Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a64771b4-ca25-3c67-a8b4-80d12af02078.roa
File:                     a64771b4-ca25-3c67-a8b4-80d12af02078.roa (raw, json)
Hash identifier:          uIWLpbdrEqQON3+SmqKxUBYGzDdtOqp+HlSYb8fpbcs=
Subject key identifier:   80:63:53:F0:68:EC:1E:69:8B:07:A6:FF:19:E2:08:EE:22:0C:A0:0A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848C6E639163FE65115F2686500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a64771b4-ca25-3c67-a8b4-80d12af02078.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     19115
IP address blocks:        24.216.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:39:16:3f:e6:51:15:f2:68:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=628217dd-3485-4c41-883c-4629743d8105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:8c:45:f6:b5:de:0c:52:00:11:ef:d5:99:
                    f0:36:aa:22:fd:28:16:d3:2f:47:05:e1:56:4e:fd:
                    67:04:4e:ca:e6:89:d9:fd:6c:38:33:f3:8a:e6:eb:
                    cd:4f:cc:90:6d:0d:4a:84:e9:77:ea:4e:2c:c6:80:
                    d1:d4:cb:c6:53:66:f5:30:21:23:7e:18:5c:5d:fe:
                    0a:42:ae:d7:af:1f:83:cf:f9:d9:6f:c4:fd:81:e9:
                    ec:a6:a0:ac:13:c1:4c:45:49:5b:95:64:d5:94:a4:
                    2b:c4:3c:40:53:2b:db:56:44:05:01:3f:c7:4a:b3:
                    e8:ef:84:51:35:5d:0a:83:bd:58:18:74:79:10:0a:
                    db:e8:36:08:e4:a8:e2:9a:a4:50:f5:b5:68:6a:f3:
                    10:2b:7f:0a:fc:a9:5c:09:0a:ff:55:c6:25:9a:72:
                    d4:b5:f2:b7:e6:7d:2e:91:04:3a:52:d6:f4:78:78:
                    96:9d:54:29:4e:38:80:ff:cc:07:fd:9c:84:25:1e:
                    5d:88:d0:26:90:ec:0c:73:86:25:53:29:3c:ef:b3:
                    31:22:77:6a:0e:62:eb:78:39:5c:66:f5:ff:31:b6:
                    24:db:d3:ca:6b:11:e8:45:c4:6a:bb:a4:0c:88:76:
                    61:c1:6f:4c:7b:80:8f:e0:d7:5c:19:6d:4a:19:7d:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:53:F0:68:EC:1E:69:8B:07:A6:FF:19:E2:08:EE:22:0C:A0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a64771b4-ca25-3c67-a8b4-80d12af02078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:11:64:b5:cd:00:2c:38:7e:79:2d:2e:fc:0e:1a:8d:bd:
         c8:47:a1:c7:43:df:0e:ae:98:5d:50:ef:4c:10:ea:97:3a:8b:
         d5:1d:48:d1:59:fb:8f:a6:f9:48:36:2c:da:f5:92:70:f2:98:
         58:94:21:3b:7e:1b:73:6c:86:eb:af:a6:70:ca:05:26:b1:7d:
         42:f2:49:0c:f7:a5:80:7b:c3:c1:5a:66:27:f8:6e:65:2f:bb:
         93:89:b5:59:68:63:a2:d5:de:f6:b1:11:e1:cc:6e:0c:94:96:
         d9:51:39:24:02:f3:35:38:dd:57:b0:3c:7e:dc:c7:0c:cc:d0:
         55:15:16:1f:62:a9:a4:4e:4f:b1:2c:0c:66:84:f3:fa:8b:d2:
         3f:bd:50:30:4a:58:3b:c9:2a:6b:e5:85:26:53:c9:f9:53:3b:
         73:67:96:9f:cf:df:51:c2:2e:74:7a:fa:de:8b:8c:16:ee:21:
         f1:ee:e8:d5:68:7d:35:aa:5a:c6:22:0d:82:e3:b4:18:57:e7:
         8b:56:37:86:cb:94:ac:e7:b8:ee:1e:6c:e3:95:c4:03:16:54:
         42:53:82:9e:0a:24:83:88:37:29:a3:6f:b8:09:b4:f1:05:2c:
         3a:31:a7:e4:fa:db:e0:d3:86:27:34:05:f0:e6:50:d1:57:fd:
         df:22:17:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:09:15 2025 by rpki-client