Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643f99a8-abf0-388c-a1c6-07cfb835b196.roa
File:                     643f99a8-abf0-388c-a1c6-07cfb835b196.roa (raw, json)
Hash identifier:          TSRha4DcG3s7e6hkHOE3hFeukVUX+1CK+ioBp6EGqM8=
Subject key identifier:   7F:5B:6B:EE:9C:60:EB:54:FF:5B:E9:80:60:C7:BF:41:D4:B5:07:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF9F6B0AA36238D38DA20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643f99a8-abf0-388c-a1c6-07cfb835b196.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        96.40.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f9:f6:b0:aa:36:23:8d:38:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9b7c7cc1-eb1c-4255-9564-32b861375399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:78:2e:4f:09:17:4c:7f:a2:c8:d3:db:f7:
                    77:22:ef:ca:b5:ba:1d:9b:67:44:22:a2:ad:e9:1b:
                    46:7a:fe:e9:2a:a4:d0:b8:92:0c:31:95:3e:75:21:
                    0d:11:46:ef:09:28:5d:d1:e7:d0:0c:f6:bd:1e:65:
                    30:60:30:dd:ee:a4:d0:48:ca:9c:f1:6f:61:3e:16:
                    ad:20:42:1c:8c:3c:bf:e0:57:d5:63:70:f1:78:5d:
                    c8:ef:24:17:85:34:ce:36:cb:90:1c:79:46:cc:cb:
                    2f:65:1f:e3:93:d3:61:29:ac:5b:f1:5b:75:d9:d7:
                    c3:83:0a:50:62:28:ca:a0:e4:60:1d:43:19:23:7b:
                    27:f4:41:01:e3:8d:d2:2a:b6:be:40:18:b0:4e:5f:
                    c3:9b:84:99:44:b8:30:c4:3a:da:e0:23:b1:9b:af:
                    93:7e:03:17:ce:ae:e2:8b:87:45:db:bf:bd:42:fb:
                    8b:27:da:d9:3c:dc:eb:03:0b:5b:8f:ca:ee:e0:f2:
                    29:5b:a2:4f:59:49:01:62:d4:ea:59:97:c9:dc:b3:
                    7d:04:4d:5a:b7:e1:b3:be:46:8c:00:68:16:21:16:
                    5b:9d:16:d0:28:17:d9:5a:d1:b8:1c:69:88:ad:48:
                    ba:d9:3a:41:b5:31:d2:f1:c3:1f:3b:6f:cb:34:e1:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:6B:EE:9C:60:EB:54:FF:5B:E9:80:60:C7:BF:41:D4:B5:07:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643f99a8-abf0-388c-a1c6-07cfb835b196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.40.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f9:29:10:48:4e:09:e8:f6:86:1f:22:ab:91:68:10:6f:7c:
         fd:d3:8e:28:54:06:25:f2:44:ea:3d:28:49:5b:1a:f9:35:6d:
         72:2a:94:a4:57:90:93:08:90:36:de:a3:64:de:59:7f:9f:e9:
         8b:67:ba:97:3d:a5:93:ea:b5:1a:ef:03:bf:cd:11:50:23:86:
         35:a8:4e:36:ea:d2:04:bb:06:68:d6:ab:89:dc:98:7b:b3:ef:
         5f:19:08:81:ce:b3:b0:92:15:8f:c5:a4:15:e2:5e:69:ef:7f:
         75:dd:52:a6:1d:58:9c:b4:a6:e4:17:52:be:d5:7d:17:24:89:
         97:c8:0d:5f:6e:0c:e0:f7:df:d9:75:eb:1f:f5:7e:25:97:9a:
         62:31:21:f0:29:a8:ec:06:98:d9:9b:cf:29:8c:61:f9:23:5b:
         29:8e:8e:15:b1:6c:77:f5:a5:92:47:ca:af:93:15:df:af:4c:
         94:75:e1:6f:a8:c2:dc:f2:f8:7d:40:da:b7:fd:1f:cb:26:d6:
         63:96:af:de:9d:ee:32:c2:89:d5:72:7c:bb:25:51:d7:d1:e4:
         d3:8f:d3:01:30:3f:be:0f:44:53:83:1a:97:60:7d:0e:dc:fd:
         e6:e9:6f:5d:c2:95:8f:f9:05:a6:39:4d:83:76:c5:3a:76:3a:
         40:1c:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:36:47 2025 by rpki-client