Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
File:                     8ada970f-ad20-3b9c-add8-c2108da067c9.roa (raw, json)
Hash identifier:          ei3S4r1p0pw5zlpnOy4piTGWAA+XTMgryjmQvpKhHEM=
Subject key identifier:   09:42:70:58:55:DD:CE:87:4B:F6:25:21:BA:AD:73:AF:9B:99:2A:4E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B03E0D9A316008739B500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.32.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:03:e0:d9:a3:16:00:87:39:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=6d9e19e4-8aff-4e40-8dcc-5dd2ba48b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:3f:63:a4:41:61:ba:f0:aa:1b:0a:42:31:
                    fe:48:7f:05:7f:13:49:ac:07:93:2a:11:7d:39:93:
                    ed:07:47:91:32:b5:8b:6d:6a:df:cb:73:4e:bf:cc:
                    dd:2f:66:bf:97:06:c1:cc:c1:3a:81:4b:bf:64:c9:
                    c5:22:a7:f1:fd:b9:b8:95:cd:b0:52:4e:28:d8:ae:
                    f5:af:de:91:1d:38:34:df:c9:95:6d:6a:8a:0d:8a:
                    59:40:fb:59:72:b2:c3:fa:5d:5f:8d:96:e4:18:bd:
                    54:6a:c4:d3:e0:b2:a3:91:c3:fd:5c:9d:a7:56:88:
                    86:b9:a3:a0:1d:9c:c5:c2:4e:00:c4:65:61:83:eb:
                    9a:50:58:a9:36:70:70:72:13:2a:96:cc:a7:f3:f8:
                    57:ef:d6:46:30:e8:c2:e5:48:6c:ed:a3:73:6a:a0:
                    83:51:e7:f5:d0:60:1f:d1:7b:fd:80:09:62:ee:4a:
                    21:c1:f5:c4:21:2c:5a:76:d0:43:85:0b:1b:c7:a1:
                    32:fa:38:e9:9f:43:2a:2b:28:84:2e:0d:c2:36:83:
                    99:f0:1d:8d:46:e6:7f:f0:a5:49:0a:bd:b5:b7:d8:
                    65:2c:49:a9:23:d2:dc:a7:ba:3c:bf:55:4f:96:60:
                    eb:c4:80:a3:fa:85:bb:f1:d9:ee:56:e8:ce:70:6d:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:42:70:58:55:DD:CE:87:4B:F6:25:21:BA:AD:73:AF:9B:99:2A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ada970f-ad20-3b9c-add8-c2108da067c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.32.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:27:38:ab:51:b1:fd:86:81:b7:e5:70:cb:35:0d:07:6e:
         f0:f2:10:0f:92:e5:2d:ba:30:f2:8b:7e:b5:96:95:b4:25:12:
         32:26:a7:49:4f:ef:73:6f:fd:5f:3c:05:1f:32:fc:44:bb:47:
         14:1f:0c:a0:ca:97:5a:c9:f9:c3:ea:4d:80:6c:8f:b5:e2:75:
         b6:da:9c:8a:f3:4c:cb:f1:ba:82:b5:ca:49:29:e7:1b:51:56:
         c6:97:6e:45:2c:fa:4c:11:d5:5f:b2:03:bf:39:7f:2b:b3:bb:
         15:bd:54:6b:55:11:7a:4c:d2:b5:56:86:8d:ff:9f:0a:12:98:
         42:42:96:7e:e0:1d:c4:00:8b:22:ea:e3:7e:f2:d2:42:ca:01:
         0f:27:0b:2b:f5:c4:82:a1:0f:97:4c:9d:d0:4a:14:4f:e7:f3:
         8d:c9:80:56:91:c9:90:5f:0a:58:8d:a8:c4:17:ff:1c:1a:01:
         2f:19:b3:80:3e:e1:be:47:dc:17:4e:b6:de:94:78:7e:81:43:
         69:2d:7f:4f:30:84:05:00:6f:c1:18:3f:1b:6a:1e:95:79:ab:
         4e:ef:ec:2d:82:38:94:82:04:f5:64:e6:09:f1:85:09:c6:71:
         cb:14:70:07:59:95:ad:0f:fa:f6:6e:c0:34:47:5a:ed:25:b8:
         df:64:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:46:48 2025 by rpki-client