Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f542c347-3206-3020-b634-f134bf4ea65f.roa
File:                     f542c347-3206-3020-b634-f134bf4ea65f.roa (raw, json)
Hash identifier:          pNLiJhPfaLlEoUejFrW4WvWI/eiBMgtXVBPdQT+G+u0=
Subject key identifier:   40:81:D4:F4:08:4C:20:87:6B:ED:59:D8:D5:E1:6B:22:1F:0B:BC:47
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1613096B5CFBC0A199D8080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f542c347-3206-3020-b634-f134bf4ea65f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        47.4.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:30:96:b5:cf:bc:0a:19:9d:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c89f2bc4-6899-4563-ab13-3d0f9b5c294c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:5f:15:65:45:59:3d:5a:7a:5f:07:04:4d:
                    7f:08:1e:70:7e:6e:dd:cc:4e:b4:90:5c:52:97:79:
                    30:6e:1c:d0:b1:c4:92:85:75:b4:6a:d0:f7:e5:6f:
                    44:29:07:a4:2c:fd:61:b2:5d:0a:19:08:b5:76:c5:
                    e7:53:34:e6:83:b1:8e:aa:9b:4a:5c:6c:f9:9d:4b:
                    71:52:29:3d:2d:97:e7:7c:2e:d0:b6:29:56:20:21:
                    25:e4:9a:50:b2:4a:e5:6c:b3:cb:3b:0e:27:22:a9:
                    d2:da:40:47:86:da:ca:3b:ba:fa:fd:7c:23:86:bb:
                    01:62:a4:49:b2:08:e4:1c:bf:f2:18:31:df:cf:0e:
                    10:d3:32:d1:73:a1:ff:c0:a0:f4:ff:c6:4f:7a:dd:
                    f1:aa:16:74:fe:7e:48:9b:e1:d5:20:2b:66:26:ce:
                    9f:f4:7d:4c:8e:5e:17:d4:4c:5e:76:3d:69:b9:9e:
                    fb:64:17:09:0a:a4:c0:08:ee:e9:45:19:aa:48:62:
                    f0:49:a3:6f:44:97:35:25:b8:4e:ed:fa:e8:58:12:
                    7d:a7:53:ce:03:bf:39:2b:ee:72:63:a0:3b:4d:df:
                    15:56:6c:88:da:18:99:dd:f7:fe:71:5d:71:fa:bd:
                    25:73:a8:f5:ed:06:41:c1:6d:7c:85:1c:9d:54:4a:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:81:D4:F4:08:4C:20:87:6B:ED:59:D8:D5:E1:6B:22:1F:0B:BC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f542c347-3206-3020-b634-f134bf4ea65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.4.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ad:8f:0a:60:ec:40:da:10:43:f3:97:50:e2:d2:32:50:3e:
         6a:06:3b:ce:f8:ec:1c:db:cc:3e:0b:d9:85:25:b4:05:d7:cc:
         73:f3:d1:46:fb:d8:9c:6c:76:33:73:b5:b3:59:a8:5e:57:22:
         4e:2a:9b:49:db:23:5c:d2:66:f9:97:3f:43:bd:32:83:0d:14:
         51:62:d4:94:85:9f:81:e9:7c:ec:3b:17:ba:81:59:96:a0:fa:
         f3:e9:81:e7:85:19:f9:ae:eb:a2:96:b0:27:d9:4d:af:9e:4a:
         8c:2a:42:14:ad:90:e3:2b:a5:b3:ac:e5:20:ee:0a:9f:a2:a7:
         17:00:19:58:a7:6f:a0:bf:d3:e5:09:e8:15:c5:08:6e:87:83:
         58:73:b7:b9:f6:b5:83:bf:e8:7b:3a:b2:bb:2f:a2:d1:73:6b:
         90:10:90:08:13:69:d6:77:f2:14:d7:74:5d:c1:a4:24:18:c0:
         8e:ce:89:3d:ca:14:c3:ae:68:cf:89:3d:ae:b5:88:34:f5:ec:
         e2:df:5c:5f:12:f1:12:c4:a5:87:8e:90:53:13:6c:7e:2a:1e:
         af:39:a3:3d:8a:72:bc:0b:f8:18:f6:3c:17:3d:5f:55:40:a3:
         fa:b9:dc:90:67:72:f1:4d:51:3b:1d:c2:db:2d:da:6f:e6:89:
         9d:45:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:26 2025 by rpki-client