Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce285755-063b-32dc-9beb-0b581268ac23.roa
File:                     ce285755-063b-32dc-9beb-0b581268ac23.roa (raw, json)
Hash identifier:          4k+i9CIVoj4LDp1zmhzFZxZgupKImyGI742SL1qs+YI=
Subject key identifier:   71:B0:F6:D8:80:84:26:D4:3F:4C:53:49:21:7C:85:77:87:B0:9E:64
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7BC54D5A259593DF5080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce285755-063b-32dc-9beb-0b581268ac23.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.40.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:7b:c5:4d:5a:25:95:93:df:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8ce65f84-916e-48b6-9a3b-769aa4588c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:ea:b7:4c:ea:ed:0c:b8:49:f1:14:ce:b5:
                    ed:ae:76:6f:fe:e6:ce:a2:8b:bd:4a:75:a5:de:6d:
                    35:b0:c4:dc:a5:8f:f1:27:91:5e:ef:c9:35:ac:96:
                    93:fb:69:17:91:49:18:b8:57:d1:1f:8b:cd:44:a7:
                    8c:7b:85:de:52:58:d1:13:0d:20:c9:63:19:56:b9:
                    1d:53:d2:6f:5f:e2:80:0e:4d:6e:82:b4:a8:cd:01:
                    e5:78:20:90:58:0c:2c:97:61:3f:2a:8c:d5:a3:11:
                    c5:36:f4:16:80:92:79:af:e5:67:29:46:85:3d:b0:
                    4e:6b:a5:64:13:e4:f4:67:ec:0a:d9:a4:b2:17:0b:
                    18:5d:42:b9:86:21:4e:e1:c6:19:35:e2:15:47:d6:
                    de:1f:51:77:35:12:96:63:0f:93:2d:7e:e5:2f:c9:
                    cc:2f:e2:da:c7:89:77:8f:88:03:79:fc:b9:7c:91:
                    45:7c:f2:5a:9d:d5:8a:34:ec:57:e6:4b:22:e2:5b:
                    9c:f4:43:fb:ad:7c:16:bf:19:35:e5:b6:fa:89:d0:
                    df:dd:bb:fa:f0:26:67:dc:8a:c8:83:fa:eb:0d:c0:
                    20:78:f9:34:f5:56:72:2e:b6:48:05:e0:38:96:d5:
                    ba:03:de:19:ea:48:a1:88:10:c8:bd:e3:89:40:ae:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:F6:D8:80:84:26:D4:3F:4C:53:49:21:7C:85:77:87:B0:9E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce285755-063b-32dc-9beb-0b581268ac23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:ce:bd:79:44:7c:0f:a0:e7:90:b3:a1:56:d6:8b:e7:6e:
         6d:d2:82:06:58:c8:a1:25:b9:69:06:fb:f2:7e:a8:b8:6a:64:
         2c:0e:65:d0:4f:73:34:b1:78:cf:7d:ea:4b:56:e6:c6:c9:2c:
         1e:3b:5b:20:b2:d3:1d:6d:7d:9a:bd:66:8d:f6:01:02:1c:76:
         a7:2a:00:01:20:73:d6:8c:e0:0a:d5:77:6b:3d:44:7f:e9:42:
         ce:18:da:be:3a:7e:d1:5e:80:68:7a:21:01:e6:cc:6b:b6:d7:
         7e:97:8e:69:ce:08:11:51:a2:74:f3:6e:33:99:fe:ac:bb:4a:
         6e:a3:d4:4a:0a:9a:f8:b6:51:12:d3:e1:17:d0:5d:fc:4c:00:
         9b:2b:ad:3c:9c:6a:55:fc:9c:df:43:af:1b:14:83:d9:2f:b5:
         ba:aa:74:2e:50:b6:73:9d:fc:2b:03:15:47:b8:ca:ca:d3:ca:
         af:24:d6:06:66:c4:b5:0c:0c:6c:4b:e0:46:bb:6d:86:5c:34:
         fa:57:9d:61:21:43:95:c1:ad:64:a7:fb:66:e5:86:7f:06:49:
         45:6a:ea:34:0f:01:49:ef:d8:6d:57:ac:ed:2e:76:c6:1c:79:
         9e:d3:4a:17:99:87:26:04:9d:14:f8:bf:97:51:a5:d5:a8:2e:
         d5:05:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:32:18 2025 by rpki-client