Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa
File:                     20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa (raw, json)
Hash identifier:          7+scuzmemm59MbdXpSt9z5a9NAjW4W2SID/rsmOG8yg=
Subject key identifier:   E1:E0:B8:E6:8E:2A:DB:4F:59:17:1F:36:51:69:E1:52:B4:B0:FD:88
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF5F1CD899A97B200A300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        138.229.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f5:f1:cd:89:9a:97:b2:00:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=bc937836-c716-44ef-82d5-48a373885a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:6b:be:74:8f:58:eb:70:db:cc:a0:07:fa:
                    e0:58:29:99:43:49:41:cd:0e:d4:56:c2:83:fb:7f:
                    87:43:ed:4e:66:15:0a:54:1e:0a:ac:ed:27:d2:ee:
                    9f:32:9d:52:06:a5:98:5b:90:a4:0f:98:0c:fd:e7:
                    57:2e:b2:1f:ca:ab:93:9a:be:e9:64:ca:0e:18:f2:
                    be:7f:f5:d2:00:02:9a:ba:e4:e2:7d:e7:17:fb:4c:
                    d9:5e:18:5c:33:44:18:55:37:38:e1:cc:e6:4c:14:
                    ec:2d:99:64:48:ff:10:94:94:99:b1:cb:21:5a:59:
                    aa:24:53:35:a6:8e:eb:95:ae:91:15:ec:86:6e:f4:
                    cb:09:f3:d6:0b:bc:69:f4:b6:e8:4b:37:81:13:b7:
                    bc:80:ef:0a:30:d1:6b:d9:24:b2:c6:6b:f7:59:f0:
                    00:51:09:ba:7b:1c:43:f6:d8:d9:bd:6a:fa:52:a3:
                    04:af:cd:9b:18:f1:99:c5:6e:da:28:d6:5e:09:cf:
                    d1:20:6b:47:55:dc:aa:1d:b5:df:f2:8e:b4:17:27:
                    c4:cd:ac:4b:cc:eb:54:f0:5d:b5:3c:7c:a4:da:42:
                    b6:ba:54:4b:c5:13:ba:0c:e3:5c:05:cc:88:38:84:
                    b1:f5:c2:9c:56:73:f7:f0:8c:0f:7f:4c:16:c3:e3:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:B8:E6:8E:2A:DB:4F:59:17:1F:36:51:69:E1:52:B4:B0:FD:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20ecc1fb-caab-39e1-ac0d-6ae9b0377f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:b2:9e:35:78:e6:0c:61:df:8b:09:7c:2e:2c:f3:4c:38:
         c2:db:59:a5:3e:7f:3d:20:39:f8:3a:15:75:e1:a1:d1:91:11:
         35:1c:47:d6:63:94:27:ec:d1:25:f7:c1:66:18:50:4f:b3:1c:
         3a:c7:33:cc:90:67:1d:5f:22:25:73:4b:c9:4f:67:b9:ed:ca:
         e8:aa:d0:17:ea:8f:9b:f5:8c:07:77:99:ac:d4:e1:59:47:2d:
         dc:3a:e3:dc:15:7e:31:59:38:e5:ce:1a:23:7e:73:41:c7:c5:
         04:d4:cc:e2:8a:60:63:44:97:66:48:de:f0:4b:ad:c3:b7:64:
         05:b5:1d:79:a9:19:78:93:c6:f5:29:4c:42:6a:3e:0e:6a:4d:
         6f:6c:d2:7d:4e:b5:35:bc:6e:22:9e:89:96:cf:99:eb:6d:22:
         58:75:1e:e8:22:6e:77:c0:75:22:49:ca:b9:05:c1:cf:89:68:
         af:72:d1:b4:24:0e:79:c6:53:93:47:6c:96:40:01:74:12:ce:
         30:42:b3:3e:46:60:60:8c:60:a9:4d:9e:98:80:ba:d7:96:42:
         fd:88:58:16:ed:ed:54:d5:d1:21:0c:a8:2b:57:c1:d2:d7:8b:
         4e:5e:48:f9:44:bf:c5:fa:bb:fb:85:47:a2:fc:ed:d7:a1:9e:
         fb:c7:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:04:41 2025 by rpki-client