Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/77745f7c-eedd-3aeb-86cc-f2f2abf92e6e.roa
File:                     77745f7c-eedd-3aeb-86cc-f2f2abf92e6e.roa (raw, json)
Hash identifier:          llqfm5/c7RamwS70zTH0IGEPxFS9tHF1zkqrHxDcLh8=
Subject key identifier:   BB:A2:92:97:E8:4F:A8:7C:89:FF:4A:97:C5:44:D1:F7:BC:ED:53:A8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF3A3F87841F4B721693F
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/77745f7c-eedd-3aeb-86cc-f2f2abf92e6e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        47.231.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f3:a3:f8:78:41:f4:b7:21:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b0c68628-2a33-4600-bbd2-5c5a33955d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:74:92:b7:7c:bd:c7:23:a7:c3:d2:c2:a6:
                    cc:7d:26:4b:1d:94:b2:d4:5d:0d:fe:88:b4:ce:1f:
                    a0:58:e8:d1:db:79:c3:bd:45:bb:1b:f2:3d:4b:b5:
                    49:fd:20:56:83:08:80:b9:bc:fe:6b:3d:e1:a4:49:
                    72:24:5c:5d:0b:63:f2:66:80:97:4f:2e:d9:ca:f2:
                    b4:5a:a3:52:70:43:e9:fe:8b:de:ff:97:fc:83:c9:
                    1f:fe:b5:40:87:d4:42:97:b3:e3:c1:ef:96:a2:e0:
                    13:66:64:0e:50:32:31:ff:dd:b8:1b:85:86:94:74:
                    47:eb:1c:86:25:59:bc:d3:31:f8:4c:09:51:7c:fa:
                    4e:79:23:58:32:e7:d4:f5:66:91:75:e3:9a:0e:8e:
                    6f:c7:fc:f6:46:85:74:da:30:db:2a:ac:11:eb:dd:
                    60:4d:a7:b3:7d:fb:34:22:42:63:46:bc:36:c6:85:
                    c5:8d:26:c2:01:0a:e8:e3:bc:4d:de:37:ab:0c:a2:
                    5b:83:6f:e2:b9:bb:f5:16:1b:a4:7d:e2:40:1a:19:
                    ea:91:3e:95:22:dd:10:51:80:fe:15:b6:33:1b:e2:
                    dc:6a:ec:0b:bc:17:6d:c0:fe:42:0f:a3:47:a6:be:
                    d1:56:03:1f:0d:70:59:79:11:4e:12:3d:20:e0:d3:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A2:92:97:E8:4F:A8:7C:89:FF:4A:97:C5:44:D1:F7:BC:ED:53:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/77745f7c-eedd-3aeb-86cc-f2f2abf92e6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:c7:61:36:e4:55:cb:32:ad:aa:82:a0:a2:5a:1c:ff:0f:
         0f:6c:65:3e:65:38:24:87:e0:e0:19:67:d6:03:86:e1:ca:93:
         46:9d:3b:ad:22:96:4f:fa:a0:cf:a4:54:b5:45:92:c9:96:bc:
         8a:44:b5:6e:8d:73:5f:d5:cf:a4:12:fe:8f:18:a6:1e:5c:b8:
         9f:ad:b5:b1:76:5a:4e:dd:55:e7:b4:8f:bb:ba:2b:bc:83:70:
         24:ca:39:ff:24:3f:26:c4:6a:a5:5c:e6:e2:6e:a8:bd:27:ea:
         d2:ad:04:cf:09:ce:cd:38:f5:3e:0c:d3:3d:2a:d8:38:0b:0e:
         01:2d:2a:b9:03:32:a8:af:fd:10:15:28:c7:28:3b:01:6c:9e:
         b1:b3:50:2f:a6:09:5f:fb:67:f9:59:81:a5:56:ed:66:a0:c4:
         3d:e7:da:b9:e0:83:c3:6e:ec:db:3e:7d:4e:69:a2:c3:89:7e:
         f0:02:e3:ae:a0:b2:40:e6:c7:62:71:76:d3:2a:e1:52:9d:5d:
         82:ae:48:21:79:b7:7f:14:4b:ee:f2:9f:b3:76:0d:1f:a8:47:
         af:46:9a:83:22:5e:e6:d8:9f:42:c3:80:ae:32:17:f5:cd:b7:
         2e:79:63:19:0b:12:ee:b5:d2:80:71:22:64:cf:e3:96:cd:42:
         58:08:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:49:42 2025 by rpki-client