Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa
File:                     0da20598-0c78-3593-9468-c1e87c1f6bd2.roa (raw, json)
Hash identifier:          Z9hP2XzZkxzOKqTR1C9YClJPfw8sOWoJpFQrgMmKmJw=
Subject key identifier:   48:F7:30:9A:42:9E:B6:94:00:F1:DC:E4:6D:8A:B7:9C:63:E4:91:AF
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285848EC967EE90D85FC152BB7D040
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     42
IP address blocks:        63.246.32.0/20 maxlen: 24
                          66.185.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:7e:e9:0d:85:fc:15:2b:b7:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=2c535fdd-0a9e-490a-b7fb-6da907c81034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:4d:6b:9d:6c:0c:07:f8:d2:27:a8:d9:2e:
                    31:e1:a0:0d:8c:3a:b7:48:6e:c9:7c:c2:ef:b4:30:
                    54:59:70:c8:f5:2a:62:e0:db:3c:af:ac:47:db:13:
                    6c:b4:d1:1a:6e:78:54:ce:d2:8a:c6:d7:2c:c2:8f:
                    5e:9c:80:08:85:ab:96:18:e7:a4:46:2e:30:7b:d5:
                    d4:95:1c:81:26:b9:ca:7e:26:85:6e:dd:3c:3e:0c:
                    00:8a:07:17:a4:fe:3e:16:80:cc:7f:6c:ea:c5:21:
                    c1:96:61:f3:5d:5e:9c:25:8b:2c:63:b9:29:79:1b:
                    b5:75:29:2e:3a:a0:3c:0e:58:e3:14:bc:7c:f7:0c:
                    3f:5f:b0:f7:86:14:3b:1c:67:6e:05:62:49:3c:2c:
                    7b:e2:cd:67:2d:47:38:d6:8c:83:d5:76:92:4e:ea:
                    2b:00:ef:dc:a0:a8:0a:55:4e:51:29:56:6a:bf:76:
                    aa:03:29:2f:07:c1:a0:94:85:63:dc:ec:55:bd:ef:
                    9b:e7:4f:a9:6c:ec:3b:28:08:ba:6b:d3:7a:79:54:
                    d1:e0:2e:8e:a5:d0:2b:66:0c:f5:01:e0:5e:37:0c:
                    f7:04:39:eb:fa:d0:d4:fd:cc:1c:9b:e7:d3:87:bf:
                    5f:5e:2d:a1:1c:bf:44:d1:5e:a7:29:6b:49:44:2a:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:30:9A:42:9E:B6:94:00:F1:DC:E4:6D:8A:B7:9C:63:E4:91:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.32.0/20
                  66.185.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:21:f8:9d:0c:0a:17:6f:70:d1:c0:74:f1:82:02:9c:54:90:
         94:61:57:b5:37:08:8f:f0:c4:87:0d:83:80:d8:17:a2:36:3b:
         ef:8a:78:be:dc:b7:1e:1f:44:73:b1:88:1b:f8:11:06:d4:47:
         09:41:e8:83:6f:93:6e:41:63:97:8d:7e:e6:7f:5a:b2:79:9d:
         77:08:7d:33:fd:ad:35:11:8c:d7:9c:b2:6a:cd:3f:15:29:2a:
         aa:04:b1:6e:4f:d4:0a:62:5b:07:8e:31:4c:3b:70:6f:28:46:
         72:99:4b:62:69:2e:81:6a:85:4d:8c:50:85:3c:4c:f1:ab:47:
         a5:6f:95:57:99:82:91:9b:a5:55:22:e9:77:60:9f:1f:15:dc:
         a6:c9:75:5a:25:8f:70:84:2b:46:4d:4f:f8:c5:96:16:76:bb:
         65:93:b6:65:e2:9a:b0:92:63:10:75:1c:f0:c6:1f:42:5b:75:
         9b:1d:84:b8:4d:77:10:b7:d6:25:14:47:74:7b:0a:81:5a:8f:
         c9:b6:8f:01:8d:11:37:3f:64:7f:cd:23:3b:10:12:92:3e:67:
         76:5e:11:e6:0f:3b:2d:26:2f:56:78:96:74:e1:8e:c4:7d:df:
         0a:ab:f3:94:64:2d:fd:c4:3c:0d:1f:11:68:22:2f:e6:7a:35:
         6a:7d:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:40 2025 by rpki-client