Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dbda3b62-856c-3d5c-b882-d757435b2ef3.roa
File:                     dbda3b62-856c-3d5c-b882-d757435b2ef3.roa (raw, json)
Hash identifier:          l56H9CxrDVBod/5WcP04jE5Ct06GVND4zuAsqdgoQB8=
Subject key identifier:   F3:6B:0B:B5:EA:76:85:C5:CE:66:DE:31:4A:DE:85:78:F2:C3:2E:FC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F0CE3353D44C25B4A794
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dbda3b62-856c-3d5c-b882-d757435b2ef3.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        47.38.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f0:ce:33:53:d4:4c:25:b4:a7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=493743e5-b4d8-4562-8e89-8180f96c60a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:ce:86:50:25:f6:4d:ba:63:d5:bc:f2:31:
                    82:a7:d7:e0:b1:81:6e:c4:21:4d:a3:f1:93:e1:a5:
                    15:cb:ff:98:3e:79:4a:bf:02:c8:ad:08:95:34:f7:
                    ee:42:3a:05:6c:80:f7:74:0e:19:8a:9d:cf:c2:9f:
                    32:43:5d:0b:63:05:b4:8e:c3:90:fb:c4:b6:9e:51:
                    46:8d:ec:18:bc:7d:f8:e5:c7:54:a0:7d:8a:d2:0e:
                    d7:f5:0d:aa:48:c1:33:f4:53:27:34:2f:82:30:ff:
                    f1:33:d2:c2:ef:87:c6:b6:14:f9:95:bd:3c:13:42:
                    8b:65:97:f6:a4:27:e9:87:58:0b:57:00:53:29:85:
                    2e:11:0e:7d:7e:38:ff:dc:75:60:96:30:db:8f:85:
                    34:5f:ef:5e:f3:4f:f3:ce:fb:90:62:95:f7:25:46:
                    36:57:1e:9b:89:34:56:5f:2a:73:69:53:77:48:1d:
                    52:d1:0c:c7:f0:81:e1:be:fc:3d:13:8e:0f:ef:a7:
                    dd:7f:36:4b:ee:dd:11:14:5e:30:a3:6f:61:e4:1f:
                    78:56:0b:48:ba:fa:95:38:f1:a7:2a:9f:f3:f1:ff:
                    f8:a8:02:c2:34:c5:86:4e:3b:e5:64:63:dc:3b:f6:
                    17:3e:79:b3:c0:74:27:ea:78:e3:8e:3c:d0:97:bd:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:0B:B5:EA:76:85:C5:CE:66:DE:31:4A:DE:85:78:F2:C3:2E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dbda3b62-856c-3d5c-b882-d757435b2ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.38.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:12:19:4f:76:b0:0f:6c:99:14:c8:c1:5f:bb:0f:eb:93:
         c3:7c:11:d8:13:aa:b6:73:26:3b:44:89:04:37:35:66:a3:e8:
         d8:14:bd:0b:2e:ea:e0:48:a0:bd:0c:9c:a1:0f:09:e1:37:9a:
         ba:55:69:31:80:34:35:37:e8:4b:83:8e:0f:dd:09:10:e8:87:
         c5:0e:74:fe:b4:bb:05:e6:d8:3e:4e:fe:57:9a:c0:e4:40:5f:
         2e:0f:da:fd:85:7a:22:69:45:8e:e4:55:4a:55:bd:17:74:db:
         01:d3:a0:4e:7c:1b:06:04:22:25:05:26:b2:b9:7e:29:00:dc:
         05:59:be:fa:0e:08:54:03:3a:61:a3:6e:a0:c8:81:26:26:26:
         00:6d:26:8c:c5:15:15:ee:fb:4c:b3:50:9f:1e:9c:4d:64:1c:
         07:ae:9b:7e:97:df:95:8f:46:c3:0b:e7:8c:36:93:b5:97:1b:
         5c:05:fa:b9:fb:41:0b:dc:7d:62:7d:c3:8a:1e:9c:2c:bc:52:
         d6:61:0b:41:a9:56:6f:e3:b8:b5:2a:cd:0f:cc:f0:71:cf:51:
         7a:5a:a1:01:ac:3e:57:64:77:12:bf:f5:81:35:f5:e6:e9:aa:
         d6:5b:ad:6a:cd:b8:4d:d2:cb:f3:3a:b6:f4:b0:fe:94:bc:ff:
         6b:85:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:37 2025 by rpki-client