Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a4e2d62-bec9-3f92-98ac-6f333905e9de.roa
File:                     3a4e2d62-bec9-3f92-98ac-6f333905e9de.roa (raw, json)
Hash identifier:          NPu87H90h7e3sq3iZCQ7WgR4al+omfEA4ASZiwi30I8=
Subject key identifier:   B1:CC:C7:62:03:64:EB:D2:41:B8:95:13:F7:B1:A5:0E:EE:8D:42:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D174687E826D6C8DC2C7C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a4e2d62-bec9-3f92-98ac-6f333905e9de.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        47.44.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:74:68:7e:82:6d:6c:8d:c2:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d7acda6e-6632-4b90-95fd-cff45cae6b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:2d:c7:5a:98:92:4e:9a:f1:b8:4a:5f:3f:
                    9f:4f:66:db:ea:e4:4c:61:ae:d7:c6:6f:ff:33:d2:
                    4d:18:18:f5:41:ce:0f:a9:c7:f9:20:ab:c4:88:13:
                    30:2e:94:13:16:d8:5f:da:1c:0d:ab:c9:20:1b:98:
                    73:b6:f7:0d:ae:5e:46:45:74:19:54:52:9a:18:52:
                    78:68:33:2c:c1:6e:40:5e:bb:c2:30:df:dd:15:ba:
                    93:bc:5d:41:91:bd:d9:39:1e:13:85:c5:e6:97:dc:
                    da:c7:b8:0b:87:fd:0b:88:6a:cd:b6:d0:88:54:41:
                    5c:5d:54:b2:70:61:ec:75:b0:27:06:74:80:76:6f:
                    41:78:b7:b4:47:55:80:9f:3f:c5:66:cb:22:79:70:
                    5f:9d:7d:27:0d:d2:a0:87:e5:af:7a:26:c7:d2:90:
                    79:eb:a7:97:df:c9:08:fb:83:82:71:dc:6f:4f:45:
                    7c:51:50:88:7c:fc:21:e7:06:93:5c:97:a8:4a:ec:
                    48:c6:57:c6:b4:57:1b:85:b6:02:5f:77:95:9f:64:
                    84:18:a3:7d:51:ff:5b:b6:a1:32:6c:72:05:c8:58:
                    bd:95:32:35:50:ee:1d:67:31:4c:5c:f0:7d:f7:c4:
                    56:d5:db:c6:b6:64:ba:17:b2:2d:bb:4e:c5:39:24:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:C7:62:03:64:EB:D2:41:B8:95:13:F7:B1:A5:0E:EE:8D:42:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a4e2d62-bec9-3f92-98ac-6f333905e9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:4b:fb:b3:f0:7b:35:15:f7:3e:5f:df:93:dd:c7:b6:b5:
         8d:3c:e9:75:f7:49:95:44:a7:99:64:3e:b3:40:48:f7:d0:64:
         2a:cf:14:f8:f5:4c:f2:90:ed:43:57:62:ee:1a:de:bc:76:42:
         4a:e7:92:0a:19:a9:fd:41:5d:02:4b:6f:69:f4:14:cb:f4:e8:
         4b:ab:e7:07:73:e5:92:b0:e6:7a:79:cf:19:3d:ea:65:ae:69:
         6a:60:c4:a6:16:c9:5b:dd:5d:c0:f0:2f:d0:8f:6a:2d:ba:fc:
         73:4d:f7:be:9b:1d:33:1c:99:68:05:20:fb:96:ec:f6:94:44:
         8b:34:11:38:09:d2:96:d2:bf:d2:e4:e8:03:25:6d:95:95:60:
         41:50:db:d5:67:52:0f:31:9c:6c:6f:6f:7c:84:25:0f:af:e7:
         0c:50:ad:61:7c:d5:64:3e:3f:13:95:c2:ad:be:4d:e6:65:8d:
         86:fa:f0:98:ba:8d:07:ea:54:aa:51:2d:af:7a:1a:9b:2c:33:
         26:6d:fc:bc:ff:9d:fa:11:2d:a6:6a:cd:cd:06:43:26:07:c2:
         e2:fa:04:63:eb:36:ae:1b:dc:7a:d9:df:3b:1a:7c:c7:2c:63:
         8f:cc:fd:0c:a3:21:12:f3:c7:6b:a5:fe:d3:b9:ff:eb:58:46:
         59:7c:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:27 2025 by rpki-client