Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a8418a7-4f9e-3d8b-a070-6b3f25d9206c.roa
File:                     9a8418a7-4f9e-3d8b-a070-6b3f25d9206c.roa (raw, json)
Hash identifier:          LBUuNOVK8pLp/scXHnTTQAOkHZ/T0gy6qHQv83g84MQ=
Subject key identifier:   CE:50:93:BC:F9:C7:2F:CC:FF:36:07:7B:05:D7:78:F3:2A:79:4E:DA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF6876D2AD78DD5C03D40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a8418a7-4f9e-3d8b-a070-6b3f25d9206c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.25.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f6:87:6d:2a:d7:8d:d5:c0:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f7264059-0e8d-46b6-bd09-cf3f819e6b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:b8:5d:18:ed:c1:1f:96:f9:dd:b6:2f:68:
                    49:34:ad:bc:4f:0c:97:87:e9:c5:65:5b:48:f1:b3:
                    b6:a1:e2:84:a9:63:30:e4:87:84:bf:10:a1:03:67:
                    a1:42:0c:37:bb:95:5e:2a:00:e0:de:c1:40:d2:b9:
                    11:e0:f5:c8:b8:68:a0:01:82:43:51:7a:39:32:b8:
                    a8:f5:73:32:2f:37:96:ce:d4:4a:ac:5f:bd:a2:cb:
                    45:95:dc:71:ac:13:1c:fe:12:ba:2d:c8:57:24:38:
                    f6:e2:ea:4e:01:f5:5c:3e:d2:91:90:0d:d2:47:5c:
                    88:4a:1a:e0:3a:b0:df:61:a0:63:d3:6a:6b:a3:c9:
                    e7:d0:06:36:77:af:4e:7a:c9:98:62:8e:db:0d:cd:
                    af:d3:2f:07:db:98:b1:c7:ee:95:18:01:40:16:87:
                    6d:5c:c5:4d:c2:68:00:59:29:df:2e:dc:f3:42:dc:
                    2a:13:f2:1d:cb:83:f0:af:cf:3c:fd:76:46:50:0e:
                    0b:bb:f0:40:4e:63:e5:bc:fc:c7:f6:18:d7:3d:71:
                    91:59:eb:70:1a:e0:67:24:01:f4:69:69:5d:de:38:
                    d4:30:46:b1:0a:a5:2c:2f:d7:60:71:1d:57:e1:bd:
                    a1:2c:a8:7d:a2:a0:6f:72:73:29:b9:a0:37:36:ff:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:93:BC:F9:C7:2F:CC:FF:36:07:7B:05:D7:78:F3:2A:79:4E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9a8418a7-4f9e-3d8b-a070-6b3f25d9206c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.25.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:39:5f:8c:9b:e5:4d:87:f3:8c:8f:c7:83:b8:35:d2:60:4c:
         70:9a:3b:ee:e3:92:da:bd:2e:ef:18:84:1a:6a:02:ac:d5:d0:
         59:e8:e2:06:cf:52:b8:2d:78:ea:44:ae:f1:45:61:64:5f:2c:
         ff:83:d5:80:7e:f1:7b:16:e8:8f:ec:e4:ee:8a:58:8f:34:99:
         a2:42:04:1a:ed:d5:ea:bc:25:19:6f:83:6b:bc:c7:f2:cd:58:
         c5:f1:67:93:d6:dc:69:20:5b:ca:24:af:4b:5b:9a:d0:b2:34:
         9d:67:7f:72:b6:45:55:6d:79:ae:05:03:92:10:ae:fe:4e:cd:
         06:6a:e3:ee:37:a1:f5:7c:f4:8a:2d:41:2b:83:14:74:77:74:
         47:7e:17:b8:53:78:4c:a5:92:4e:55:f4:5e:0e:8b:c2:5a:7b:
         03:7a:04:03:f9:e6:11:4e:e9:22:a4:08:aa:2e:cc:27:80:80:
         22:55:bb:ba:fe:75:0c:85:42:14:b2:f5:e4:54:98:17:f8:7c:
         71:7b:ac:34:a5:96:74:ae:e7:b7:bc:87:78:ef:38:f3:50:a9:
         10:6a:a7:f0:38:e8:41:f8:1e:cb:23:c7:cd:ad:8e:b9:c6:0d:
         da:70:12:1e:35:0e:c7:41:32:a2:38:c5:f3:55:c2:1b:0c:91:
         50:8a:c3:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCvaHbSrXjdXAPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZjcyNjQwNTktMGU4ZC00NmI2LWJkMDktY2YzZjgxOWU2YjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu64XRjtwR+W+d22L2hJNK28TwyXh+nFZVtI
8bO2oeKEqWMw5IeEvxChA2ehQgw3u5VeKgDg3sFA0rkR4PXIuGigAYJDUXo5Mrio
9XMyLzeWztRKrF+9ostFldxxrBMc/hK6LchXJDj24upOAfVcPtKRkA3SR1yIShrg
OrDfYaBj02pro8nn0AY2d69OesmYYo7bDc2v0y8H25ixx+6VGAFAFodtXMVNwmgA
WSnfLtzzQtwqE/Idy4Pwr888/XZGUA4Lu/BATmPlvPzH9hjXPXGRWetwGuBnJAH0
aWld3jjUMEaxCqUsL9dgcR1X4b2hLKh9oqBvcnMpuaA3Nv/CDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5Qk7z5xy/M/zYHewXXePMqeU7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWE4NDE4YTctNGY5ZS0z
ZDhiLWEwNzAtNmIzZjI1ZDkyMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLxlAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg5X4yb5U2H84yPx4O4NdJgTHCaO+7jktq9Lu8YhBpqAqzV0Fno4gbP
UrgteOpErvFFYWRfLP+D1YB+8XsW6I/s5O6KWI80maJCBBrt1eq8JRlvg2u8x/LN
WMXxZ5PW3GkgW8okr0tbmtCyNJ1nf3K2RVVtea4FA5IQrv5OzQZq4+43ofV89Iot
QSuDFHR3dEd+F7hTeEylkk5V9F4Oi8JaewN6BAP55hFO6SKkCKouzCeAgCJVu7r+
dQyFQhSy9eRUmBf4fHF7rDSllnSu57e8h3jvOPNQqRBqp/A46EH4Hssjx82tjrnG
DdpwEh41DsdBMqI4xfNVwhsMkVCKw3s=
-----END CERTIFICATE-----
Generated at Fri May 9 14:21:54 2025 by rpki-client