Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/442cf4d3-7d4c-366c-b775-72d186df2ced.roa
File:                     442cf4d3-7d4c-366c-b775-72d186df2ced.roa (raw, json)
Hash identifier:          5yxTfuQ0irczDNUkyF6T12QSh0Oj7Z5ZnSnDh5VQaas=
Subject key identifier:   84:90:40:D8:8B:E6:14:B2:CE:A8:4F:C7:C5:44:D3:D4:E2:30:EB:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D19E57B5315EF5A6E78EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/442cf4d3-7d4c-366c-b775-72d186df2ced.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        47.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:9e:57:b5:31:5e:f5:a6:e7:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3a97028f-4657-4378-bd2a-ae3ad4686a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:00:ce:ee:4a:15:f1:b0:81:9e:41:75:d6:40:
                    d7:cc:64:5a:b1:e7:e8:42:17:f7:93:ac:7f:19:f1:
                    87:6d:60:aa:88:69:fd:9c:48:ea:fe:26:fb:76:06:
                    85:c4:e9:cf:83:f5:c9:99:18:c6:a2:01:64:32:4c:
                    7f:97:fe:26:24:9f:6e:3b:9b:0f:9f:37:b5:8c:60:
                    b1:a2:59:71:60:cc:82:0a:7e:ce:f6:ff:c3:88:4c:
                    ab:ef:51:c2:0a:96:a6:3d:75:9d:85:6f:82:61:94:
                    dd:8e:c5:fa:e3:2e:15:4c:bb:3c:da:dd:db:9c:12:
                    67:0a:5b:ee:af:17:a1:b9:10:a9:18:8c:cb:53:bf:
                    ff:ae:43:cd:3b:30:ed:b3:d5:57:ce:82:ee:17:55:
                    5e:22:81:d2:d5:09:ac:7e:7d:5f:a4:21:58:e1:45:
                    5c:81:2c:d2:25:c7:b2:78:17:19:86:4c:72:80:d1:
                    8f:55:d0:2b:0a:f3:fb:36:f9:8d:81:5a:fc:64:6b:
                    62:77:c7:d2:3c:4d:51:51:53:55:f2:ec:f3:9f:a0:
                    10:44:22:d2:2a:3e:ac:53:73:8b:d5:66:9c:48:7c:
                    9f:99:e5:c2:2b:7e:d7:82:21:d4:52:9f:31:48:3d:
                    30:c2:e5:80:5b:ad:d1:fd:af:76:d1:7e:ef:88:d8:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:90:40:D8:8B:E6:14:B2:CE:A8:4F:C7:C5:44:D3:D4:E2:30:EB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/442cf4d3-7d4c-366c-b775-72d186df2ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.249.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:d8:41:e3:04:63:70:be:66:07:40:1b:c1:24:7a:38:95:
         d8:c9:4a:45:6a:39:0c:17:89:21:04:cb:93:79:2d:20:55:c6:
         c6:20:c6:0a:79:ab:93:34:11:0c:66:35:d7:11:2e:80:c4:2e:
         db:24:7e:98:41:77:55:2b:6d:2f:d0:7b:87:6f:9c:61:72:63:
         71:0a:a5:d5:e9:06:d5:5d:04:93:74:a3:fb:7f:6f:6a:28:88:
         c6:83:27:0e:76:49:50:b9:0b:b3:98:b4:2c:29:28:70:1a:20:
         26:01:d3:29:1d:94:05:f5:5c:f4:83:ed:67:4d:77:28:9b:d6:
         4f:4d:c7:34:0f:cb:cb:1d:fe:f4:99:d6:09:6e:4e:f8:b6:d3:
         bf:86:16:2e:39:38:18:58:d2:d2:2c:db:16:42:0e:9c:97:e7:
         b1:a1:c6:25:8b:e9:3c:e6:bd:c7:7e:25:72:b4:a0:d5:8d:29:
         f8:6a:3c:63:0d:cf:f0:66:6e:fb:d9:7e:e0:66:2d:31:c7:a0:
         fd:6a:12:59:30:b3:db:bf:49:e3:a0:ff:9a:71:63:75:57:9f:
         02:be:2d:46:07:e0:f1:76:c0:ba:8e:ae:22:26:53:a8:4c:a4:
         72:5b:95:46:99:d7:6a:8f:6b:3c:fd:98:cd:e9:bc:25:68:c5:
         36:09:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:52 2025 by rpki-client