Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66946a08-d162-3e84-8ff7-11af545cdce1.roa
File:                     66946a08-d162-3e84-8ff7-11af545cdce1.roa (raw, json)
Hash identifier:          Qgqorw+qQIEDCroLH2LWDdCfnLpi/3wyKvKffvlYluU=
Subject key identifier:   F7:A7:2D:52:79:2F:8F:FD:84:2B:D0:63:5D:36:7C:A2:BB:7D:5B:AD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D193518C15F8D08D555980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66946a08-d162-3e84-8ff7-11af545cdce1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        96.32.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:93:51:8c:15:f8:d0:8d:55:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=2042a06e-19de-473a-afe8-535b0e7c377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:1c:dc:63:09:b8:ce:d8:44:df:1c:25:c6:
                    6a:c2:81:19:65:8e:4b:fc:98:ff:7d:f8:ea:e1:38:
                    e0:87:69:aa:4f:02:ec:0b:ae:36:08:a1:d7:ec:2f:
                    f8:8e:0c:5e:3b:47:ab:88:8e:24:2d:7e:05:c9:3f:
                    14:8b:22:a1:ac:39:d5:35:ad:cb:ef:6b:c2:78:48:
                    01:52:c7:9d:a5:ab:53:51:35:d1:fa:01:48:76:03:
                    aa:c1:1a:e8:d4:1d:26:07:b3:0e:87:ce:9a:36:cc:
                    ef:89:03:d8:29:0e:45:fb:6c:d2:a8:98:bb:8e:37:
                    0d:e1:8a:d4:26:b3:9c:20:cb:c5:ee:f5:12:b8:ea:
                    e2:39:c2:7d:57:de:e7:b2:7f:9e:28:42:ca:d4:42:
                    56:e3:58:96:51:f0:73:94:ed:14:d2:76:6c:dc:50:
                    7a:a1:ab:50:6b:96:c2:6d:ab:dc:24:e4:e2:f6:3a:
                    03:da:b4:cd:50:c6:88:cd:2c:99:71:ff:17:88:07:
                    f6:9b:1c:76:33:4c:52:30:fe:e9:57:b3:26:52:d6:
                    cb:9b:f3:18:3f:37:b4:73:f2:33:cc:29:1e:ad:05:
                    14:c1:52:b9:9e:ed:a2:12:dd:f4:8b:eb:1a:1f:ac:
                    05:4e:91:41:e1:3e:43:30:40:d8:6a:89:2b:21:db:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:2D:52:79:2F:8F:FD:84:2B:D0:63:5D:36:7C:A2:BB:7D:5B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66946a08-d162-3e84-8ff7-11af545cdce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.32.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:49:de:c1:07:66:72:dc:fd:ac:c9:39:5c:68:ff:22:d7:fb:
         86:0c:4c:41:08:0a:ed:10:41:0d:df:10:b9:ea:7d:ef:7d:b6:
         48:f1:c7:43:a4:da:21:d3:f5:9c:be:13:c6:f7:5a:ce:0a:92:
         c7:95:65:92:65:b8:27:68:ff:31:06:ba:a1:70:03:21:02:ef:
         9c:1a:5b:db:20:c2:70:d0:09:cc:56:01:63:54:4e:6d:b9:19:
         b3:a4:4b:35:15:49:29:62:0a:59:fa:df:f5:cf:fb:79:2a:4a:
         f0:ec:6f:89:8f:2d:36:2e:34:e6:47:68:ab:9f:56:a5:04:f0:
         0a:b2:a9:f4:bf:68:33:88:ae:30:8a:16:bd:27:e3:43:5f:c1:
         88:1a:95:14:a9:ac:cc:1c:55:89:be:3c:22:3f:08:bd:77:ad:
         8a:41:de:9e:4f:4e:81:f3:12:b9:9f:fe:de:1e:83:58:ac:db:
         9a:f8:6a:37:40:7f:45:7c:f6:77:08:48:23:32:af:70:23:cd:
         b1:0c:48:fe:3f:55:05:7e:b7:f3:2d:d3:f3:e2:25:7e:ad:f1:
         fb:e7:51:54:c6:80:18:15:e4:ce:94:f3:d4:a0:68:f9:f6:01:
         79:5c:98:f8:ec:26:ab:31:01:df:97:71:75:ad:f9:ee:c8:35:
         20:e1:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:33 2025 by rpki-client