Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a783f3cb-e190-32d1-8c0c-1b604736b2f9.roa
File:                     a783f3cb-e190-32d1-8c0c-1b604736b2f9.roa (raw, json)
Hash identifier:          FzouL8jGS85e5px9p0SMnF0Rds7p6cfLCQy3yNi0pfc=
Subject key identifier:   3B:DA:02:EB:CB:DD:E0:4D:0F:C6:61:8F:08:22:55:6C:6B:4C:03:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AAC7D659A22339FBE4440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a783f3cb-e190-32d1-8c0c-1b604736b2f9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.45.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ac:7d:65:9a:22:33:9f:be:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ede5231f-0bcb-469f-b254-6390d7702c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:91:e7:84:35:ca:6f:3e:2a:89:2c:4e:09:
                    2d:93:e6:74:d6:d6:cd:26:4f:28:28:3f:88:c6:7e:
                    10:8d:4d:e9:6c:31:1d:d8:08:7f:d7:83:86:dc:2f:
                    51:09:c2:35:04:2d:0b:4a:f3:5f:fb:4a:5f:dc:2c:
                    6a:c3:18:3e:09:1b:06:3a:ee:1c:b5:e2:df:0a:11:
                    5b:d6:5e:03:ac:fd:13:0e:77:25:4d:77:28:95:51:
                    88:36:d1:11:c2:2c:23:55:69:4f:0b:f3:f8:2a:e6:
                    7a:10:2d:0b:0c:29:d6:e4:18:9a:2c:c9:b5:1b:c7:
                    8b:b9:27:2f:e7:4a:bf:4d:75:b0:b8:f1:81:b9:32:
                    98:8c:c6:89:ad:45:98:0a:b2:df:34:29:fe:3a:10:
                    c5:de:2f:cc:c5:3f:8a:96:34:c5:9f:17:f8:eb:2d:
                    d6:60:11:d6:75:c4:81:7b:81:3f:aa:dc:ed:b7:3a:
                    58:62:43:0f:c9:63:8c:d2:f1:27:f5:05:d5:09:26:
                    e9:11:3c:12:70:5e:e8:7b:7c:bc:06:da:6e:c5:03:
                    d1:96:40:b5:1d:ac:d4:ad:dc:1c:8d:5b:d7:0f:8a:
                    36:93:19:9b:3f:01:f3:46:b3:52:22:2e:37:1f:d5:
                    7e:e9:00:3a:cc:f2:ae:a2:88:3a:2b:4b:af:b4:40:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DA:02:EB:CB:DD:E0:4D:0F:C6:61:8F:08:22:55:6C:6B:4C:03:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a783f3cb-e190-32d1-8c0c-1b604736b2f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:f1:91:f8:ec:7b:4e:49:25:76:f8:6c:3f:8f:a7:cb:cf:
         6b:9b:e6:74:ec:89:3a:c1:ee:b3:37:69:f6:1a:fa:d1:fd:72:
         34:2c:cf:80:7a:67:1c:e3:34:4b:c9:f0:18:8f:e2:df:fe:4a:
         2b:ce:ba:3e:37:0d:e6:76:18:33:6b:87:e8:7d:a0:1a:c8:bd:
         25:30:76:36:ee:8a:91:65:3d:54:73:9c:3d:b4:53:ba:6b:f6:
         f6:22:51:ff:fc:c7:d3:11:30:6e:9d:fe:4e:d8:4c:92:c7:b9:
         92:ee:0d:a1:b5:a0:de:f0:c9:85:a2:e1:10:a7:69:70:cf:b8:
         0f:96:54:55:c4:16:0a:cb:90:9b:57:fe:f5:b7:94:3a:0f:96:
         62:53:2a:a2:cb:53:81:26:8f:09:d1:8c:a0:fd:4c:0a:fd:ef:
         94:aa:bb:ba:cc:4c:56:b8:a3:dd:d7:b9:a6:b4:10:af:ca:81:
         31:3a:56:8c:41:bf:89:af:a7:36:84:ee:7e:aa:f7:5f:dd:08:
         35:a0:e0:d8:da:cd:2d:40:95:6e:35:ab:42:5a:0b:7c:7f:ef:
         84:6d:8e:7d:ce:2d:3b:0b:52:e6:2b:37:0e:de:39:58:dd:8f:
         3f:d1:6d:8a:ab:3a:e7:d2:b7:6a:dc:75:71:a2:c0:06:e3:8f:
         dd:b6:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:46:14 2025 by rpki-client