Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ddac7c5b-fb61-3805-8600-3e41f13f262b.roa
File:                     ddac7c5b-fb61-3805-8600-3e41f13f262b.roa (raw, json)
Hash identifier:          9/ThPie+0zthDwsmy1vEurDIXZ7L17GdVPy4+wC+S8o=
Subject key identifier:   4D:E2:4A:11:88:D8:6C:C0:1F:25:AE:82:CB:24:59:B7:96:83:CD:00
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0F8180BA9BBFB4AA1480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ddac7c5b-fb61-3805-8600-3e41f13f262b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.241.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:0f:81:80:ba:9b:bf:b4:aa:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7e766480-f579-491f-94ff-59c58339f55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:f8:ac:b4:c8:6c:62:70:f5:90:b9:2d:2d:
                    32:05:74:16:d8:42:ca:87:3e:16:a2:4a:c6:a8:83:
                    82:bf:5a:d6:54:c4:61:47:fb:0e:ca:1e:2d:36:b0:
                    09:50:9c:e2:57:a1:df:52:68:b7:d2:c9:3a:63:c3:
                    4a:50:34:62:a2:01:2a:8e:08:e9:92:ea:ae:1d:dd:
                    7f:5d:c7:2f:f8:e0:b0:f0:5d:2a:5d:12:37:29:07:
                    54:e9:81:0a:8d:c9:1e:83:9f:ef:33:2f:d9:5b:4f:
                    e8:88:34:38:b0:6a:40:2f:e5:9e:cf:0c:c3:4b:60:
                    33:2c:42:ba:61:6f:2d:fe:49:e6:b9:72:8f:2d:d2:
                    69:e5:16:aa:7c:2f:81:9f:60:ca:6e:e8:6f:a8:6b:
                    a6:79:e7:24:5f:86:d2:a0:9d:c3:d5:82:63:ff:90:
                    df:88:82:0f:ae:28:5f:9b:7c:49:79:29:f7:ef:16:
                    30:b8:4b:bb:d9:47:cf:e6:cb:b2:89:e5:92:9c:6f:
                    26:0c:0b:17:95:ea:9a:68:d5:31:08:d1:9a:bd:70:
                    b5:77:76:c1:b5:96:88:a8:96:e1:8f:33:ff:ae:cf:
                    48:7f:47:8b:0e:ed:ff:43:03:d0:50:21:2b:53:4b:
                    3c:79:4c:53:a4:12:73:cd:4d:5a:55:1f:69:99:22:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:4A:11:88:D8:6C:C0:1F:25:AE:82:CB:24:59:B7:96:83:CD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ddac7c5b-fb61-3805-8600-3e41f13f262b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.241.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:57:89:4e:e6:07:f1:aa:e3:a3:6d:63:ea:ab:45:09:ea:64:
         ce:2d:63:7a:6a:4d:f3:57:9e:33:e2:e0:c9:8a:98:20:6a:d0:
         b3:7e:38:e3:36:a4:dc:46:ec:25:d3:7f:75:cb:32:81:92:6d:
         a1:37:08:db:07:8e:ca:71:1b:ad:24:96:ca:af:c9:f7:8d:a4:
         4a:52:8d:ba:3c:04:af:20:ff:84:03:1a:98:05:96:61:e6:d1:
         92:9f:30:00:0a:5c:d3:aa:aa:51:51:f4:2e:2a:38:46:ab:22:
         c8:f1:73:b4:5c:57:4f:9f:de:f3:f5:ea:81:89:fd:9a:95:c9:
         48:02:58:48:fc:b4:08:c6:bc:86:3c:2a:d8:55:e5:1d:15:5c:
         ab:77:85:c5:d8:72:f7:31:60:fa:93:a6:ba:d9:51:c5:c0:79:
         9b:25:8a:9f:4b:0e:2e:47:94:34:17:06:ad:a1:1f:95:5e:9c:
         80:a7:a0:10:52:b6:d6:92:1b:c0:84:f1:56:7e:5f:42:3d:eb:
         37:c1:ee:97:3e:13:df:48:ed:10:a6:d5:69:43:ec:88:26:e5:
         82:b6:52:34:af:88:9d:2f:9b:8e:b5:19:7f:93:99:14:3c:df:
         ce:e1:47:45:74:3d:6a:ca:6a:c2:d1:cb:05:dd:d7:92:03:1e:
         b7:8b:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:23:53 2025 by rpki-client