Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af5eabe9-e33b-3953-867a-004f8bf5118b.roa
File:                     af5eabe9-e33b-3953-867a-004f8bf5118b.roa (raw, json)
Hash identifier:          hxJVA49PMshIj7ywLz9LV6SyR2GQ3DVsJm8DaUfDuN8=
Subject key identifier:   AB:72:CE:EE:47:1A:B9:43:AF:44:32:A1:20:92:55:EF:34:46:65:95
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF67242F0E77FA7D30650
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af5eabe9-e33b-3953-867a-004f8bf5118b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.27.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f6:72:42:f0:e7:7f:a7:d3:06:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=83a91a98-1680-4cc3-8616-e090caab4c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:c9:09:15:b2:8b:00:01:59:9f:f8:74:be:
                    38:e3:87:97:6d:0d:b3:5c:0a:67:13:ae:20:a9:02:
                    cb:91:ee:58:ea:4d:73:47:b4:2e:05:49:24:09:78:
                    46:a0:0c:b4:4b:9e:25:dc:7d:b7:b2:5f:0b:2d:fb:
                    29:c7:62:f8:1e:a9:23:f4:ef:ed:f4:59:b7:ef:48:
                    5e:e2:a5:6b:97:53:e5:05:ce:ff:f7:8d:fe:4a:8e:
                    0f:f4:59:9c:84:4f:dd:64:9a:f8:d2:b1:fc:db:49:
                    00:0e:45:c7:55:11:49:25:79:52:d1:4c:2e:e8:f6:
                    36:38:f2:dc:f0:4a:8a:4a:d9:05:82:0a:e3:53:19:
                    fd:7d:7e:5e:ec:00:59:73:a3:07:ae:02:0d:57:26:
                    2d:a0:58:53:24:17:4d:d5:5c:ef:99:47:56:9c:c9:
                    2f:b7:28:9f:83:13:65:89:80:fe:3a:18:9e:da:36:
                    f4:58:fd:88:91:cb:74:6f:8a:c1:f6:b3:a2:e6:22:
                    4a:d8:fb:d4:5b:f3:3e:7e:2e:4e:36:1f:a5:ad:da:
                    d8:ad:9e:af:1c:a9:78:82:25:ab:16:a9:c2:f6:40:
                    7f:19:93:ff:b6:72:51:cb:84:26:a7:4e:22:96:f9:
                    89:6a:92:b0:36:db:6b:af:30:24:ad:73:d2:92:fc:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:CE:EE:47:1A:B9:43:AF:44:32:A1:20:92:55:EF:34:46:65:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af5eabe9-e33b-3953-867a-004f8bf5118b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.27.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:52:de:24:c8:c4:76:0d:21:c5:be:ae:c2:67:2d:ff:92:
         3e:85:1e:25:52:6a:ae:68:0d:2e:07:20:fa:99:31:d2:e5:c1:
         b3:a6:2b:b9:fc:c4:ba:d7:06:f5:7e:9c:b7:fe:61:8b:41:d2:
         b3:b2:6b:04:0b:be:5d:2c:12:24:fc:66:88:d9:3c:54:94:cb:
         06:4b:9c:2f:ce:d9:07:3e:71:a3:04:6d:5a:5c:3f:90:07:50:
         3c:54:2c:60:eb:9b:2d:61:45:34:92:22:cd:43:a9:39:69:80:
         78:cb:4a:01:26:f5:58:ca:e1:4c:86:8e:55:0f:e4:60:49:ce:
         8c:56:ad:ba:f0:56:e7:14:81:19:3b:71:af:0e:9a:69:f9:ef:
         8d:f7:c6:17:02:c1:98:b9:10:aa:a1:05:b2:da:75:d2:a0:68:
         98:91:96:11:08:32:00:a9:fc:63:69:6f:3e:52:05:dd:c4:15:
         e0:e3:47:b7:8b:eb:d3:05:17:bb:d1:f3:b4:76:ee:f7:3c:fd:
         f1:41:94:df:ec:53:2e:e3:58:7a:ff:1c:f4:34:52:c0:96:bc:
         c6:22:2f:dd:98:b9:9a:4a:d4:4b:73:d5:9c:73:f4:1c:f3:53:
         bf:a8:51:69:55:7e:c0:9b:fb:7a:39:1c:1d:f1:32:5d:84:66:
         34:d5:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:12:59 2025 by rpki-client