Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
File:                     17b8cc27-ee15-3d35-a022-3b562756648a.roa (raw, json)
Hash identifier:          ahmlPM9IAjD+uOZNapfqRlNqAnSGawEoppVnDLZRaRA=
Subject key identifier:   C4:7D:4B:FB:32:47:4C:74:C9:70:12:FE:42:BD:2B:65:74:C3:65:57
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1EA0D7797BD87F9EBD800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        104.159.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ea:0d:77:97:bd:87:f9:eb:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7e5aa8b4-f11d-45a6-ad97-7e16504f8bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:1e:fc:52:e6:24:83:a2:60:ee:e6:8c:1f:
                    13:68:bb:eb:1d:c0:17:47:bc:a3:83:12:fd:94:a1:
                    55:5a:62:34:25:22:2c:7b:a3:00:88:e9:56:7b:c5:
                    c2:ba:c8:be:c9:63:9a:e7:be:ab:a6:e4:04:95:2d:
                    fd:ca:98:55:48:70:2a:b7:81:45:bd:ce:a2:28:ad:
                    1d:5b:29:54:6e:31:a9:ec:18:c0:b7:b8:3d:5d:52:
                    19:3b:d8:e1:2a:eb:26:dd:ff:54:3f:39:1d:e0:12:
                    41:db:42:eb:9e:1d:3b:75:a5:12:94:80:d6:0f:00:
                    55:f5:54:b0:35:da:5d:ae:d9:fd:07:70:60:63:a4:
                    c7:d4:8b:f7:d5:e7:24:53:d1:e3:6a:3b:ae:2a:e9:
                    d2:80:d0:fc:f6:0d:b5:9c:d0:6e:75:fe:92:5a:2a:
                    15:a2:4f:22:26:94:59:bf:21:90:be:53:ab:30:ae:
                    b9:91:80:ab:d1:5e:40:3f:b5:63:b7:d4:64:99:9a:
                    cd:54:11:49:1f:05:6b:a6:01:ca:fd:7e:69:c6:fa:
                    56:08:4c:93:c5:0f:13:2c:23:fc:0a:f3:70:14:f0:
                    77:2d:9b:28:77:57:2c:4d:73:f1:22:97:48:01:da:
                    b5:f8:0e:2f:53:01:eb:ea:a8:f7:19:7a:d4:9b:9d:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:4B:FB:32:47:4C:74:C9:70:12:FE:42:BD:2B:65:74:C3:65:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/17b8cc27-ee15-3d35-a022-3b562756648a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.159.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:96:21:57:64:cd:72:95:43:e3:3f:32:8a:fa:1d:21:67:
         d5:63:d7:b9:1b:bb:93:62:99:d8:1e:a0:34:45:30:c9:a5:46:
         43:14:b0:be:b3:33:59:d7:21:b9:42:0b:cd:82:bc:9e:12:4e:
         7c:5a:d9:da:8c:bf:fb:ad:82:f0:a3:8b:f6:9d:bc:4c:e1:a9:
         07:bc:96:1b:a0:22:f8:d8:a3:1f:0e:69:c7:ec:ad:6a:13:19:
         af:9e:a2:04:2f:c6:a6:aa:78:bc:e8:4f:0b:26:2a:cb:b3:93:
         b5:64:7e:c9:4c:e4:32:17:aa:d2:65:86:e2:77:bc:41:7f:59:
         48:0e:ed:34:77:09:64:28:a1:4a:aa:8a:b0:51:19:77:a7:c9:
         dc:cb:2b:f1:a6:8c:e4:44:43:70:d4:fd:20:09:24:92:76:c6:
         e7:71:ca:4a:5a:2f:b8:ed:9a:db:46:7f:40:1e:ba:64:1e:4f:
         a9:43:e0:ba:7d:1d:e9:8e:e0:96:5f:4c:83:ca:f4:8d:3c:80:
         4f:67:7c:0c:a8:59:05:26:cd:e2:89:a3:3d:70:51:e9:20:01:
         22:2f:7e:ef:74:d4:b6:93:82:3d:28:92:0d:c1:d9:d9:53:eb:
         d7:b6:8c:f5:30:9c:da:1e:7d:e7:8b:3b:f7:8f:d9:79:bc:02:
         6b:35:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:39 2025 by rpki-client