Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/80306011-8628-38cb-93f9-6c87c3526bd0.roa
File:                     80306011-8628-38cb-93f9-6c87c3526bd0.roa (raw, json)
Hash identifier:          aIBn4QeFUWTVm/LsLGZ6oOJYy0javwL40C5lFsi//js=
Subject key identifier:   0E:CD:95:13:B3:A4:CE:0D:ED:BC:CE:51:40:05:CE:8E:D5:27:21:8D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F6F02A72781B9D1C6300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/80306011-8628-38cb-93f9-6c87c3526bd0.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.177.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f6:f0:2a:72:78:1b:9d:1c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=371a2a4e-ce6e-4b63-ade5-683f36adc22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:0a:80:11:f6:87:f9:5a:e1:b9:a8:2f:2a:
                    1e:cb:77:f0:9d:0f:83:bb:fd:23:f9:bb:63:ba:98:
                    3e:52:e3:bc:a5:43:2d:ae:6e:0a:f8:ac:dc:cd:80:
                    17:81:b0:3a:6e:88:6a:43:47:64:9a:d6:90:39:01:
                    4e:9b:c3:d6:da:92:86:a1:c2:13:ca:0b:a6:5b:76:
                    76:3d:56:3b:4c:ce:3f:2d:9f:9d:fb:33:0b:74:c7:
                    18:54:e0:6a:ea:e9:db:1e:1b:89:d9:f4:84:c2:0b:
                    2a:a0:44:34:0a:82:dd:40:5b:46:92:30:7f:5f:c6:
                    cb:c9:d5:47:6d:22:dc:be:12:c5:00:3a:4a:40:9d:
                    d8:d8:45:77:bc:f2:14:53:d9:5b:61:c7:5c:4e:51:
                    e7:34:69:14:a2:26:dc:b7:32:a5:8a:7e:41:e7:bd:
                    77:7e:ff:f5:88:66:bc:87:65:c4:8b:55:41:16:ac:
                    a2:b7:32:ad:62:01:84:43:e1:e8:12:b4:35:95:bd:
                    b1:fd:f8:f6:8b:63:6c:f3:29:0d:67:d7:68:ac:8c:
                    31:87:b5:8d:af:55:76:d9:79:66:75:13:2f:b2:a3:
                    ed:7a:23:03:e8:8c:36:6a:e1:6e:7d:d7:ff:db:88:
                    40:8e:c7:aa:29:31:0b:ca:1e:5d:ef:b7:28:57:90:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:95:13:B3:A4:CE:0D:ED:BC:CE:51:40:05:CE:8E:D5:27:21:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/80306011-8628-38cb-93f9-6c87c3526bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:73:89:d4:ff:a7:82:a9:a7:ef:94:eb:bc:7e:04:76:8e:e8:
         6f:f5:40:0a:90:a3:ee:7e:06:fc:d7:57:c5:4c:3d:ca:cf:d0:
         e1:25:be:3c:16:8d:8a:ed:0e:98:43:a2:31:20:77:59:48:e7:
         ed:35:50:36:c3:c2:f6:9e:73:ee:21:c1:e1:30:85:28:f1:64:
         cf:a2:3d:93:f7:8b:9d:c5:f0:37:ee:8a:76:6d:e6:94:ac:0b:
         cc:e2:79:0c:a3:cb:fa:9a:83:b6:e6:b8:0d:56:3b:3c:25:ec:
         b3:61:d0:56:27:75:78:c5:fc:a8:6f:74:79:7b:ca:90:7d:d4:
         8a:f6:52:61:48:dc:84:66:14:4a:ba:23:75:a8:e3:10:91:82:
         b0:47:f5:f8:4d:8f:48:41:15:d4:c7:d2:ca:85:5d:87:6c:9e:
         b6:6a:be:42:db:77:00:31:09:8b:ed:9f:95:ae:03:46:11:c8:
         a0:ce:6c:67:ec:3d:08:83:37:f7:72:f4:29:8b:b3:71:46:22:
         83:bd:13:5f:d5:94:e0:14:70:09:41:53:d7:a7:7a:a1:3f:5e:
         99:e9:45:04:ba:1e:77:ce:4c:f4:25:02:d0:7f:2d:8d:fa:f1:
         35:a6:2e:f9:e2:7e:9e:89:54:89:d7:31:a4:26:f0:6f:1b:e8:
         81:9e:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:26 2025 by rpki-client