:e9:79:01:0d:b9:d2:
         5e:5b:05:84:5f:38:21:bc:3b:d0:7a:98:de:38:e3:ee:b1:de:
         85:fc:fc:99:4a:e7:38:b4:67:8b:50:6a:5f:e2:9c:fa:b3:42:
         69:07:99:bb:3d:54:c1:15:59:2b:d3:d9:da:0d:45:39:0f:86:
         9a:8e:cc:aa:87:c5:24:b9:b4:48:5f:a6:f8:73:3f:8c:e5:eb:
         38:eb:af:d9:9e:2c:e5:a2:3f:a1:06:28:11:a8:24:5c:03:76:
         e2:9a:03:87:db:ef:16:ae:be:b2:03:0f:c8:c7:ef:36:db:6b:
         6d:43:fb:99:bb:eb:fa:f4:f5:7e:79:34:6f:79:6e:91:41:e2:
         f9:01:6f:e1:70:9c:fc:55:f8:f7:35:0c:de:6f:d0:63:71:11:
         4e:a8:1f:31:7d:d5:84:5a:23:3e:cb:22:8b:44:1b:0e:2b:d5:
         31:04:75:69:04:35:a4:7a:e0:8e:ca:95:53:71:2d:70:07:05:
         87:a4:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:50:33 2025 by rpki-client