Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/18ff68d6-bbb1-3025-ac31-0b902efcba68.roa
File:                     18ff68d6-bbb1-3025-ac31-0b902efcba68.roa (raw, json)
Hash identifier:          rbiUnplisGM0nTd8Ol57/pId3yN9+jwRErTMJIPsacM=
Subject key identifier:   2A:27:B3:C5:A8:A9:49:7D:C0:16:E1:36:CB:AD:07:59:1A:36:A9:4D
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AE196888F68570EF3F78FDA80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/18ff68d6-bbb1-3025-ac31-0b902efcba68.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26744
IP address blocks:        147.124.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:88:8f:68:57:0e:f3:f7:8f:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=fb385723-d42b-44ed-bbf4-2ec4635af860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:18:29:be:d1:82:23:39:c2:43:2e:3a:7b:
                    eb:06:a1:ac:d0:91:91:08:c8:59:29:52:5b:54:ea:
                    38:1f:ae:61:cc:a5:48:ff:d2:fc:7e:1b:2d:64:cf:
                    a2:42:2a:fa:7a:cf:75:8d:e2:40:3e:24:db:a3:ac:
                    97:17:5c:f5:e9:c0:d8:7d:d4:9f:be:ae:7b:cd:96:
                    ed:88:20:1e:81:f9:40:42:8b:73:0a:d2:ad:6f:b7:
                    43:1e:8c:f3:ef:ee:99:4e:47:15:b2:5c:07:84:5f:
                    61:7a:98:f9:bc:38:c9:69:46:36:3d:0a:a3:af:bc:
                    27:3a:0d:41:9b:73:d6:10:41:c4:25:35:8d:36:24:
                    f8:92:a6:5b:2b:0a:81:38:77:89:7f:04:da:ef:e0:
                    db:91:4a:50:a2:df:c5:5c:06:27:04:87:0c:4e:3a:
                    b5:2b:64:49:cf:aa:84:29:b6:27:01:49:2c:73:07:
                    0d:5d:cc:b6:60:71:12:62:20:c8:a3:5d:2d:f9:6a:
                    63:1d:47:8c:39:c5:56:d6:88:1c:b0:3d:71:73:9a:
                    3c:3c:91:c8:a5:0a:44:8b:17:c1:2b:d5:b0:1d:ef:
                    ef:a6:7b:a6:34:da:cd:e4:41:cd:d5:84:c2:e1:7d:
                    fb:be:2c:74:94:67:8f:94:d5:46:ec:d4:2b:e5:ec:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:B3:C5:A8:A9:49:7D:C0:16:E1:36:CB:AD:07:59:1A:36:A9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/18ff68d6-bbb1-3025-ac31-0b902efcba68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:52:bd:5a:46:a7:41:e2:1f:de:1b:a5:0d:08:de:1a:03:91:
         a6:6f:ba:67:f7:11:8d:f2:34:90:a3:d2:f0:1d:d1:9e:24:cb:
         3e:00:be:66:83:e6:1f:90:5e:61:01:e7:8c:2b:0f:6b:15:65:
         1a:e6:9a:a8:8a:c9:18:5e:2e:0f:d2:49:c7:45:29:86:5d:59:
         52:f8:3b:5d:9b:a9:3c:cb:61:8c:72:f4:54:6b:23:9a:f2:a6:
         57:f7:a0:db:e8:6a:a9:a8:80:7e:ca:8d:2c:15:7c:66:07:a4:
         96:3e:f6:37:1a:1a:59:16:50:07:25:8a:60:9a:02:81:68:dc:
         25:ec:31:ed:75:7b:8a:e6:0b:b0:76:01:77:48:d4:a3:c5:09:
         b7:9c:0c:70:d7:b8:e4:16:b4:e3:be:87:19:26:6c:bc:f6:9e:
         6a:14:72:44:56:d5:6e:6b:a8:bc:00:87:21:a4:1f:50:1b:4c:
         40:99:93:dd:4c:a3:73:65:62:f1:13:80:04:94:d2:60:86:c7:
         21:c8:0c:22:70:cc:e0:ea:66:95:ce:66:40:44:08:80:c8:03:
         50:8b:a6:d7:f3:0c:91:bf:11:db:cf:ab:f2:0e:f6:b4:62:fa:
         50:39:a6:e8:a6:89:85:14:c7:a5:6e:f1:ed:3d:67:59:61:52:
         f2:50:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:20:36 2025 by rpki-client