Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8acdc9e0-4462-3d40-ae1c-0b6385c579b7.roa
File:                     8acdc9e0-4462-3d40-ae1c-0b6385c579b7.roa (raw, json)
Hash identifier:          GR2s5KXGB7uIEojt8Enc9ODaFhyp5uOF3k867t1bxwg=
Subject key identifier:   28:87:8F:14:D8:C5:5A:FE:48:F6:5E:E2:03:BC:67:91:C4:A9:EE:CD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F6E43F7F5A3B0239AA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8acdc9e0-4462-3d40-ae1c-0b6385c579b7.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.177.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f6:e4:3f:7f:5a:3b:02:39:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=41a8cd30-6e3c-4397-a125-031375b5ed06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:df:77:0a:1d:c0:1c:a3:cf:86:39:2a:db:
                    54:cc:22:38:ce:43:1e:36:44:ad:62:c4:65:0a:7b:
                    47:2f:de:a5:e8:6a:80:5d:c6:13:28:2c:82:6c:42:
                    2c:7d:b5:14:c0:8f:95:41:8c:21:85:e3:7c:93:f0:
                    e9:76:0e:d4:c8:0d:6c:41:37:34:3b:0c:cb:39:1b:
                    03:32:dc:ef:b6:16:c2:e4:05:eb:2c:a5:05:8f:c9:
                    00:01:53:8d:ca:7c:ad:b2:22:45:9f:91:3d:47:e8:
                    40:62:d2:05:ee:fc:59:d3:56:3a:78:7b:a7:d6:6b:
                    42:b5:50:1d:cb:16:d6:75:e2:56:ac:e7:e2:b8:d0:
                    95:22:af:c7:a5:87:96:25:7a:89:23:6e:b0:2f:45:
                    94:f1:69:a6:79:95:03:54:8b:f9:05:c9:c9:5a:1c:
                    e3:88:8b:cd:48:04:6b:15:5e:03:29:a7:4c:29:6f:
                    3e:3b:3c:47:49:1d:32:79:9f:ab:68:6f:d6:d1:05:
                    8d:09:c7:1c:4e:ce:28:fb:8c:80:8f:59:af:97:26:
                    2f:f3:49:a7:65:52:57:63:e3:46:42:df:00:38:e7:
                    01:b8:b4:a0:69:2f:15:ff:51:0e:ce:69:aa:0f:b9:
                    eb:76:7d:54:1c:21:0c:9b:fb:d6:72:5a:ac:b4:20:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:87:8F:14:D8:C5:5A:FE:48:F6:5E:E2:03:BC:67:91:C4:A9:EE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8acdc9e0-4462-3d40-ae1c-0b6385c579b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.177.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:dc:d3:f6:f6:87:9d:2d:90:e7:90:9d:9a:ae:47:ae:66:01:
         03:0a:36:c3:a4:c9:12:5d:61:bb:11:02:80:74:8e:ea:2b:6a:
         b3:e3:a9:4d:cf:1e:59:2b:42:43:1b:fb:24:2f:b6:52:64:a1:
         7b:85:3e:0b:67:a7:f1:18:18:a7:91:92:64:d6:af:81:87:27:
         f7:2f:46:ac:c6:9e:96:29:5c:d0:a3:7e:fb:18:8c:df:0d:19:
         17:b5:d9:05:04:1d:42:ef:1b:4a:3c:6b:0b:f3:53:bf:46:bf:
         9c:29:f0:46:9f:86:51:bc:58:8b:d8:52:bd:2a:bd:c8:3f:75:
         5e:1e:e7:01:e5:78:08:3e:2c:e7:94:1f:ce:4f:7b:0a:0c:9a:
         b7:c0:28:59:2c:dd:3c:c6:e2:d7:b3:55:3c:e7:da:a3:25:3d:
         e1:71:05:b4:cb:5b:b6:62:37:1e:98:d8:be:ea:36:91:3a:fc:
         54:74:1f:1c:32:f3:9a:92:b0:e3:b0:22:1e:11:05:9f:87:f5:
         d3:65:e7:28:a6:e2:bc:3d:5a:fb:d4:38:e3:6c:cf:3c:df:d2:
         46:fb:f1:59:a8:61:f7:4e:50:b6:50:6c:07:97:bc:5a:3b:c1:
         6b:fd:22:fa:85:a8:8c:c0:82:01:26:91:ba:cb:4e:ed:80:33:
         1c:02:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:13:10 2025 by rpki-client