Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa
File:                     d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa (raw, json)
Hash identifier:          u84zmh8+0js9YJitoTAi1jWaauczfgS98hOQzW/eNLo=
Subject key identifier:   B3:60:50:A8:5C:02:E9:BB:72:13:AF:7E:A9:3E:0C:27:EC:C1:17:8B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1A144623A9D3A866A6B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33753
IP address blocks:        47.45.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:a1:44:62:3a:9d:3a:86:6a:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=11762773-3bd3-498f-acae-5f6f4aebb217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:73:c9:9f:93:37:71:d2:30:b9:6f:6a:be:
                    f1:aa:b9:33:71:92:1c:4c:ff:1a:2f:21:9e:2c:b5:
                    a2:d7:4e:d8:7e:fe:14:9a:4c:a2:14:2a:d0:4b:26:
                    7b:67:be:e9:09:bb:fa:e2:79:f7:56:47:57:43:97:
                    b7:63:8d:85:9e:56:39:94:66:84:ef:d9:6a:b9:1e:
                    e9:2f:06:c1:77:6e:f0:da:00:05:b2:2c:e2:50:76:
                    65:a8:45:a5:3c:32:94:7c:30:4d:5a:10:ce:32:61:
                    fd:15:f4:f3:3d:40:9b:56:5d:22:43:12:2c:47:e4:
                    84:12:21:41:19:7b:2f:47:8e:92:ac:e4:c9:91:4e:
                    a3:5d:11:97:cf:1e:7b:e6:90:fc:0b:58:44:2a:2f:
                    8e:19:f2:4f:f3:66:81:e7:3e:c4:68:23:f0:83:3b:
                    f1:5a:3b:f3:01:0f:4a:33:68:5d:c6:83:b6:54:d2:
                    62:d9:86:19:b2:a8:49:2b:2c:94:ff:f5:11:bb:9b:
                    fe:5b:15:95:e4:e7:60:82:7f:96:25:15:94:06:30:
                    bd:79:82:e6:de:a9:97:90:67:1e:a1:78:39:a5:46:
                    83:6f:9c:4b:21:f9:93:e7:4f:b2:90:24:46:60:bf:
                    e5:02:f4:4c:4d:be:4d:e3:88:8c:1f:e6:d1:71:5a:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:50:A8:5C:02:E9:BB:72:13:AF:7E:A9:3E:0C:27:EC:C1:17:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:9c:9b:4b:09:2e:f4:2f:45:8c:c7:07:43:8b:7d:dd:cf:9b:
         f0:09:b0:c1:6d:d2:ee:6d:5e:73:2c:30:5a:2c:1c:2a:b8:ef:
         b4:f3:73:e7:fb:7b:e2:f8:01:d8:ef:ce:fe:18:5b:62:df:6c:
         d9:74:08:c9:4f:1e:5c:a9:e8:5d:6c:3e:44:25:6f:e2:26:ee:
         80:fa:0f:77:30:6d:01:1d:ac:a7:0d:20:f4:f6:43:82:41:18:
         f0:76:97:de:4d:ad:a5:c1:22:eb:14:0f:cd:cd:db:2b:8c:c4:
         30:3d:e3:33:56:79:0a:54:64:53:c1:ee:30:42:98:cf:e8:76:
         1f:29:67:74:eb:b5:6f:bc:b4:fb:5c:e9:b3:31:5f:43:04:54:
         02:f1:df:25:4a:19:d3:31:56:d7:10:d8:ee:d4:eb:e8:10:3e:
         b2:9e:a4:9c:74:1b:b6:1c:89:21:3e:71:f3:ea:8a:62:12:60:
         80:3a:07:2f:0e:5c:b5:41:b9:12:5d:14:72:a0:e4:ce:6f:25:
         aa:34:c4:f6:72:e1:fa:f3:ad:b7:34:22:8a:d8:92:bf:5e:5b:
         65:29:08:7b:15:82:3e:b9:8c:83:8c:b9:97:81:41:69:c2:a9:
         70:91:8c:a3:80:03:11:7b:64:5c:c1:54:65:b5:13:39:5e:d8:
         74:26:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:36 2025 by rpki-client