Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/581c8702-a7b5-3720-a7df-c82d97ac4798.roa
File:                     581c8702-a7b5-3720-a7df-c82d97ac4798.roa (raw, json)
Hash identifier:          9AKuwBuZRq9OTKyW2VtcNpP+B28jgCoqnt1bOLHfd88=
Subject key identifier:   4D:E2:E1:00:9F:B3:A8:7D:9A:58:80:E8:B8:AF:1F:FA:18:9D:00:E2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F5F7E1ECC32211419B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/581c8702-a7b5-3720-a7df-c82d97ac4798.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        47.44.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f5:f7:e1:ec:c3:22:11:41:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=fad3e4d6-e5dd-47a0-a3d8-2e79fab4ac18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:df:b2:88:00:a0:17:09:10:c2:93:60:cd:
                    e9:f6:19:02:51:7a:44:dd:68:27:15:9d:34:4e:a6:
                    56:10:a3:ef:10:89:61:f0:35:c0:53:92:69:db:88:
                    b1:35:7f:c5:a4:c2:0d:ed:73:5d:d5:44:a7:a3:83:
                    9d:10:a4:b2:5d:4b:f5:c2:a6:23:94:9f:44:9a:c0:
                    61:5f:9b:b9:a8:be:f3:47:63:43:08:b9:32:a4:b2:
                    05:aa:7d:50:c5:de:9c:0f:5d:52:95:d5:17:1b:d7:
                    f6:50:f7:05:18:e8:8e:42:4e:44:24:9a:2b:51:1f:
                    d4:6f:29:75:43:7b:31:e3:fe:f6:d7:b2:08:79:dd:
                    8e:11:7c:0e:15:61:8e:c1:28:d7:a5:df:12:46:f5:
                    90:01:48:a8:ba:95:be:ca:bf:b9:83:49:11:48:cf:
                    b3:f9:6c:f6:37:a8:19:5e:a6:16:bc:ee:bd:ac:f6:
                    6d:ef:23:03:6c:40:0c:2e:49:5e:86:9a:ee:48:ef:
                    60:4d:7f:c1:ce:58:86:ea:b0:dc:64:0f:b1:67:3a:
                    2a:c2:8a:23:5d:dd:97:dd:81:2b:9b:99:67:3e:3c:
                    f0:c3:20:45:d2:be:f0:98:cf:5f:b2:7e:ac:8f:b4:
                    c7:56:9c:8e:00:e6:de:78:fd:90:44:60:26:e6:f7:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:E1:00:9F:B3:A8:7D:9A:58:80:E8:B8:AF:1F:FA:18:9D:00:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/581c8702-a7b5-3720-a7df-c82d97ac4798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:63:e9:7b:68:c7:04:33:a6:f8:e8:dd:0f:05:da:2f:32:3a:
         a3:3f:e8:45:3e:3b:67:68:74:92:37:15:ba:3c:a3:b8:c2:7b:
         21:d6:24:8e:44:a3:0f:d4:99:c4:3e:9b:15:cd:6a:7b:37:24:
         3b:bc:91:45:55:72:c9:cf:c7:31:44:78:73:e9:f2:6f:3a:c4:
         35:97:f4:49:8e:d6:c7:49:16:70:0b:16:15:73:5f:bf:e4:2c:
         f5:a2:1c:ac:77:9a:cc:b3:de:d1:7c:b1:5a:57:33:e5:df:fe:
         1e:0c:32:2a:a2:e4:ea:d7:8a:35:14:c5:8b:45:ba:7b:d9:42:
         1f:4d:c9:90:2b:ea:4d:ef:fc:4b:9e:8a:21:3f:d6:2a:5f:d4:
         72:1e:33:be:b4:4a:3e:dc:2f:45:ca:58:75:df:07:80:6d:32:
         8a:bd:7d:ec:59:3e:e3:a3:16:77:a6:ba:51:d3:1b:b5:f7:f6:
         1f:f1:7a:91:4a:dd:ea:0a:c4:15:a4:8b:16:06:46:a5:56:2d:
         08:94:01:9e:58:ad:8d:2f:9b:5d:52:de:73:1e:34:94:4a:e5:
         b9:7f:41:3f:72:24:05:73:e0:34:24:54:1c:ce:22:9f:0e:96:
         32:ae:23:52:78:e6:84:da:5d:0c:8c:1e:84:93:8f:c1:ec:16:
         41:d3:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:09 2025 by rpki-client