Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/def9d64d-b4b6-3f62-8af5-fe400803baa6.roa
File:                     def9d64d-b4b6-3f62-8af5-fe400803baa6.roa (raw, json)
Hash identifier:          t2XpYtuHaiOJXp4KJ/mOWUYk5VaqqgH1XMFqqY3FV/M=
Subject key identifier:   24:D7:7E:12:22:96:CB:92:F2:08:5E:94:BE:8A:1F:4F:CD:7B:6A:B1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B094C112CA6BC1D5B2EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/def9d64d-b4b6-3f62-8af5-fe400803baa6.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        128.92.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:09:4c:11:2c:a6:bc:1d:5b:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3f101f72-e672-46ec-a078-1ce1e383af27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:f0:55:e8:25:24:6a:db:58:03:c5:d2:2e:
                    cf:07:68:91:bb:1f:2e:33:54:3e:f0:ee:91:31:10:
                    1e:cf:a9:74:f8:2e:0b:cc:fc:21:0d:6e:20:db:7f:
                    99:9a:a8:dd:c7:af:90:fa:b1:e8:a8:18:af:19:28:
                    91:4c:14:29:b3:f2:22:d0:2f:07:83:3d:d2:5d:f5:
                    c5:f7:d0:8a:69:1f:1e:6a:f1:df:d3:72:53:74:08:
                    d2:25:bd:4c:e7:6a:f1:51:a5:85:be:35:59:75:0c:
                    9d:09:ab:26:40:42:15:12:f8:e1:e9:95:eb:7d:2c:
                    d8:08:4c:7e:99:bf:01:c6:4f:9a:f2:97:10:43:06:
                    ad:89:06:0f:94:c8:1e:e9:91:d7:6e:64:a0:2c:2e:
                    ab:94:c1:1c:69:bb:b0:70:39:5c:bf:90:7b:60:27:
                    df:37:71:ac:3b:33:7c:de:61:94:f5:11:ed:0e:b8:
                    1e:0d:a3:1d:10:ca:9e:82:96:5f:89:37:ae:f3:32:
                    e7:41:b0:7e:3e:2f:a4:65:bc:f7:fe:ca:69:d2:ac:
                    4e:c3:41:11:83:fc:99:c6:33:da:bf:1d:25:d0:45:
                    23:50:e8:a1:22:2b:24:4e:95:80:5d:30:70:be:69:
                    54:99:71:5c:e8:4a:90:7a:f6:ca:64:d7:a5:27:69:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:7E:12:22:96:CB:92:F2:08:5E:94:BE:8A:1F:4F:CD:7B:6A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/def9d64d-b4b6-3f62-8af5-fe400803baa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:59:7c:bb:5f:72:46:f3:1f:69:45:bf:6f:d6:b4:cc:3a:
         62:f2:3a:e2:99:dc:49:98:24:bc:5c:95:4d:39:b1:fb:65:a9:
         ae:e2:3a:da:ba:89:89:3b:66:b6:7a:a1:82:46:6d:78:f1:42:
         50:10:12:44:43:3a:b1:3a:1f:b3:d8:b1:c1:d7:d2:1e:a3:f1:
         39:1b:df:e6:ac:30:84:3a:d0:0d:0b:ed:c2:11:14:d2:95:95:
         61:0f:47:5a:99:8b:db:e6:01:09:72:b2:e9:d8:b3:15:be:b1:
         51:4c:f5:3b:af:3c:cc:01:5b:5d:65:a8:1c:bd:a8:eb:3a:f3:
         50:85:ee:39:57:c1:f9:42:04:f1:0c:67:c5:9e:56:26:71:60:
         67:af:12:7a:b0:1e:33:c2:84:4b:5a:32:96:f3:71:0c:7f:75:
         3a:f8:9a:be:c3:fa:eb:eb:e1:43:95:31:d0:5c:24:9a:7d:65:
         ae:b7:79:b6:cf:93:0b:3c:f4:c1:c9:4d:51:76:17:6d:6b:ee:
         90:f5:25:a7:2c:80:bc:6d:d2:de:1a:b8:37:78:c6:52:b0:02:
         28:c1:7d:58:3c:69:89:79:6a:5e:bb:9a:b3:1d:67:2e:36:17:
         f9:ae:8e:fb:b7:2a:f2:b6:cd:da:2f:68:79:eb:7e:b4:ed:c3:
         1a:fe:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:29:41 2025 by rpki-client