Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d2617ee6-c5ab-30ac-a293-18fd19096c38.roa
File:                     d2617ee6-c5ab-30ac-a293-18fd19096c38.roa (raw, json)
Hash identifier:          RJR8Laelpvs9Fecu1RH+dn2EmG+WpUQSN7HKBm3VAOs=
Subject key identifier:   3F:88:B6:AA:0E:FD:4D:64:A7:A9:75:2F:EF:92:D8:81:47:A2:8E:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B2E9566D26756D437E600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d2617ee6-c5ab-30ac-a293-18fd19096c38.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        96.38.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:2e:95:66:d2:67:56:d4:37:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=6793ffee-2c6d-4a76-b837-1c17ed9e367f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:96:81:9a:e4:25:e6:9a:1e:b0:75:cc:06:
                    5c:be:ca:6d:b6:cd:c2:aa:99:a7:8d:96:72:cb:a2:
                    07:27:3f:d7:8a:5e:7c:2f:b5:aa:d7:83:d0:00:aa:
                    36:4a:6a:45:26:22:ff:50:01:78:0d:3a:9c:eb:87:
                    2a:20:4c:63:cd:d6:2a:18:f8:d2:98:27:11:b9:96:
                    31:89:f2:ea:95:80:0b:df:e0:b2:cb:bb:01:d3:14:
                    51:4c:6b:f5:43:94:38:de:e6:70:86:9a:3e:72:06:
                    61:9d:58:b5:03:bd:b0:c0:92:ac:78:39:b1:ad:bf:
                    bb:70:5d:3f:0c:29:a2:f0:ee:cb:16:45:b7:ac:91:
                    81:51:cd:e7:eb:f9:5e:7f:a3:c3:67:39:88:00:91:
                    f6:71:1b:4f:d0:30:2e:1f:e0:5d:ca:58:01:0a:ed:
                    9b:c9:0c:3b:b2:21:8b:71:57:02:1d:0f:57:bd:e2:
                    38:e1:10:c6:e5:e5:d7:9d:37:4a:25:bc:8c:5c:50:
                    01:e8:12:bc:3a:fb:17:30:3d:48:19:89:24:c6:2c:
                    78:a7:a7:e3:12:46:f3:e9:e3:ee:2b:f0:71:70:63:
                    a7:e2:0f:78:da:8a:07:39:f4:2a:bb:81:e9:29:17:
                    97:53:19:1d:66:35:95:38:c3:8b:1e:24:af:db:a7:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:B6:AA:0E:FD:4D:64:A7:A9:75:2F:EF:92:D8:81:47:A2:8E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d2617ee6-c5ab-30ac-a293-18fd19096c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.38.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c8:98:5d:b9:69:72:57:6a:a9:66:77:b6:6e:25:65:b1:2e:
         33:c8:4d:dd:20:51:ed:ea:51:44:19:c6:d4:2f:29:4b:c3:8b:
         be:77:3a:3d:9d:f9:28:bc:9f:36:90:31:95:2a:63:56:f1:a8:
         f3:e3:ba:e1:fd:6a:66:e0:ca:80:cd:71:2f:8e:12:25:1f:2a:
         46:ed:3d:2c:27:ea:ae:1e:6d:9a:87:f7:a2:4f:5b:a1:c0:91:
         40:4f:79:91:80:da:87:cb:25:c8:3b:30:21:d4:08:5d:40:7d:
         eb:3c:3d:01:a4:1c:ac:5e:6b:0a:64:87:66:3d:6a:01:e9:00:
         39:ad:51:63:d4:95:78:65:75:76:93:b8:28:a9:2c:1c:d0:38:
         eb:f5:ea:58:01:13:9c:25:47:d9:e5:fd:d9:a4:86:ef:b9:28:
         2c:23:07:2f:19:00:72:8b:6d:0b:36:f1:1b:16:44:41:ea:bd:
         1d:b4:4c:b1:13:dd:6d:3b:ed:2b:d5:0b:3d:a6:8c:1a:b2:88:
         e0:33:4e:13:96:dc:c3:08:2a:07:39:8e:a9:05:04:14:39:93:
         f5:26:37:5e:ea:b2:57:62:a1:43:24:b5:04:85:e9:04:b7:88:
         84:32:ce:38:90:eb:6d:5a:2c:25:dd:13:e0:19:b2:05:3c:ff:
         b2:7a:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:35:48 2025 by rpki-client