Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b6e3add0-4fd0-31cb-961f-f2a78275ba1b.roa
File:                     b6e3add0-4fd0-31cb-961f-f2a78275ba1b.roa (raw, json)
Hash identifier:          VgJWJU7BeFZTy0t+xOdqTe/jcftp9r6BeuHZ6FfgJs0=
Subject key identifier:   E8:F3:BE:B3:09:D2:8F:EF:D2:A4:3C:45:53:A9:90:48:F9:83:46:17
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B417974C5440883571B40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b6e3add0-4fd0-31cb-961f-f2a78275ba1b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33588
IP address blocks:        150.181.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:41:79:74:c5:44:08:83:57:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1783aa91-7f5e-4479-ab7f-fddd1e3cfc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:ab:c6:0f:4c:54:83:b1:e2:0c:15:1a:dc:
                    cf:0f:a9:2d:7c:43:9e:51:33:2d:c1:1e:12:05:2d:
                    90:65:13:52:10:00:c9:9a:0a:db:68:cb:a9:4a:56:
                    29:81:e1:ec:b9:2f:15:e1:a2:98:17:87:50:7b:ed:
                    a6:38:ab:bd:bc:ca:2b:77:c6:47:62:12:75:df:c5:
                    aa:41:31:e4:cf:2e:44:8b:f3:85:fc:17:86:74:c9:
                    29:4b:21:87:be:fb:e4:8d:d4:0d:72:f2:c0:f6:2f:
                    75:7c:3b:15:3c:e3:16:3e:ae:2e:3c:2a:72:73:26:
                    0a:6c:8d:67:db:ec:b7:2e:62:25:a6:78:20:c9:ae:
                    dc:56:8b:67:ac:14:57:22:f6:99:4b:58:5f:36:68:
                    93:2a:80:8c:f0:c5:b1:45:0c:67:82:55:51:45:45:
                    e5:5a:87:44:c5:d2:36:0f:ad:c2:fd:1d:1f:08:9f:
                    c2:54:5e:51:f1:bb:67:c0:b3:b4:53:72:45:bc:27:
                    0f:09:8c:9e:a7:1c:be:e5:84:01:ab:bf:fb:c2:13:
                    49:20:49:53:a4:e8:22:85:07:35:26:d9:5a:59:da:
                    cf:21:77:68:2e:17:81:d7:c9:fd:b4:a7:2c:ca:63:
                    79:7b:23:8f:d6:13:3f:56:fa:b8:fc:2e:65:eb:54:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:BE:B3:09:D2:8F:EF:D2:A4:3C:45:53:A9:90:48:F9:83:46:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b6e3add0-4fd0-31cb-961f-f2a78275ba1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.181.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:39:36:cb:c9:7c:6b:65:de:62:5e:71:63:33:e0:54:51:fe:
         67:9e:f0:fe:d5:14:d5:f1:ab:d9:9b:e2:f2:15:4c:4d:00:62:
         77:c6:c7:28:ce:a2:ed:1a:e9:53:b2:de:cf:9e:b2:e6:13:9e:
         90:04:eb:12:2f:ba:69:29:c6:cd:07:02:1f:9c:26:b0:d4:db:
         b4:ca:d3:c8:e3:fe:3d:9e:78:58:97:5e:4b:e8:4f:1b:26:88:
         8c:f9:88:e9:e0:75:d3:97:c4:31:3c:c6:0c:16:75:7a:25:23:
         67:74:c4:8d:ba:50:25:4a:c0:9f:c0:ae:fa:63:59:35:5b:64:
         eb:4c:cc:09:53:64:fd:e8:90:48:ca:c4:93:ea:17:bc:fd:16:
         29:7c:5c:ed:4a:c3:6c:69:52:2c:87:c9:6a:45:95:84:4c:f0:
         0c:02:11:0a:35:24:cf:61:ff:7c:c3:6b:e6:b0:86:7c:25:e2:
         38:d4:56:6e:c3:ee:1c:fc:09:40:d9:fd:db:7f:7a:ad:1a:cb:
         60:1e:b7:5f:f2:b6:36:af:1d:eb:38:17:af:22:f2:d8:61:e8:
         9f:78:f8:ea:7e:07:c5:b6:3e:81:8e:51:00:d1:2c:ef:bd:01:
         70:8b:93:a4:09:a4:05:86:96:49:0d:c3:36:2c:85:b5:e2:ad:
         98:35:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:59:46 2025 by rpki-client