Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef90d0a1-faab-3423-ae85-1606fd205966.roa
File:                     ef90d0a1-faab-3423-ae85-1606fd205966.roa (raw, json)
Hash identifier:          7FO60KRRje1G8wehAXH43Ksa5uZYVI5N+sRgWr1p0Xo=
Subject key identifier:   C8:AA:5A:29:B1:AC:B9:BA:47:A8:85:BF:BE:63:8C:BE:65:7C:2B:96
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858489A3B4A4EFD8006BB00280CC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef90d0a1-faab-3423-ae85-1606fd205966.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     20115
IP address blocks:        47.42.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4a:4e:fd:80:06:bb:00:28:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=53b38de7-bcfe-4cb2-9ab8-c7ab1db1d2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:86:2d:6b:84:db:d7:10:ec:c4:ce:87:81:
                    74:c9:15:0c:b8:95:66:f5:c3:f0:19:c7:d1:58:5e:
                    9d:bf:01:7c:6a:76:7c:57:a0:25:35:13:1d:67:b8:
                    de:8c:8c:b8:92:3c:43:89:23:ac:ad:16:ff:3a:c2:
                    c8:54:2a:e2:bf:da:98:f5:a5:20:80:49:4d:73:8f:
                    88:90:fd:ce:1d:98:dc:60:d1:07:bb:d7:9c:00:2b:
                    2d:1a:ca:cc:91:80:73:79:b9:3e:1b:53:a9:c2:e4:
                    f1:fb:5e:b2:52:e5:7e:85:f1:26:73:49:3d:08:3d:
                    f2:be:37:f9:88:e0:b2:2e:45:8a:07:a9:8c:22:8a:
                    30:ed:5e:dc:73:87:de:e5:16:92:4e:47:2c:24:fd:
                    19:b5:2a:5f:62:9b:bb:87:29:2e:3f:2c:2b:44:d6:
                    eb:f7:9d:8a:1f:c5:79:6b:eb:31:ae:7e:ab:b9:3b:
                    1f:06:63:c1:8d:56:22:0b:05:1b:08:f2:82:eb:6c:
                    e4:a0:62:64:06:ff:b1:c8:24:c5:5e:e0:39:09:af:
                    93:ca:ac:a8:3d:91:8c:37:54:90:3a:ba:2f:d0:fe:
                    8b:93:4a:33:5f:d1:f4:54:96:bc:58:36:b7:f2:45:
                    83:a7:65:69:56:ce:07:08:d6:b6:9f:f7:ed:19:64:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:5A:29:B1:AC:B9:BA:47:A8:85:BF:BE:63:8C:BE:65:7C:2B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef90d0a1-faab-3423-ae85-1606fd205966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.42.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:a4:cd:81:1a:59:c1:cb:54:fb:46:02:c3:31:4b:d3:19:
         30:b3:94:42:56:53:e6:a2:b3:11:da:e0:ce:64:fd:b8:0a:6e:
         c5:81:fb:66:f8:de:99:00:ab:7d:1c:40:6c:99:eb:96:68:2a:
         99:9b:f5:49:bc:77:d5:6a:68:ea:c3:b6:fd:95:ed:53:b0:87:
         81:d6:05:d4:e0:cf:f1:e4:07:04:d8:57:9b:2b:4b:2c:74:8a:
         81:c4:7e:5b:c9:90:40:1c:18:7f:e5:61:d1:da:8e:a2:1e:72:
         2d:4d:ae:cc:4b:cf:aa:74:77:42:cb:aa:54:b1:7f:1f:f8:84:
         73:c6:ee:40:8c:7c:c3:f0:58:ad:54:7b:2f:dc:77:f3:12:d2:
         0e:6f:98:43:6e:88:f0:b5:3d:05:c4:14:9d:d9:52:a1:2d:38:
         9b:da:5a:43:77:84:cb:26:75:7d:15:59:d0:76:83:55:a8:66:
         43:4c:a2:4a:b6:dc:0c:c3:eb:a8:4f:71:8b:5b:95:0c:52:29:
         c6:f8:13:c8:9d:81:d5:0c:81:95:8d:a5:10:11:30:41:82:ff:
         19:0d:e0:01:ad:d8:5f:f0:91:b2:b4:3e:fd:86:a2:e8:49:45:
         c5:bd:63:b1:fd:56:b0:b3:e7:b9:86:05:23:3f:4b:a8:b4:e4:
         15:6d:de:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0pO/YAGuwAoDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NTNiMzhkZTctYmNmZS00Y2IyLTlhYjgtYzdhYjFkYjFkMmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyKGLWuE29cQ7MTOh4F0yRUMuJVm9cPwGcfR
WF6dvwF8anZ8V6AlNRMdZ7jejIy4kjxDiSOsrRb/OsLIVCriv9qY9aUggElNc4+I
kP3OHZjcYNEHu9ecACstGsrMkYBzebk+G1OpwuTx+16yUuV+hfEmc0k9CD3yvjf5
iOCyLkWKB6mMIoow7V7cc4fe5RaSTkcsJP0ZtSpfYpu7hykuPywrRNbr952KH8V5
a+sxrn6ruTsfBmPBjVYiCwUbCPKC62zkoGJkBv+xyCTFXuA5Ca+TyqyoPZGMN1SQ
Orov0P6Lk0ozX9H0VJa8WDa38kWDp2VpVs4HCNa2n/ftGWSTHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiqWimxrLm6R6iFv75jjL5lfCuWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWY5MGQwYTEtZmFhYi0z
NDIzLWFlODUtMTYwNmZkMjA1OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLyr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+rpM2BGlnBy1T7RgLDMUvTGTCzlEJWU+aisxHa4M5k/bgKbsWB+2b4
3pkAq30cQGyZ65ZoKpmb9Um8d9VqaOrDtv2V7VOwh4HWBdTgz/HkBwTYV5srSyx0
ioHEflvJkEAcGH/lYdHajqIeci1NrsxLz6p0d0LLqlSxfx/4hHPG7kCMfMPwWK1U
ey/cd/MS0g5vmENuiPC1PQXEFJ3ZUqEtOJvaWkN3hMsmdX0VWdB2g1WoZkNMokq2
3AzD66hPcYtblQxSKcb4E8idgdUMgZWNpRARMEGC/xkN4AGt2F/wkbK0Pv2GouhJ
RcW9Y7H9VrCz57mGBSM/S6i05BVt3hA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:18:28 2025 by rpki-client