Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c36730a-51ab-3e7a-8e91-8f5ca2853ee9.roa
File:                     8c36730a-51ab-3e7a-8e91-8f5ca2853ee9.roa (raw, json)
Hash identifier:          NBQtNaBUFr+gHg2fz2g1zau4EGJkwHOXoBMuXlK023I=
Subject key identifier:   B4:58:37:00:7E:BC:37:06:5B:F0:06:98:53:99:B8:EB:70:67:B3:31
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AACC23DB25D03DFDA94C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c36730a-51ab-3e7a-8e91-8f5ca2853ee9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.43.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ac:c2:3d:b2:5d:03:df:da:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=cac05dab-d879-4f75-be52-9ee1e2d925a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:1e:47:ad:a7:0a:e5:1b:7a:e5:e6:3d:66:
                    dc:53:7f:a9:80:46:c6:50:fc:09:b4:8f:ac:c8:0a:
                    31:d1:23:5a:88:3c:c3:59:e3:86:9c:d9:1d:2b:29:
                    08:68:25:0a:20:38:14:03:4d:43:5c:49:93:42:ec:
                    4f:30:45:a6:e4:cc:22:15:dd:69:fd:6c:21:01:8e:
                    3a:8d:34:3f:e4:2f:7c:0d:ca:45:aa:f0:34:61:8c:
                    19:61:1c:6c:44:64:bc:2c:2a:9f:38:ec:0c:b1:03:
                    d6:c9:af:93:89:4b:e9:64:5d:23:a5:e3:b4:69:a0:
                    de:bb:76:1a:7c:99:67:b2:02:da:04:e1:f2:7d:9e:
                    b6:1f:ac:bf:f3:85:62:6a:c4:0a:74:43:07:97:8c:
                    1a:74:3b:b2:c6:82:40:01:1b:99:21:51:94:88:bd:
                    93:dd:13:a5:fd:9e:85:90:0e:2e:9c:c6:b7:48:91:
                    e1:20:95:e1:c7:61:52:0b:5a:89:dd:00:58:5f:d7:
                    0b:23:05:37:c7:f8:4a:78:bc:c1:33:5d:f7:3b:09:
                    43:51:07:1d:48:33:1d:f2:de:2b:b7:df:37:69:3f:
                    0c:d2:90:a8:f3:09:58:3d:65:2d:09:b6:6b:d4:39:
                    c5:08:72:64:b4:c0:0f:f5:74:61:33:62:c7:37:3c:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:58:37:00:7E:BC:37:06:5B:F0:06:98:53:99:B8:EB:70:67:B3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c36730a-51ab-3e7a-8e91-8f5ca2853ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:b4:6e:d8:bd:b0:8b:dc:b4:ad:d9:c5:49:7f:4d:51:d6:
         b6:3c:75:c9:3b:94:45:aa:64:d2:a4:72:b7:85:b5:42:0d:88:
         99:ea:f4:74:ad:88:e6:fe:50:ca:49:03:c8:f8:ef:01:64:05:
         52:e3:e3:38:13:53:56:2d:21:b0:b1:dd:be:e2:4c:70:a4:ea:
         ba:9e:be:b8:46:34:66:0e:14:29:b0:4d:46:60:6e:a4:cb:5f:
         91:c8:e0:27:9f:2a:2b:a8:f8:35:f2:44:da:32:9f:10:59:4b:
         4d:35:9b:5c:e2:15:d6:88:7c:a1:06:5b:83:f0:4c:da:1d:1b:
         17:ae:10:e9:b7:25:40:1c:61:f6:ff:31:e2:6d:39:b0:4e:2e:
         21:a9:d1:29:4e:d3:c6:e9:f4:16:c5:88:50:23:92:21:82:58:
         53:6a:88:fa:0f:f5:43:96:9f:81:45:de:60:fe:ab:50:b2:25:
         d9:54:65:92:75:a1:09:a6:fd:3b:c3:4e:23:c0:7b:50:3e:7b:
         87:c6:47:85:d5:45:6c:12:84:d3:34:dc:31:3c:e8:12:2a:6f:
         d8:ca:37:fe:37:ef:68:74:65:a3:10:0c:75:f0:de:1c:2c:4a:
         de:7a:32:c7:70:52:c3:68:48:84:47:99:e6:78:6a:3a:1f:71:
         65:c2:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:14:54 2025 by rpki-client