Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae174d91-a690-3c51-9627-30701a3a8fae.roa
File:                     ae174d91-a690-3c51-9627-30701a3a8fae.roa (raw, json)
Hash identifier:          5N1EE8eKPdNdFumKf2Dfim3XFtGssKHJdN5+DQKr5sI=
Subject key identifier:   7A:B9:1F:DF:52:E4:3D:4C:0C:94:A3:44:28:3D:D7:68:0D:85:19:F6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D18C7FFBB9ACF2C65FA280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae174d91-a690-3c51-9627-30701a3a8fae.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        96.36.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:8c:7f:fb:b9:ac:f2:c6:5f:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=c78d2652-f2bc-4dad-a7bc-56f20b00ec70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:08:55:b9:e1:03:3f:64:dc:83:0e:e2:3d:
                    bf:43:2f:e3:01:3d:15:a2:aa:34:0a:27:14:1a:d8:
                    ad:88:2b:36:cb:c2:42:fe:a7:1f:39:24:dd:b1:97:
                    a5:06:e4:45:34:ec:c5:85:b7:61:f3:dc:d2:79:24:
                    00:a5:05:f1:fd:e0:c7:49:11:c2:e8:ef:03:93:97:
                    11:54:d0:d1:13:a2:d2:1a:f5:b2:2d:70:2e:45:e7:
                    a2:9b:04:f5:4a:52:f9:b8:f3:81:27:3f:d4:e8:01:
                    e3:08:7a:06:92:5c:66:f1:8e:29:29:77:92:c0:09:
                    88:17:20:05:9c:13:0a:a0:2d:93:e8:f1:4d:e0:29:
                    f3:7a:8a:c1:8f:ae:4b:fe:03:5f:6e:1c:ba:62:94:
                    eb:36:9a:1d:de:e2:68:ce:04:60:ea:3a:e7:93:b6:
                    75:f9:ce:1a:2b:5b:65:4e:e9:8f:d7:5e:9b:d6:8f:
                    d6:ca:b6:c7:1a:ee:a7:8f:bc:ad:aa:3e:12:b7:dc:
                    21:1d:21:d8:64:d0:ac:92:05:f0:6a:90:d9:f3:fb:
                    c1:4d:99:49:f1:09:45:06:e7:2b:97:6a:6c:78:59:
                    84:ef:86:b6:c8:f9:e8:51:17:63:89:29:52:48:38:
                    3a:1d:82:56:59:67:90:64:ab:8b:5c:4d:57:06:86:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B9:1F:DF:52:E4:3D:4C:0C:94:A3:44:28:3D:D7:68:0D:85:19:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae174d91-a690-3c51-9627-30701a3a8fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.36.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:72:f4:2b:4a:01:b2:ae:62:30:b8:b2:da:21:2f:62:58:
         be:ae:01:e3:16:df:90:43:fc:13:45:9b:30:64:3e:34:0b:b6:
         8c:bc:1c:da:82:1f:8f:1c:0b:e9:17:81:48:31:98:51:91:ef:
         57:9c:f7:f6:f9:5c:5a:11:50:2f:ab:5d:c8:55:1f:f9:ac:16:
         77:5a:13:2f:43:7d:ee:5a:d5:e6:07:60:c8:88:33:68:bd:ed:
         e2:21:e6:e9:d3:ee:59:91:96:8f:26:70:5a:83:9e:75:15:32:
         86:20:4e:41:15:61:ea:d1:b2:39:03:a1:56:05:b0:67:91:33:
         6d:a8:3d:50:1d:4f:ae:6c:35:a9:7f:e5:53:3e:14:34:6b:e1:
         45:b5:90:a1:f8:b1:ea:fc:aa:27:10:3e:7b:bf:13:dc:cb:ca:
         9a:ce:5a:98:8c:ec:20:d1:7b:a8:e7:74:e3:17:c2:63:ab:c7:
         a6:59:55:10:22:60:15:4f:f8:47:58:2e:eb:b6:d6:1f:e4:b1:
         ae:f6:29:c0:84:60:e7:99:30:1a:02:27:18:57:30:ad:be:df:
         9b:ec:b8:2b:d3:21:ad:b2:09:38:a1:1c:75:15:b4:f3:7d:a0:
         a4:53:c0:91:e8:ae:34:11:e3:33:76:b2:61:fa:f8:b2:b1:c5:
         de:49:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:13 2025 by rpki-client