Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbb592eb-2844-3559-9eb7-fb8950409c7c.roa
File:                     bbb592eb-2844-3559-9eb7-fb8950409c7c.roa (raw, json)
Hash identifier:          9kwlR6xmOwYAWfDNu8ZNA+L1G22O+/KujgycSjlM45M=
Subject key identifier:   72:B9:8E:5E:20:EB:F9:3F:DC:90:D4:97:11:35:0F:E5:08:B9:3C:C3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A84DB7680C78D0576DA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbb592eb-2844-3559-9eb7-fb8950409c7c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.176.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:84:db:76:80:c7:8d:05:76:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5accf286-b7ff-45fc-b11c-64ad104cfd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:d7:59:e5:96:61:88:46:47:d0:6c:1f:b0:
                    fc:48:08:68:bc:1a:9b:20:ab:d6:ec:17:67:66:15:
                    46:59:5e:f4:85:8c:c9:1f:e1:71:79:50:5f:36:47:
                    83:fa:b0:23:24:3b:a9:2c:ca:bd:4d:58:37:6d:42:
                    7d:13:c3:d6:90:21:55:55:29:7d:57:c7:a7:87:7c:
                    8a:a4:59:6c:7f:e7:6d:a3:e9:f6:d2:7d:8a:f2:a8:
                    99:7a:a3:8e:1e:e6:bc:a3:7c:04:41:ed:c2:7b:a0:
                    b7:c8:39:ae:a7:ac:76:7a:73:f1:c6:61:60:4f:7f:
                    67:e4:5e:f4:68:ab:3e:cd:80:62:e4:0c:8a:c8:eb:
                    03:67:6b:3a:77:7c:74:58:7b:f3:21:26:b5:ba:96:
                    3d:09:9e:11:9f:23:8d:dd:1e:f3:96:8e:a8:9a:07:
                    d3:72:f2:0e:91:d5:d7:87:30:d4:5a:62:7e:00:4f:
                    e7:35:75:99:51:f0:28:e0:31:8b:14:95:32:37:cd:
                    f4:6f:2a:db:ff:7d:bd:15:0e:21:88:ac:4c:b8:55:
                    21:80:f3:f1:42:e0:ba:42:73:07:df:96:f8:b6:c5:
                    b5:7a:df:1e:f2:46:7d:c1:c7:b5:84:5d:4f:91:92:
                    90:7d:21:ec:8d:05:96:24:71:43:2b:37:6e:f2:68:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:8E:5E:20:EB:F9:3F:DC:90:D4:97:11:35:0F:E5:08:B9:3C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bbb592eb-2844-3559-9eb7-fb8950409c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.176.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:58:63:d0:14:b6:54:2f:61:c4:88:26:01:c0:74:a9:0f:35:
         76:97:5c:a4:69:be:37:9c:41:f5:d6:d7:2c:2c:5b:c5:71:f6:
         42:5a:2f:8a:cc:ea:6d:39:07:80:7b:5e:65:64:58:6f:d7:f7:
         e7:cf:be:48:b1:2d:9a:32:b4:e7:c2:0c:cc:34:8a:15:f3:51:
         69:a7:7b:e1:6e:9e:80:a1:d8:ec:c0:08:ea:13:26:6f:38:f1:
         83:50:37:af:c8:e1:f3:96:6d:25:93:59:3b:80:fb:ea:5a:40:
         65:8f:e2:16:8a:63:9a:e0:ce:24:51:3c:a3:bf:76:96:b3:d5:
         25:ba:8e:3b:b9:83:b5:e7:3a:09:d7:c0:f7:61:8d:b9:e3:56:
         bb:5a:2c:7e:df:f1:88:ee:78:a5:dc:25:49:d7:a2:16:6d:ef:
         10:2e:b2:8a:af:a5:28:1e:46:61:ab:6e:6c:5d:ad:4b:ec:2c:
         53:db:bd:2b:50:bd:d1:6b:69:a4:df:b2:9f:f9:06:83:df:06:
         44:b9:28:ae:7b:39:ea:88:49:32:af:0e:14:3e:4e:68:f4:10:
         9f:1e:16:b2:9d:a7:99:7b:17:05:a8:32:e4:04:bb:c4:47:f2:
         22:7d:5c:e6:96:c3:43:35:d6:8a:4a:0b:9b:ca:f4:aa:67:15:
         2c:34:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:44 2025 by rpki-client