Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
File:                     65743670-00eb-3d49-bc50-633e73b6f7d1.roa (raw, json)
Hash identifier:          UyXFdqtbPxMsgGBotC0SlbjWTQYaFn+bpE5/Ha+dKi4=
Subject key identifier:   0F:A9:CE:99:8D:CA:E7:41:F5:28:24:B0:FB:31:FC:22:60:1B:32:79
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F43285848F22C606A270FFE82B6F44C80
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     12097
IP address blocks:        24.140.24.0/21 maxlen: 21
                          24.140.32.0/21 maxlen: 21
                          24.140.40.0/21 maxlen: 21
                          24.140.48.0/20 maxlen: 20
                          24.140.64.0/21 maxlen: 21
                          24.140.72.0/21 maxlen: 21
                          24.140.80.0/21 maxlen: 21
                          24.140.88.0/21 maxlen: 21
                          24.140.96.0/21 maxlen: 21
                          24.140.104.0/21 maxlen: 21
                          24.140.112.0/21 maxlen: 21
                          24.140.120.0/21 maxlen: 21
                          24.140.128.0/21 maxlen: 21
                          24.140.144.0/21 maxlen: 21
                          24.140.152.0/21 maxlen: 21
                          24.140.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:60:6a:27:0f:fe:82:b6:f4:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=ee9ec3e2-8a87-4f0e-9e96-d428c007c0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6a:75:9c:bc:b9:28:c9:5a:0c:f1:37:28:3e:
                    6b:96:af:3f:37:5d:b9:6a:77:c3:b3:14:5d:8a:c4:
                    09:99:5d:6f:2a:ed:64:13:cc:84:7e:48:f6:5a:d9:
                    73:5b:92:8b:a4:21:ec:68:69:a4:33:e9:7d:55:3b:
                    77:7c:ad:a1:da:61:53:a9:0d:7e:1b:86:6e:e9:10:
                    f2:d3:b9:cb:45:b3:a4:19:a4:5c:a4:4d:ba:7f:c7:
                    39:7e:f9:f3:a0:fe:8a:db:94:54:a9:65:a7:b4:21:
                    ce:dc:27:47:e4:02:b5:11:54:81:da:ce:d5:66:6d:
                    de:4c:fe:58:3b:f4:86:ba:17:ce:ed:74:d6:55:6c:
                    93:18:8d:72:d8:f8:9f:cc:bb:a7:c4:a1:13:c7:a1:
                    55:69:f1:7b:3e:38:23:0a:76:51:3d:e8:b6:db:64:
                    1d:6b:7e:b9:69:76:31:45:5e:00:84:6d:27:a8:d5:
                    02:ef:e6:96:a3:17:57:fb:ac:56:a6:7b:a2:b9:1b:
                    43:65:4b:cc:99:03:8e:dd:f9:0b:27:e9:be:0a:d9:
                    60:76:9a:22:16:cf:2a:ef:a0:50:9c:b4:fd:e3:be:
                    63:68:b9:cc:f4:6a:3e:b9:88:71:46:23:2e:b3:75:
                    5d:01:62:cd:1f:53:0d:1d:6c:7f:4a:1e:dd:fe:27:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A9:CE:99:8D:CA:E7:41:F5:28:24:B0:FB:31:FC:22:60:1B:32:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.24.0-24.140.135.255
                  24.140.144.0/20
                  24.140.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:7a:c9:e7:22:e3:8f:e7:20:21:e3:8b:4c:0e:b2:93:18:
         64:16:c2:a3:30:10:2b:3f:1a:de:97:62:eb:66:e6:fe:c3:f2:
         8d:f4:75:a5:90:46:e1:9f:43:f9:01:66:42:c1:30:68:d0:76:
         3a:0f:b3:48:b9:e6:c2:af:be:b3:33:d4:9b:fa:70:65:9f:ff:
         e2:67:b0:a7:f2:1f:fa:18:12:e2:d6:33:86:8d:c6:1d:4c:ee:
         b2:8a:ac:78:5a:1a:de:a9:30:2e:ff:1e:7a:69:79:31:f9:26:
         7a:9f:ec:82:84:b1:13:3e:e5:f0:3f:70:ba:fd:26:bf:1b:24:
         b3:93:f5:4b:a1:01:ea:88:23:56:7b:91:23:67:07:54:9b:5f:
         2d:55:c8:a5:5a:de:91:f3:5f:db:db:d6:cf:f7:bc:53:f4:0d:
         49:6b:75:76:0b:b3:8d:aa:a3:4a:9b:64:5c:df:f3:84:8c:59:
         30:a8:00:d6:4b:d6:2f:98:e7:f8:d8:b9:b9:9c:c4:d6:e6:72:
         28:f9:97:6b:9c:cc:0a:b1:f7:6e:dc:88:6f:9c:fd:2b:da:27:
         a0:50:99:86:c5:a0:1e:60:6d:f2:e1:34:d0:1f:9d:0c:4b:0b:
         c6:38:81:f5:0f:66:16:8a:64:2a:4c:fe:28:1f:84:1d:9e:03:
         43:54:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:54:14 2025 by rpki-client