Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb55a4f5-dfbf-3fe1-8e42-a8c8c911b0f5.roa
File:                     fb55a4f5-dfbf-3fe1-8e42-a8c8c911b0f5.roa (raw, json)
Hash identifier:          uF1JKnLTf0fLAd+e04OcJLtzE9DIN1nV24lhnE8KIzY=
Subject key identifier:   D8:AF:D6:22:18:B5:00:AF:65:F2:F1:CD:34:6A:06:EA:BD:BE:8B:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AAE8880D031862154E568
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb55a4f5-dfbf-3fe1-8e42-a8c8c911b0f5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        47.232.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ae:88:80:d0:31:86:21:54:e5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7e890a96-0c02-4cd5-b3b5-ad593cdd8b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:72:71:e4:44:f5:76:75:63:c2:a8:8f:8f:
                    36:71:45:66:55:21:0b:5d:4a:c1:d8:44:88:c4:da:
                    f0:b3:40:74:03:8c:91:f9:47:29:4d:2f:b0:34:bc:
                    0e:c2:8b:b2:e9:39:2a:13:32:5b:f6:cd:70:3c:50:
                    2c:9d:6a:98:4d:4a:be:7e:cd:09:fe:79:53:da:6d:
                    ad:f9:6b:44:27:88:2e:64:a1:3c:91:06:c7:b0:ad:
                    d1:28:53:a4:84:c2:1e:2d:e4:2b:c6:44:5e:fc:9c:
                    a6:c2:24:15:0d:68:43:9c:24:49:54:45:5b:5e:8a:
                    a0:dc:11:5e:83:d2:73:41:f2:52:cc:a9:c1:7d:4e:
                    94:0c:56:d4:4a:f4:78:dc:c6:ef:bb:ca:24:2b:5a:
                    12:36:58:ec:e5:bf:26:2b:3a:e2:9e:fa:b1:1c:d8:
                    fd:e4:8a:4a:24:82:a5:a8:76:aa:e9:4f:c7:e2:ca:
                    fb:b0:95:22:2d:d9:60:4c:9d:2f:c1:af:62:02:d4:
                    0f:38:7a:8f:19:a7:76:a2:05:f5:1a:ad:31:58:84:
                    ff:af:99:78:d6:34:cd:f3:09:b8:24:be:76:25:a6:
                    c3:85:b0:40:28:ce:4e:5f:5e:6e:3f:f7:55:db:0b:
                    9b:11:cb:e2:a1:32:54:ba:c1:ac:48:7e:3e:6f:91:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AF:D6:22:18:B5:00:AF:65:F2:F1:CD:34:6A:06:EA:BD:BE:8B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb55a4f5-dfbf-3fe1-8e42-a8c8c911b0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.232.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:ec:2a:b3:e6:fe:af:02:13:a8:a4:4d:8e:93:33:67:52:
         0d:75:5b:60:f3:5a:18:2e:84:6d:d1:bc:df:7e:e2:25:ea:bc:
         f0:0c:8c:9e:9c:c5:29:4e:47:d7:89:3c:bf:3b:d2:2b:ec:36:
         1c:85:cf:71:5d:8d:03:5e:9a:e5:c7:ac:ba:1c:24:68:24:9f:
         06:ca:1a:83:22:27:dd:9b:db:43:73:da:a8:c1:ac:c3:bc:1d:
         bd:d4:b8:30:99:f6:74:07:67:52:15:ee:6a:f5:2e:9a:15:e6:
         31:d1:90:7f:41:0f:f2:b2:e0:ce:80:7f:e9:a4:e8:e6:47:ef:
         5a:1a:e7:c0:4d:30:3e:ee:fd:0c:90:f3:ad:d1:45:8d:a8:86:
         68:7e:40:3a:2b:39:6b:ff:85:51:c7:ae:8c:06:54:14:94:41:
         a2:bc:71:1e:3d:5f:42:ed:7f:d0:65:b1:78:33:ac:a0:aa:da:
         a2:c3:0a:76:e1:2a:3b:41:e1:ea:30:66:58:bc:f8:c7:4f:53:
         3e:04:9e:28:f2:5d:2c:00:1f:15:8d:e1:02:74:41:b4:ea:40:
         8d:22:bd:ed:e7:93:56:93:a1:7b:95:61:13:2f:24:46:e2:ab:
         91:75:b5:cd:6d:60:15:a6:41:29:fc:7f:5c:a7:12:37:aa:f2:
         03:fe:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:02:38 2025 by rpki-client