Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa
File:                     aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa (raw, json)
Hash identifier:          n9OgVkGr6gduHtWE4xr0K7hkTaIv8m8Y5Tdq99HAGfk=
Subject key identifier:   C0:BC:44:95:BC:9B:E8:CB:FF:E3:88:22:1A:3D:88:68:D2:3D:D8:A0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AEFBCEE2FF935BCB6E500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        47.231.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ef:bc:ee:2f:f9:35:bc:b6:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f14c00a1-09e6-4ba2-959c-1514dfd60ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:79:0c:bf:51:48:b7:2f:d8:b2:f2:b2:be:
                    0f:01:39:ce:a3:3f:b8:57:09:e4:ea:f0:76:95:9a:
                    6a:2c:51:47:0d:48:2d:54:d2:2a:c2:84:a5:af:9d:
                    72:7f:7f:eb:de:4d:be:84:e2:8d:75:69:2b:da:b5:
                    26:b8:31:49:88:53:f9:1c:dc:df:2d:03:25:e2:43:
                    36:bf:34:d6:16:aa:10:0c:c7:ec:75:c8:65:dc:2f:
                    33:47:38:da:64:15:92:e6:cc:89:16:3d:82:96:d6:
                    06:fe:11:54:74:36:a4:ec:d4:d7:85:b0:8a:37:d6:
                    e5:f8:24:d3:c3:95:9b:da:bc:bd:e7:8e:91:b9:e1:
                    2c:95:dc:f0:69:8c:db:f7:c5:8b:12:1d:1c:c1:03:
                    e0:0b:4a:5a:bd:9c:eb:48:26:94:c0:c2:63:73:d0:
                    fd:a4:aa:98:c4:0e:51:81:55:20:f3:c6:ae:c7:e1:
                    90:c6:f2:42:12:97:0f:82:fb:f9:1c:37:c0:34:10:
                    8b:31:2f:17:b9:e3:7e:1f:10:11:9f:40:36:fc:8f:
                    43:e2:25:d7:c7:75:84:65:7a:c2:e7:7c:d2:04:2c:
                    58:89:90:fb:56:2c:e1:ae:3d:67:cd:a1:2b:40:eb:
                    cb:d9:2f:72:8f:04:87:1f:7e:0d:36:3f:f0:8b:81:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:44:95:BC:9B:E8:CB:FF:E3:88:22:1A:3D:88:68:D2:3D:D8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:03:fb:c8:24:d4:35:f3:ae:6b:35:ee:41:fa:20:a0:30:
         8c:96:10:bb:26:21:40:55:bf:6a:bf:bd:0e:f8:7e:9c:a7:75:
         af:9d:6a:d7:7e:83:3a:6e:93:9a:76:a2:10:49:4d:af:cb:07:
         9e:01:0a:b2:80:48:b4:23:ea:e5:89:6f:e2:23:97:0b:bb:83:
         9e:f0:07:2e:85:64:04:5f:e0:fb:86:84:c2:30:a9:25:f1:9f:
         ba:05:72:26:72:53:0b:b2:90:48:bb:5e:5b:40:3b:96:3b:32:
         c2:cc:99:77:2c:f9:48:61:ec:53:11:e8:b1:dc:f1:75:12:27:
         d0:22:09:34:1d:90:b7:c7:3b:7a:d8:2f:d6:ec:12:6e:51:b3:
         59:83:42:40:ac:7d:98:18:7a:1c:94:a5:c1:58:22:ca:d4:a0:
         b6:90:72:3e:25:f1:2c:21:cd:99:68:ed:32:00:13:0b:c2:85:
         4e:d4:2e:b0:85:5f:60:ab:b9:54:eb:10:bd:69:25:9b:14:10:
         66:6f:80:ff:c1:ee:d6:3d:ad:77:51:17:af:39:91:84:90:06:
         38:df:c4:42:f1:62:fc:1b:b0:b0:31:36:d2:ba:3c:8a:e9:3d:
         87:ab:06:83:7e:17:8d:58:be:07:6d:f2:74:22:38:7f:e5:31:
         66:43:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:32:02 2025 by rpki-client