Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e0e18bb8-bf19-35a0-901f-f845cd98c274.roa
File:                     e0e18bb8-bf19-35a0-901f-f845cd98c274.roa (raw, json)
Hash identifier:          i5RrdJ+/8lIfhbGCfFzsSeUICKPAOrgQYso9+Er8Ncg=
Subject key identifier:   8B:33:31:43:90:24:E0:1C:1F:81:63:E6:56:24:3A:AC:DC:7A:D1:99
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E84BFE8CB85B076CC4A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e0e18bb8-bf19-35a0-901f-f845cd98c274.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        47.4.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:84:bf:e8:cb:85:b0:76:cc:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=03d2ceec-975c-42e6-8b7e-e10f66dce0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:89:30:f6:63:74:15:48:37:7c:2a:33:47:2a:
                    cb:29:bc:8e:44:73:2c:68:49:af:8a:4f:43:40:3b:
                    68:a2:1c:16:f6:50:4d:9d:c6:2c:e6:7d:ee:e6:8e:
                    38:aa:67:39:0c:91:ed:9b:f1:e4:a9:5e:fd:95:14:
                    49:2b:95:8f:ea:d8:07:aa:51:a9:73:0d:17:91:76:
                    ae:9f:6d:f1:ba:9d:e5:e2:d1:89:47:76:31:b2:ed:
                    db:a4:43:38:39:38:7f:e6:3f:31:43:b3:f1:5d:a6:
                    d3:63:8f:bb:97:52:e6:e7:3a:bc:7d:7f:37:5e:bb:
                    9d:6e:90:64:fc:4f:d6:41:b4:a6:b7:07:62:56:5e:
                    b2:70:73:08:3c:a0:75:77:f0:63:7d:ec:52:79:15:
                    0b:ae:6b:cb:f8:6d:77:51:99:17:f2:43:15:15:79:
                    cb:92:d8:49:3a:75:f2:33:a0:5f:71:d5:80:25:e3:
                    b1:21:26:4f:d6:08:ca:89:32:e2:24:06:fa:79:71:
                    92:f6:05:61:2f:af:1e:92:6b:88:17:d8:b5:1b:4a:
                    64:20:ee:f1:91:45:db:48:ca:26:4f:d1:52:25:a3:
                    81:75:bc:25:67:09:6f:63:64:36:8b:f7:90:88:e3:
                    4a:02:c1:a5:14:d1:e3:b4:cd:a2:a8:1a:44:f6:41:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:33:31:43:90:24:E0:1C:1F:81:63:E6:56:24:3A:AC:DC:7A:D1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e0e18bb8-bf19-35a0-901f-f845cd98c274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.4.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:d7:ef:6f:63:bd:a4:c8:f8:32:58:c0:26:c6:fa:8a:81:
         c5:bf:24:4d:c9:7f:68:c2:16:84:85:3f:fa:7b:09:71:a1:46:
         1c:4e:82:67:3b:dc:5e:ce:8d:b5:c7:47:ab:cf:e9:b5:47:7c:
         be:a7:98:45:d2:da:02:c0:eb:61:ab:97:4a:43:90:f0:74:6e:
         d9:6f:28:9e:52:17:a9:eb:e3:95:fe:c8:38:f5:ec:a6:bd:dd:
         fd:ec:30:71:82:9c:f5:e7:8e:e8:fc:33:16:87:75:96:c5:ca:
         f2:25:1c:2b:57:04:e0:15:3d:63:8b:61:02:1b:ee:27:0a:36:
         c8:61:bd:05:c8:73:64:0a:47:aa:74:cc:dc:fd:3d:12:69:11:
         37:37:1e:08:7e:90:cd:94:d1:e7:29:3c:59:e8:f5:c5:d3:3c:
         31:e2:9a:31:63:38:40:ad:fb:0a:b6:ad:10:68:c0:ab:d4:15:
         9e:93:4e:9d:b5:ed:a6:9e:f1:4d:9a:52:98:c7:dc:f3:18:e0:
         33:f3:c3:ce:61:e0:ee:00:90:72:f8:09:b1:aa:15:61:fc:09:
         f9:e3:07:2c:23:3a:a4:b2:91:ef:5f:46:2e:18:57:76:1f:01:
         ba:dc:c5:f2:23:eb:2b:47:db:50:62:f5:93:97:83:74:1c:79:
         1a:cf:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:43:01 2024 by rpki-client on console-fra.rpki-client.org