Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/64a1f4f6-1c66-3efd-9312-0d452e3e806c.roa
File:                     64a1f4f6-1c66-3efd-9312-0d452e3e806c.roa (raw, json)
Hash identifier:          17BuL06Xbk9ubGN/fCjlh5wELselRWtUFztqvJ8LFPg=
Subject key identifier:   F0:47:CD:D5:40:BA:43:71:C1:64:BE:72:39:D2:BC:74:6F:8C:9A:94
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AB2795B8297E896AF7920
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/64a1f4f6-1c66-3efd-9312-0d452e3e806c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33588
IP address blocks:        47.45.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b2:79:5b:82:97:e8:96:af:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7aff9154-2e0d-4b17-9d2a-a07487fc7eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:5c:b6:ae:9f:b0:55:b1:8b:d6:34:c9:cd:
                    23:39:4e:b1:2c:56:ac:24:e0:fa:38:f1:cd:9f:a9:
                    54:06:61:f8:b4:1d:70:d5:26:fd:b3:bf:3d:b4:c8:
                    30:35:5f:a5:5d:44:79:38:d4:71:33:26:06:e9:85:
                    3f:a6:48:6f:9a:ef:ee:4e:33:a6:1c:e9:f9:7e:c3:
                    51:49:38:3d:5d:b8:b0:a8:eb:1e:c0:d5:4a:fa:d7:
                    11:11:48:23:b9:30:32:51:f3:f7:d1:54:91:bd:6d:
                    11:76:9c:bd:3e:c7:ee:04:20:c6:55:57:ea:8e:16:
                    8a:83:65:08:c0:4e:c1:b7:d1:73:ea:5c:07:81:00:
                    90:27:b2:b9:29:5a:b9:7d:8e:13:f5:e5:1e:83:5f:
                    7f:eb:4a:09:d1:37:17:12:80:fd:e2:f1:15:3a:44:
                    08:15:fa:12:87:d2:c4:0f:37:7a:fc:f0:1d:e3:8e:
                    44:c3:d5:ac:cb:c4:ac:7a:e2:d6:9a:c6:77:50:36:
                    36:d9:02:43:0f:98:72:36:b5:5d:f3:3d:20:9f:13:
                    f8:b9:fb:4d:65:5d:dd:f6:2c:74:cc:fa:43:4e:2d:
                    67:56:03:a0:af:a7:9c:79:47:23:8c:d7:c6:4a:80:
                    5a:66:1d:a5:5f:08:46:14:12:31:4a:36:f6:db:b5:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:CD:D5:40:BA:43:71:C1:64:BE:72:39:D2:BC:74:6F:8C:9A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/64a1f4f6-1c66-3efd-9312-0d452e3e806c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:81:f5:21:33:a4:8c:ca:8c:36:19:81:36:23:11:36:56:be:
         a1:ab:b6:fb:65:04:e1:37:ad:5f:b3:8d:af:8f:2d:a0:f5:b8:
         85:5e:c9:bc:81:d6:7c:a5:89:d6:12:68:c0:0e:91:9d:76:99:
         b3:93:65:1d:52:18:6f:af:7e:d7:45:0d:f0:c1:c8:8e:b1:af:
         34:1f:f3:00:ea:12:c6:be:5d:09:39:0d:06:f7:07:c3:dc:d8:
         6e:0e:d8:ab:60:58:8f:3f:e4:ff:4c:3a:33:10:f0:db:e8:a9:
         93:50:70:d0:a3:19:2a:1f:3b:ca:31:c7:ed:7a:12:14:22:03:
         1d:90:e2:b6:ab:dd:1e:d5:7c:b7:65:fb:f1:5b:65:45:da:3a:
         b0:4e:f9:b6:07:ab:f3:fe:70:fe:d5:ef:7c:4e:15:1c:13:75:
         e3:ab:1e:58:51:d7:df:68:c1:ab:64:c1:30:24:60:82:44:e5:
         a0:5d:55:21:78:5f:1d:6f:c6:6d:31:ce:95:94:d8:3e:e5:e9:
         0f:2e:d3:b0:96:1c:c5:d2:b1:39:89:b8:08:2e:c5:d0:a8:86:
         05:b4:1c:fd:64:b7:55:6b:05:35:94:2a:b3:82:f9:b4:33:65:
         e9:d7:a3:3d:48:5c:e1:7c:cf:1a:3c:4a:e6:00:bf:53:68:52:
         dc:50:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:16:08 2025 by rpki-client