Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d83dd0f-ca5b-3b64-ad33-9eb93d93a14c.roa
File:                     1d83dd0f-ca5b-3b64-ad33-9eb93d93a14c.roa (raw, json)
Hash identifier:          ipTu7kRSefFzVS2RA8gWt0gwbwm+nNmyLK1+gadRhJU=
Subject key identifier:   E9:AC:F4:4A:6B:F3:68:CB:93:23:80:61:64:0C:99:F2:E7:67:B6:E7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B044517D72029B8D6B5E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d83dd0f-ca5b-3b64-ad33-9eb93d93a14c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.40.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:04:45:17:d7:20:29:b8:d6:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ac916d9e-d64b-4682-985e-a034ee6ce7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:8d:ee:76:24:46:cc:c4:73:70:8b:c2:6c:
                    87:7f:e8:c1:3a:9c:6d:14:95:62:91:b2:f0:7a:9c:
                    fd:73:08:c0:4a:ec:78:93:61:d5:ab:1b:6e:ca:50:
                    bd:db:4a:03:01:ce:81:a8:3a:dc:01:8b:c9:88:5a:
                    d6:6f:65:1e:3f:46:ba:f3:bd:fe:52:d1:57:f6:ac:
                    a2:b1:35:21:56:d8:5f:22:e4:f1:6d:ae:c6:71:72:
                    63:a8:b0:9b:82:ba:ec:3c:a2:61:26:22:8e:6b:c4:
                    f9:08:96:36:27:99:fe:be:54:cb:ea:60:ee:4e:77:
                    82:30:e0:1c:4a:ac:cb:9b:1c:f3:d7:b3:03:c3:98:
                    23:32:2c:c7:a4:ec:9e:e1:4e:ac:01:9f:2d:38:63:
                    e8:a2:2f:ad:e9:3e:14:9e:f1:5c:96:7f:1e:d2:61:
                    87:3b:4c:1f:e1:be:9e:4c:27:cf:7f:9b:81:7d:21:
                    8b:66:a8:89:89:cf:d3:f7:a2:53:21:6a:b0:29:39:
                    f0:ac:23:eb:82:61:25:46:23:aa:74:4f:a4:76:e8:
                    e6:73:6d:48:93:65:20:99:ef:2a:d0:f3:d9:82:2d:
                    3d:4d:c5:61:8d:11:50:3d:66:f7:7a:ae:40:bc:35:
                    b3:05:75:58:bd:8f:8d:89:42:4b:d6:ad:65:dc:4d:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:F4:4A:6B:F3:68:CB:93:23:80:61:64:0C:99:F2:E7:67:B6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d83dd0f-ca5b-3b64-ad33-9eb93d93a14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.40.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:4a:85:40:d8:5a:27:be:7a:27:01:bc:d3:6a:36:7a:60:
         a0:96:ef:ff:ae:e2:db:87:55:b3:7a:c9:61:ac:e6:c9:46:20:
         00:bf:63:d2:90:5e:56:0e:84:9e:5a:23:71:25:1a:43:00:91:
         1b:90:d8:fc:9b:b9:96:4f:7d:fa:92:37:4b:b5:b6:5b:f1:4e:
         fa:3b:50:bb:d8:10:f1:b5:7d:92:e4:e0:c5:ec:36:08:21:72:
         69:fd:96:a3:0e:dc:fa:87:d1:36:75:7d:ba:5c:32:22:02:5d:
         04:81:d3:30:f7:dd:5d:ee:c6:18:67:b1:f9:3a:2d:c4:f5:85:
         26:a5:34:69:30:23:7d:d5:57:d0:51:c9:74:6b:73:a1:60:cd:
         5e:c9:f9:b8:26:1e:7a:22:95:80:f6:07:07:21:3e:5b:aa:95:
         7a:f0:3a:a5:50:9f:51:e0:5c:70:18:04:45:1d:7f:6b:6e:f5:
         e3:f9:c6:49:f8:1f:b1:79:ed:b3:3c:1a:af:21:27:44:73:59:
         0c:bb:eb:71:89:4c:a9:65:6c:72:21:18:18:59:4c:4b:73:cb:
         6a:6a:05:57:96:08:67:5f:77:d4:13:cf:83:08:ce:c5:4e:28:
         ed:8c:17:f2:2d:f3:4a:40:47:d7:74:cd:c6:18:fa:e0:ff:e1:
         d5:54:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:29:44 2025 by rpki-client