Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf9873b7-8009-34db-96e7-5dd38ed49ccc.roa
File:                     cf9873b7-8009-34db-96e7-5dd38ed49ccc.roa (raw, json)
Hash identifier:          XRZQ82QUnOow9kgWy4ezyX88zmCTHgCGnAfF7FuEz+c=
Subject key identifier:   77:AB:0F:D9:E8:BB:27:5F:54:08:53:60:21:A3:F1:74:F5:4D:98:BC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161D2CD49F8FA07361A0300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf9873b7-8009-34db-96e7-5dd38ed49ccc.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        47.40.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:d2:cd:49:f8:fa:07:36:1a:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=15c87303-e5da-4bef-85ff-880128426397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:21:c0:c5:31:ee:8c:91:a3:af:8c:aa:b0:
                    7a:93:79:61:3e:ac:30:8c:d5:9d:7e:2e:42:c9:77:
                    53:cf:cb:0a:f4:16:22:de:ef:13:7a:93:66:81:02:
                    d4:40:26:b1:ec:86:5a:4c:4c:c0:bb:18:99:48:a0:
                    70:bb:a9:fb:4b:06:90:7e:48:41:76:6e:94:ac:a2:
                    fb:e2:75:02:b9:57:cf:ba:4b:0a:20:53:e4:d5:8f:
                    b2:e2:ef:35:77:9b:92:e2:60:0a:ff:e6:83:cf:92:
                    a7:35:0b:92:af:1f:c9:51:ef:be:85:e3:48:8e:3b:
                    f9:c1:fd:f2:b9:d2:97:4d:69:a4:ae:72:02:d5:b3:
                    92:43:36:31:1e:50:b4:e5:e0:40:f4:f2:05:89:37:
                    1b:9f:67:df:0f:bf:78:a7:d1:b0:fb:70:cc:64:bd:
                    96:3b:dc:11:10:6f:3e:f1:85:4f:cc:62:51:ef:8d:
                    1d:e2:83:6a:1d:cd:e1:b7:40:ee:8d:51:75:76:05:
                    33:f0:71:f9:86:c0:8e:b1:17:f8:49:d2:de:23:1e:
                    d5:77:31:7a:99:df:7d:b6:7f:d8:b1:45:5a:39:47:
                    9b:bc:9f:7d:c5:98:b8:a5:86:87:e6:59:d1:cb:8d:
                    0a:01:5f:23:d7:21:06:93:59:09:b8:09:aa:67:f8:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AB:0F:D9:E8:BB:27:5F:54:08:53:60:21:A3:F1:74:F5:4D:98:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf9873b7-8009-34db-96e7-5dd38ed49ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.40.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:1f:23:69:4b:38:8f:68:d0:6d:ba:5f:87:24:5e:99:b6:4b:
         3a:0f:d7:60:c9:6b:f8:3e:5f:2c:bf:02:d4:c3:33:e2:bb:07:
         93:ad:dd:68:90:87:1e:8a:2d:fe:e8:b5:de:2b:86:ee:38:6f:
         80:b8:33:56:b1:cc:2a:75:fe:47:d8:b0:44:dc:1f:fd:e7:2e:
         46:5f:bd:d9:04:2a:fd:0f:6b:ca:e8:31:34:4f:07:ef:d9:9e:
         c5:f1:de:05:48:00:44:a5:8f:4d:29:99:42:89:29:14:5d:76:
         48:0e:4a:5c:24:7b:34:96:c5:68:12:de:b6:4f:49:38:0d:4c:
         43:8d:c4:6d:98:e7:55:77:1f:36:ba:06:9f:a6:df:be:c5:82:
         b1:42:92:da:fb:49:20:76:ae:30:17:aa:92:a5:73:1d:8d:ac:
         4a:f4:e2:7e:3e:86:bb:1e:f7:85:84:8c:f8:59:2b:3d:8c:8a:
         76:cc:5c:35:80:2c:6c:e2:17:9c:39:d4:b5:77:cd:dd:7f:03:
         d4:3e:8b:84:1f:2d:05:09:1f:f1:0e:07:67:76:15:2e:ae:ca:
         be:67:19:e0:7d:ca:53:ba:4c:61:7b:61:0e:53:a9:a5:23:73:
         ec:4f:9b:48:8e:71:b1:21:16:86:c9:76:79:2e:f2:32:34:7c:
         07:21:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:26 2025 by rpki-client