Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd5e8f61-c2e5-3459-a972-2b5967fdbecb.roa
File:                     fd5e8f61-c2e5-3459-a972-2b5967fdbecb.roa (raw, json)
Hash identifier:          OuYbvIsl9KASvJp2nDFJqWfY/q+GxMc74TybCXM3T8w=
Subject key identifier:   C3:78:2A:B8:A9:14:6E:19:95:23:77:CF:C1:CB:6F:80:E4:4A:34:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DB71D346841C8C8DE2440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd5e8f61-c2e5-3459-a972-2b5967fdbecb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        24.118.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:b7:1d:34:68:41:c8:c8:de:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=09250150-c083-4ebb-9962-05f4c8bb6590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:70:0b:f6:de:ed:4c:74:36:95:82:76:d6:
                    5d:87:ff:cc:1d:e9:ce:91:3d:68:f5:51:ae:99:03:
                    df:ec:2f:27:cd:7c:1d:bd:fc:03:33:6d:f3:3a:90:
                    43:ef:49:fa:38:59:8c:3c:37:76:4f:cc:8e:2f:a5:
                    06:07:f1:75:43:c8:c7:ef:1c:4a:7d:24:16:03:77:
                    22:94:1d:28:ac:cb:f6:62:b8:e4:9a:19:f3:a0:7f:
                    3c:83:82:87:f6:34:9d:06:76:6c:8d:3f:13:bb:a6:
                    d7:9a:5e:92:2a:cf:75:ac:2a:c7:12:1c:73:f5:9a:
                    d7:6a:4a:ce:6d:51:7e:f4:89:57:ab:18:02:60:93:
                    a7:eb:f0:58:31:5a:69:5d:4c:28:ec:96:ff:58:84:
                    b5:90:78:95:fa:e7:61:94:c0:cd:33:b7:6d:a2:b8:
                    d8:8c:a6:31:7f:5d:ec:29:40:ce:43:40:6c:f3:b9:
                    c5:43:73:08:b1:47:df:bf:4e:33:87:28:49:5d:d3:
                    e1:fd:cb:95:c2:89:f3:f9:4a:c6:0d:0a:b6:9f:46:
                    3d:97:80:18:8f:50:df:43:24:fb:dc:21:b7:24:46:
                    59:89:34:82:b0:77:0a:76:5b:93:fd:8b:8c:ca:36:
                    5d:e5:3d:f7:1f:c2:36:ff:0d:5d:93:9d:1b:a8:76:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:2A:B8:A9:14:6E:19:95:23:77:CF:C1:CB:6F:80:E4:4A:34:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd5e8f61-c2e5-3459-a972-2b5967fdbecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:23:e7:f2:8d:60:cd:b1:5c:46:c1:62:10:a8:42:69:c3:
         42:97:e3:3c:35:76:36:ad:45:c0:d9:6e:82:f1:1e:d5:7d:70:
         5f:6f:45:bd:bb:a2:ac:37:37:72:41:7a:4e:14:25:db:51:29:
         91:ac:95:88:0d:02:7e:3e:61:d8:6e:da:a1:cc:58:0b:c8:8b:
         d0:26:3f:1c:14:c8:7e:43:d9:2f:a5:2a:9b:c5:38:94:9e:ed:
         b2:9b:0c:39:74:f8:8d:d7:5f:ac:07:f3:0d:6d:9f:11:29:30:
         5c:37:e6:da:b5:95:c8:44:7b:45:73:a7:0b:e4:43:aa:36:1d:
         81:51:43:67:f7:76:c1:d9:30:89:4f:82:50:4f:62:2c:28:b5:
         da:79:bf:a9:53:45:90:79:5b:e3:e6:e4:e0:40:c6:c5:51:45:
         a0:6f:0e:3c:7c:66:be:bb:3d:f9:4f:c6:18:22:a2:11:b9:ab:
         6c:65:2c:3f:1f:ed:44:50:57:2f:52:63:56:87:f4:77:a6:39:
         78:e1:11:22:12:87:4f:0b:76:1e:94:f3:6d:2b:08:ab:a4:6a:
         9b:3e:a3:cc:73:17:22:d9:8b:82:ec:9d:9c:e2:00:d7:57:54:
         4f:4a:8c:b6:9a:66:34:cc:d4:6f:80:83:19:8f:6d:83:d3:4e:
         6a:a5:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:30 2025 by rpki-client