Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dacc4102-36c3-3c3c-b0b5-ba16cab21754.roa
File:                     dacc4102-36c3-3c3c-b0b5-ba16cab21754.roa (raw, json)
Hash identifier:          3X8iAcPi3vPVmT4I5z+U4jssQPoiqGTRVP4xnsaFaDQ=
Subject key identifier:   4D:B9:43:F8:6A:10:AC:83:0C:4E:FF:75:FC:2E:E2:5E:36:59:2B:24
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1725A20B6FD26BE61ED80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dacc4102-36c3-3c3c-b0b5-ba16cab21754.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.178.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:72:5a:20:b6:fd:26:be:61:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=67de1fcb-8a3f-455b-86fc-bb538dcc7cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:91:c4:cc:a2:f8:e4:41:8b:c5:fb:c0:ae:
                    84:5c:43:0d:36:03:48:0d:03:5d:28:13:c0:6f:a0:
                    7a:66:eb:c8:ce:a0:41:dd:c7:01:a1:bb:80:49:68:
                    6e:84:a7:72:d2:13:83:ce:a4:81:d5:58:8c:73:b0:
                    2f:37:c3:4c:42:25:66:bc:65:af:6e:d7:ec:4d:5c:
                    35:c6:32:a0:21:68:e5:71:84:4e:6c:00:22:18:0f:
                    5a:59:8a:70:e6:3f:c6:e7:74:f9:0b:30:51:6b:28:
                    27:3b:71:ee:81:41:82:27:76:c8:6c:c1:93:78:69:
                    00:17:f4:f2:31:7c:84:87:01:2f:06:83:d8:fd:4b:
                    0f:9d:d3:4c:8c:cb:55:34:fc:b2:d7:4f:39:ba:42:
                    21:5f:01:89:3f:76:78:f1:bc:a9:d4:2f:58:58:c7:
                    f9:32:35:ae:7b:ef:4b:b7:17:c2:c4:cf:1f:6c:39:
                    85:7a:a1:be:f0:a9:cb:aa:95:56:e5:56:f5:aa:8d:
                    2b:15:ae:c2:e5:e0:1f:91:a3:2f:3b:a2:2c:25:57:
                    05:21:0d:6f:56:ce:8a:20:f7:c5:27:7a:45:62:dd:
                    f8:2c:eb:17:65:7e:76:0d:86:50:1d:33:f7:5f:0f:
                    19:9b:9d:60:d6:2d:df:55:e8:8d:bb:a7:2e:9a:12:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:43:F8:6A:10:AC:83:0C:4E:FF:75:FC:2E:E2:5E:36:59:2B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dacc4102-36c3-3c3c-b0b5-ba16cab21754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.178.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:31:a0:43:22:7b:82:53:2f:99:55:6a:2b:98:7e:97:3b:1a:
         50:d1:4f:99:b5:82:f1:d6:1b:59:3c:9f:f9:97:71:30:65:ce:
         03:1a:b8:24:dc:23:03:c0:08:4e:e1:ae:e1:89:e3:82:bb:96:
         b4:be:05:71:bd:69:b1:44:a2:b1:cd:a8:44:e2:0c:f6:e5:b2:
         cc:f7:41:93:42:39:ba:e1:e4:9f:8d:e9:76:48:0b:b4:4e:21:
         9e:67:a3:30:48:1e:f7:38:6d:b0:07:d9:15:6a:5c:bf:dd:60:
         b4:fe:42:e2:be:24:d0:31:14:51:e7:b5:5c:4e:87:19:41:ec:
         73:d8:d3:a7:a4:7c:96:c9:cd:4f:1c:c4:8a:b2:3f:9a:0a:0f:
         21:21:0a:8b:d3:8d:47:7e:77:6c:d6:60:8e:52:5c:8f:67:97:
         cf:3f:8e:17:84:39:6d:9a:9b:43:62:9f:78:73:df:87:b9:74:
         21:21:37:df:d3:3b:1f:9b:59:5b:b2:da:c5:b7:75:4d:22:33:
         f5:66:49:dc:95:36:d3:a4:08:04:93:7c:a9:b1:c9:8a:6d:e1:
         a9:3e:a8:79:78:af:21:cd:db:19:32:6d:34:83:8c:16:e2:cb:
         09:3e:93:de:c3:f1:e8:98:ff:79:18:26:85:b5:78:9c:86:ff:
         44:ce:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:23:09 2025 by rpki-client