Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96e1704-a72b-3411-944c-32fc8a7a4d30.roa
File:                     b96e1704-a72b-3411-944c-32fc8a7a4d30.roa (raw, json)
Hash identifier:          lWIIFAqSV98NGLki2GrAdE/YdRZDzfZo+byuBrAZaRQ=
Subject key identifier:   7F:6F:4C:0E:39:A2:03:03:65:7E:EA:A9:B8:74:93:4A:E8:F0:8B:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0055DDF8A40DC59B2F6A
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96e1704-a72b-3411-944c-32fc8a7a4d30.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.42.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:00:55:dd:f8:a4:0d:c5:9b:2f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b55b7910-9d09-4bad-b694-5a4fd7d2b0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:a5:cf:e1:fe:36:1f:18:14:63:d7:56:0a:
                    23:d4:5a:97:23:a6:52:dc:36:4f:52:91:d1:56:e1:
                    90:3f:c5:1f:e5:86:27:b7:d3:c8:5c:71:fd:e4:37:
                    d4:62:ba:11:54:66:77:4b:9a:75:53:18:35:84:2d:
                    7b:5d:49:bf:b2:e2:80:1a:f8:68:96:cd:c0:45:1d:
                    e9:8b:26:7b:c2:fa:84:81:b7:8e:a7:5f:d9:94:12:
                    af:dc:55:97:4c:84:6f:b9:3b:9d:de:08:1f:43:09:
                    2d:da:5e:19:8c:83:2c:a4:58:79:2c:e8:f6:0b:1b:
                    11:35:0d:7e:84:0a:fd:48:48:16:c4:55:6e:8e:c5:
                    af:60:a3:26:18:7a:8e:fb:a0:73:28:25:9b:b6:c0:
                    e5:81:89:1b:07:6c:44:b4:10:b6:9f:d8:22:48:1f:
                    a8:7c:f0:29:02:80:3e:fb:af:51:c2:c1:b9:55:2d:
                    1e:7d:ea:81:7a:8e:f2:a1:57:23:69:f8:f1:70:5e:
                    47:7d:14:3a:75:cc:1c:7b:60:85:3c:8b:42:f9:d1:
                    90:0d:6f:82:9b:d6:be:10:8b:e2:32:ef:4d:98:1a:
                    ca:e6:10:bf:2d:f8:83:f3:d6:91:16:c7:e1:78:49:
                    6f:a7:7a:b0:20:9f:a9:7b:56:86:f6:79:b2:32:74:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:4C:0E:39:A2:03:03:65:7E:EA:A9:B8:74:93:4A:E8:F0:8B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b96e1704-a72b-3411-944c-32fc8a7a4d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:55:41:6a:7f:d1:34:35:62:fe:03:1c:57:62:5b:52:90:47:
         b4:b8:47:c3:34:43:34:91:f7:74:28:34:2e:9c:98:1b:99:af:
         e7:1e:64:eb:97:58:b1:9b:ce:1a:61:90:b6:e8:da:92:bd:f2:
         1b:ad:b6:c0:5d:f4:e8:33:bb:4a:4f:62:ed:ab:84:5b:ab:5f:
         38:fd:9c:d5:de:33:86:3a:8d:21:86:b3:4b:cd:54:a1:d2:44:
         80:92:7a:60:13:98:f3:7f:e9:02:3a:be:21:3d:c5:76:66:aa:
         0f:b1:39:ce:a7:48:6b:e4:4b:25:a9:2b:cf:e5:47:b3:d2:99:
         bc:ed:eb:96:ee:47:f5:a2:83:92:af:e2:ec:ce:d6:06:a8:40:
         14:65:fc:79:78:00:b5:8c:f3:0f:79:41:e8:07:31:b5:ca:f7:
         46:0a:e6:f4:41:9d:f7:c0:d0:43:ea:d2:45:79:80:0d:e5:d7:
         0d:9a:51:b0:48:99:36:a1:0a:58:f3:06:60:8f:b6:5d:11:21:
         23:7a:5b:0e:3d:a9:1a:b8:b1:0d:b6:52:3d:53:35:88:45:05:
         e1:e3:db:85:06:f3:6b:34:be:5f:3a:8f:c9:f6:b4:27:2b:7b:
         01:0d:f6:02:6b:42:2c:ee:b2:e7:01:12:c6:9a:b3:76:d3:07:
         38:d7:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:30:32 2025 by rpki-client