Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/72581066-de11-3015-9c34-40a61ea60fa7.roa
File:                     72581066-de11-3015-9c34-40a61ea60fa7.roa (raw, json)
Hash identifier:          M/NMNNZ9nE7eSLF1tTNzieqg9BeJlp+viIoGWxN2y4I=
Subject key identifier:   2F:FF:AB:CA:A9:D0:8F:B0:13:1E:4D:EE:73:BC:6F:6A:E9:83:FA:D5
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285848C2B65362841725E3313EE180
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/72581066-de11-3015-9c34-40a61ea60fa7.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     6079
IP address blocks:        24.35.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:53:62:84:17:25:e3:31:3e:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=1fab0ecc-09b0-48a2-ae32-755de2fcc677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1d:94:fa:36:80:94:24:28:f5:85:aa:04:71:
                    c3:ef:c7:1c:8b:37:16:17:0d:7f:9d:ce:8e:20:92:
                    62:1b:ba:0a:ad:21:d3:62:bf:73:b7:58:99:68:9e:
                    8d:92:be:8c:11:ea:6c:38:01:26:c1:74:9b:16:98:
                    9b:80:87:3e:46:d1:fb:ec:a2:1a:29:d7:6d:55:bc:
                    30:b0:d4:5f:50:6d:c9:58:f7:a8:8d:0a:c5:fa:35:
                    d2:1d:c7:86:01:d9:0f:1e:18:cf:49:02:e7:f7:64:
                    85:64:24:e9:46:85:96:ba:62:aa:7e:18:2e:1e:1c:
                    85:ef:a8:f1:24:7f:a2:31:ae:ee:e1:dc:bf:fe:92:
                    c2:3b:f5:4e:a0:19:b2:bc:88:b2:34:8d:c0:b4:b7:
                    eb:01:71:71:95:01:b4:eb:8d:fa:9a:65:de:9c:2a:
                    7a:1c:45:b1:54:a1:88:9c:7a:01:88:ab:42:31:0c:
                    5f:da:76:5c:a9:80:5e:be:07:0d:e0:96:f1:74:88:
                    3a:9a:d9:80:4e:c1:b1:c2:0c:a2:6a:73:55:3d:20:
                    82:5a:ce:46:3d:1b:64:52:dc:55:19:67:cc:52:dc:
                    01:29:4c:f7:eb:26:57:db:1c:dd:18:82:5e:9a:57:
                    55:f6:26:67:e1:51:78:c6:a5:e6:21:e0:f7:4b:68:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FF:AB:CA:A9:D0:8F:B0:13:1E:4D:EE:73:BC:6F:6A:E9:83:FA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/72581066-de11-3015-9c34-40a61ea60fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:13:fc:e9:4b:b5:57:4e:00:5a:77:62:d4:8e:1b:5b:6e:d7:
         ff:b8:a7:79:c7:5a:c3:02:b4:9c:6a:77:ff:ba:91:b4:3f:20:
         44:a7:28:f4:68:e7:f1:c2:2e:b3:5d:1b:4a:80:02:95:36:a0:
         fb:2a:91:e3:60:04:7e:d1:df:f5:58:d1:79:bb:90:24:7c:61:
         45:23:e9:e4:84:d7:4c:3b:90:54:ee:62:86:6e:cc:0a:08:87:
         95:66:b4:77:7a:58:9f:72:57:4e:7b:d0:5c:99:e6:09:fe:f3:
         38:4a:90:c5:b3:8c:a4:fc:3f:80:e9:30:dd:62:49:24:d5:c6:
         07:b9:99:f4:e8:75:37:14:e2:1a:11:3a:43:34:a4:1a:28:57:
         2b:87:3f:dd:4d:0d:66:3b:ad:c5:a9:36:ef:b2:c9:62:6a:b4:
         ca:6b:13:8b:04:5e:bc:4a:7c:fc:50:e5:61:24:9f:38:47:57:
         99:6f:c7:df:c5:04:e7:11:b7:c9:5f:4c:e5:1b:4b:59:d2:0f:
         b4:0d:40:ae:4b:55:aa:04:63:90:39:e5:44:c5:66:9c:de:89:
         1b:4b:a6:55:9b:26:8d:b2:fe:6a:d3:c6:8b:d1:6f:89:b2:1a:
         0f:a8:e3:ee:1c:50:c5:bb:9e:2f:20:d9:a7:bf:06:48:e1:ce:
         22:bf:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:17 2025 by rpki-client