Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa
File:                     245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa (raw, json)
Hash identifier:          ga/zw/+W4TpzCsvUc5VOsU7VuZuhUON4HPFtWax55kg=
Subject key identifier:   19:56:CA:6B:D7:4B:FE:A7:D1:EE:77:8D:E7:48:36:CB:06:D7:6B:67
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AECC138511506C78AD0C3A8E0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     15313
IP address blocks:        147.124.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:38:51:15:06:c7:8a:d0:c3:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=310ebeb9-152b-4750-8378-0fc5aca8013b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:01:0f:33:df:08:1c:93:03:32:7c:55:49:
                    a1:a7:b5:ac:63:c1:71:dc:22:9a:e2:94:dc:30:66:
                    16:18:a5:89:00:42:30:5d:c9:86:af:71:3b:e3:55:
                    9d:15:dc:fc:a3:3d:65:8f:3c:cf:6b:e6:8e:b0:ce:
                    6a:19:3c:83:37:07:45:7c:49:38:b1:8c:7a:ab:db:
                    61:3b:5e:65:ca:79:47:4a:9d:d9:4a:65:39:e5:5c:
                    81:e1:b7:89:d9:7f:7b:31:d2:a9:d7:61:90:d0:22:
                    7d:84:97:70:5b:ee:6d:68:89:94:19:24:0a:6e:ea:
                    a8:01:53:66:fd:76:bc:79:72:84:60:cd:b9:30:9d:
                    d2:b0:e5:a0:0b:3d:d3:57:7e:27:73:89:bc:fd:66:
                    db:b6:d7:4d:5e:08:3d:48:42:b8:74:5c:9a:0c:81:
                    94:e3:ba:69:02:28:96:5c:66:e4:39:01:85:34:ff:
                    91:02:13:b9:d3:f9:ee:74:13:e4:bb:e6:e1:d5:fb:
                    37:d5:82:3e:af:7a:b6:9e:90:ef:9b:c0:ed:5a:ff:
                    16:2d:b8:01:a4:39:bd:d4:23:87:73:66:ea:5e:3a:
                    ff:28:9b:27:40:d3:7c:86:6e:2f:14:64:ee:9c:c6:
                    03:0f:98:27:60:03:5f:23:1a:04:91:a3:68:bd:6a:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:CA:6B:D7:4B:FE:A7:D1:EE:77:8D:E7:48:36:CB:06:D7:6B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/245aa7af-3f39-33bc-bb85-41d1f9bf301a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:f0:dd:56:47:2e:2d:2f:65:00:c4:ad:6a:9e:45:71:d4:
         e0:ee:f6:c0:b9:71:ce:09:8b:3d:bc:7c:da:96:9c:ce:87:9e:
         64:2e:23:08:58:91:e6:6b:17:9b:0a:68:43:56:e0:75:b3:57:
         e6:2a:6c:c2:53:d3:0b:43:04:08:d4:74:54:c5:63:c4:4b:6b:
         89:59:18:df:9b:45:74:dc:0b:f0:89:b0:3b:a6:68:01:a1:21:
         9d:2d:c8:c8:6c:a7:b7:52:27:9e:e7:5d:22:b5:05:96:5f:da:
         d9:0c:ed:0d:4a:fd:44:1e:ae:48:fe:76:0c:fc:62:0c:c2:9c:
         a9:d9:98:f0:e6:3d:ea:e7:2c:f2:9b:89:d0:f5:58:a3:fa:03:
         27:cb:eb:9b:cc:71:e2:88:9b:af:20:e7:30:eb:c6:ec:d8:13:
         c4:ba:2b:37:e1:d0:07:f0:70:f3:6c:94:b6:55:b9:94:03:19:
         55:04:e4:66:28:3e:d6:08:e5:17:fa:21:51:ae:6e:e5:17:d0:
         82:42:8d:ce:03:a6:5c:cd:f6:fd:59:85:d5:d3:84:4f:76:3e:
         c9:df:2d:a3:65:1d:4f:15:ca:b6:74:dc:42:59:ea:6d:15:c4:
         ea:5a:b4:77:7b:87:f6:7f:4e:d8:2a:d0:ea:74:2c:ee:28:e8:
         5e:f0:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:13:47 2025 by rpki-client