Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/581c8702-a7b5-3720-a7df-c82d97ac4798.roa
File:                     581c8702-a7b5-3720-a7df-c82d97ac4798.roa (raw, json)
Hash identifier:          5rcXVQjXizs1t3RaYowBtmeeWKLZGQ11iMl+TuMiVIs=
Subject key identifier:   97:8D:E5:D0:F7:06:23:79:DD:28:B2:BF:66:6A:67:90:32:B0:9C:08
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0B6BCE785B9099D59500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/581c8702-a7b5-3720-a7df-c82d97ac4798.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.44.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:0b:6b:ce:78:5b:90:99:d5:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=605904ae-5e02-4a1e-aa4e-8e3c0f52cc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:96:40:9e:83:b1:ba:e1:82:1a:b5:ca:08:
                    c0:90:96:a3:3f:c2:df:16:af:06:44:8d:99:e7:0a:
                    69:40:ca:d9:7d:e8:2e:f9:26:ed:d9:e3:c8:12:c9:
                    3b:7d:e8:76:c6:46:a7:3d:87:bc:1d:43:71:2f:c4:
                    6a:e0:2e:c8:2d:66:7d:de:00:13:e2:77:47:38:0c:
                    e1:c4:8d:b9:97:a3:2b:5a:ea:8c:bd:10:57:bf:a9:
                    03:84:b5:e4:51:2c:fb:5e:1a:5b:b0:08:d0:7b:83:
                    2f:c1:5c:1b:27:07:e4:d3:37:85:78:72:6d:49:67:
                    95:1f:35:d4:75:17:86:ba:86:82:3d:9e:4f:68:4e:
                    a0:f5:eb:c4:63:9b:7b:9f:b1:42:76:b8:cd:70:bc:
                    06:66:00:97:6c:3a:dd:70:49:44:82:48:58:d3:66:
                    6d:a6:9e:ca:4e:8d:94:4d:29:e6:de:48:d5:f9:74:
                    75:5b:4b:38:d6:71:d7:73:3b:48:90:59:bb:43:60:
                    36:bc:df:7a:b1:79:81:0f:5a:7b:1b:65:ff:d3:dd:
                    4f:6b:20:db:24:35:ed:be:eb:db:2b:d3:1c:58:70:
                    b7:45:c1:c0:f8:6f:a4:39:b2:28:dc:c6:3d:2b:56:
                    c5:47:7b:96:85:73:c5:31:04:25:5e:3c:3f:0d:1f:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:E5:D0:F7:06:23:79:DD:28:B2:BF:66:6A:67:90:32:B0:9C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/581c8702-a7b5-3720-a7df-c82d97ac4798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:aa:a8:b5:8d:d2:5a:a5:51:53:00:8d:be:98:54:62:8c:
         9f:f4:65:4a:c8:68:e3:e9:ce:6c:d8:c0:c2:a4:11:09:f1:56:
         eb:13:53:a7:af:20:ea:e1:df:a5:fa:77:b5:8b:e2:05:19:79:
         2a:b5:39:e3:20:7c:d1:15:bd:90:a4:08:3e:b2:c9:b9:d0:76:
         22:9a:8d:50:43:fd:36:f1:20:64:e9:12:b1:37:20:36:0c:63:
         f3:08:a8:df:ec:af:59:2f:79:1a:26:82:d1:4a:3e:47:e3:c0:
         f8:d7:7c:49:5d:12:18:50:59:53:6b:3a:f9:b9:b4:48:17:5f:
         c7:01:27:b4:7e:16:47:5f:ba:57:62:fd:22:f7:c3:cf:12:04:
         04:aa:fd:79:0e:8a:b0:53:a6:f5:1a:e0:ae:a1:b3:ff:b8:2f:
         89:6c:96:88:90:85:06:1e:2d:ee:f9:cd:ff:f3:f4:13:a7:66:
         44:87:c8:9f:66:d7:16:53:1b:a3:4b:aa:a7:83:68:0a:7d:cd:
         fb:df:5d:5e:e3:cf:bf:a9:8b:f4:fb:9f:73:6a:46:0c:e6:15:
         52:5f:d8:4b:9a:b8:a2:dd:69:4e:c0:ca:e7:bd:17:3b:44:b2:
         1b:10:e7:9b:41:f3:de:06:e5:10:09:0c:e9:2d:0b:24:36:ff:
         48:ba:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:50:09 2025 by rpki-client