Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91492bc0-d54a-3077-bdc5-dfef39d2bcdc.roa
File:                     91492bc0-d54a-3077-bdc5-dfef39d2bcdc.roa (raw, json)
Hash identifier:          060Jcst8GwkjfupKyAzslvZVUcSvxB6xCY5vrdxRlIE=
Subject key identifier:   CB:67:F8:C2:6E:93:1B:36:37:47:1D:8C:B2:AC:3B:5D:61:22:CC:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FBB47E1F628DE34E1E480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91492bc0-d54a-3077-bdc5-dfef39d2bcdc.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        24.20.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:bb:47:e1:f6:28:de:34:e1:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=8f4d6e30-c957-4304-ae4b-4ea0f029eb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:1c:4e:3d:ba:4d:68:a7:5e:cd:80:8a:c1:
                    fd:bf:7f:e0:fb:d9:a2:09:cb:f6:3c:66:46:d8:91:
                    88:01:ee:fb:53:3d:5f:46:5e:58:31:3e:07:fb:5f:
                    0a:31:15:e4:17:bf:e5:84:5f:6e:16:d8:b4:c7:d1:
                    d3:6e:12:e3:66:50:c7:ef:a8:b4:4e:6a:5e:79:21:
                    d8:f4:29:63:af:12:55:3c:b4:c1:e3:ae:01:0c:ac:
                    2e:d3:7c:83:70:58:08:06:29:67:02:d4:0f:36:f2:
                    84:4c:0c:22:a2:8f:e4:60:35:86:0a:a4:9d:01:d6:
                    42:a2:cc:ae:8c:45:26:e1:35:7f:35:fc:2d:29:ac:
                    d2:e8:d8:2f:e3:1d:6b:4b:c3:14:ca:c4:9d:21:e0:
                    1c:ec:9c:13:25:ca:04:e1:0e:34:82:b4:c8:e5:8d:
                    c5:81:e4:de:e0:29:3c:da:7d:5c:30:80:43:10:53:
                    da:23:70:30:3f:9a:59:c9:04:82:aa:9f:ca:f2:8b:
                    35:41:2c:75:4e:9b:60:62:b2:83:ad:dd:a6:58:e7:
                    46:fe:26:e1:b1:b4:e3:64:e0:7c:6d:e9:fd:c6:80:
                    c6:47:88:d8:e7:0c:80:69:a4:4a:e9:ff:bf:54:40:
                    78:14:da:9a:ec:35:92:cd:19:27:ae:bf:d9:6e:4a:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:67:F8:C2:6E:93:1B:36:37:47:1D:8C:B2:AC:3B:5D:61:22:CC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91492bc0-d54a-3077-bdc5-dfef39d2bcdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:57:05:db:a2:b7:67:58:99:17:9f:8c:93:26:57:ac:5e:
         76:72:2e:92:7c:86:8d:af:a2:e0:d1:a4:38:97:f1:b1:50:45:
         a9:2d:b0:7d:44:74:5d:1d:60:da:24:d7:da:f0:79:60:11:16:
         e5:b8:06:88:7b:39:c0:e0:5f:fd:8c:ae:6f:30:91:1f:68:a6:
         1e:f6:ca:1f:c1:bc:8d:14:a8:81:8c:47:4a:a3:7d:82:6f:ac:
         28:75:70:1e:a5:f1:3b:50:ad:af:25:26:80:aa:8c:62:cf:3d:
         5f:bd:d2:bd:8f:23:47:f5:8c:68:fd:9a:ba:b7:75:21:f5:03:
         6e:35:74:fc:c3:48:fd:ab:5e:0b:9d:c2:c4:dd:38:6e:36:a9:
         5e:cc:a0:af:fd:e7:6f:97:fe:d5:1f:ba:56:1f:a5:ec:11:c5:
         c6:8f:fb:a3:c4:9d:02:60:f0:de:00:69:fd:ad:a9:c2:7a:96:
         0f:9b:4d:e6:53:b2:75:59:8c:23:5d:70:80:a0:38:2d:89:74:
         84:c4:7d:4d:c4:6a:59:72:9b:29:96:51:8f:a4:96:51:bc:9e:
         e7:27:14:73:06:e7:2c:e3:0f:33:d3:55:fe:33:a1:3b:21:06:
         8e:f5:ff:d2:6a:93:14:7f:28:a2:2f:94:97:1f:f5:c7:7b:a8:
         3e:b5:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:58:21 2025 by rpki-client