Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa
File:                     d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa (raw, json)
Hash identifier:          CVmhgUck1tKKcTCMzv2VGai6Fkz+wVOJmwCLdhzGH+o=
Subject key identifier:   4F:FD:11:97:E2:1E:AF:B2:B2:50:4C:65:59:C5:3B:1B:0C:52:26:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1966E6D8609717BA30440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        47.231.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:96:6e:6d:86:09:71:7b:a3:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ae08292c-76d4-4055-9a20-76fe5a489ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:a7:83:f5:c6:c8:5f:86:4e:21:22:02:48:
                    d7:1c:21:f9:00:8f:13:df:5f:02:55:26:42:ec:28:
                    27:a7:20:fb:85:30:f2:c3:5f:ec:0f:42:b7:37:a6:
                    a4:71:83:44:42:cd:ec:41:8e:c6:0d:ba:42:92:7f:
                    40:33:9d:2b:18:71:f6:27:f6:77:05:b6:59:55:1e:
                    e3:32:5e:24:5c:b8:63:dd:9f:0d:f8:88:49:81:ce:
                    a3:94:34:b4:a2:e7:06:c7:ed:7e:7d:7b:0d:74:14:
                    3d:d8:d5:c0:fa:26:9a:a4:42:86:4d:56:23:b2:1c:
                    8f:55:7a:ac:d8:a8:09:d4:35:0b:9e:d1:5f:27:9b:
                    de:49:04:8d:ec:f7:cd:8d:07:3a:06:5a:d6:de:c5:
                    be:13:bc:6d:54:23:59:e6:1a:59:0e:55:52:b7:de:
                    65:6e:37:bd:bc:6a:bd:98:12:20:90:ab:69:02:bd:
                    2a:a4:14:02:fc:05:cb:95:0c:55:c6:22:8a:d6:0e:
                    48:9c:74:2b:18:f5:32:99:6b:94:53:6d:09:21:cc:
                    a5:17:f0:a4:e4:87:70:50:6e:9a:88:8b:95:58:18:
                    8d:1b:af:70:d9:9e:43:3f:2d:73:f7:8c:c1:86:76:
                    f8:35:a8:52:80:c1:a7:4d:c4:c2:fa:95:d5:e6:4d:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:11:97:E2:1E:AF:B2:B2:50:4C:65:59:C5:3B:1B:0C:52:26:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9522943-be31-3f92-8fd9-b1d9d3be1d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:86:1a:0f:e2:ec:8c:9f:c5:fa:e6:98:11:c2:22:12:97:4a:
         4b:87:3b:25:2d:20:fe:14:fe:21:64:93:65:91:ca:a0:ad:4e:
         bf:af:4d:ec:61:f6:f4:a8:a7:76:47:37:93:38:f7:86:4a:25:
         82:75:74:25:96:c3:8f:4f:66:39:1c:b8:95:22:f6:1c:ba:58:
         20:6f:21:69:30:95:ba:6d:a8:bb:82:8a:ae:65:2f:cb:5e:59:
         05:e4:9d:f6:61:91:33:0a:ec:d6:a0:c3:da:97:63:36:05:bb:
         20:a6:a6:19:48:c6:c1:87:5a:7c:42:e1:0a:0e:7f:0e:47:7a:
         97:6a:04:61:91:bf:a7:10:82:91:0f:ee:f0:3f:a7:37:fa:4a:
         49:7d:2f:be:58:c9:25:89:20:0b:77:9f:79:e7:51:45:5e:96:
         fe:6c:4a:dc:c1:fc:1b:5d:93:58:f6:36:fb:88:2e:e2:21:3e:
         2e:14:34:0f:e3:d6:f0:dc:e2:69:22:90:df:43:c6:03:85:17:
         7d:6b:4b:6e:6a:25:07:ca:df:42:83:b1:63:fe:c9:25:a0:65:
         9f:8f:52:16:47:dc:69:e8:b8:7f:68:45:07:ec:1d:02:17:cf:
         3b:bd:3c:52:86:1d:e8:1e:99:80:a3:22:bf:6e:ba:33:c2:6c:
         e6:09:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:12:48 2025 by rpki-client