Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5046fdd3-91da-368f-a9dd-efd056f100b2.roa
File:                     5046fdd3-91da-368f-a9dd-efd056f100b2.roa (raw, json)
Hash identifier:          2TcmEGTpSgSysa6MldD9BkrFlcG7rLk/k9qZBs0YGQs=
Subject key identifier:   EB:23:C2:DB:C0:70:D7:38:68:A4:D9:C0:D7:45:10:A0:CD:2B:23:67
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AECC14B8F2962771F3D9023C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5046fdd3-91da-368f-a9dd-efd056f100b2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        147.124.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4b:8f:29:62:77:1f:3d:90:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=2d0f7081-4e1e-4307-9bb3-74b9bce1929c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:f2:94:75:5f:06:64:8c:69:20:c8:5a:7f:
                    9f:67:22:86:33:4a:3b:22:b5:81:dd:4c:ba:60:55:
                    ed:81:ba:dd:f9:a6:ce:33:8f:a1:cf:c4:e8:cc:bf:
                    13:ee:f9:da:22:4b:95:af:1d:83:94:fd:8d:ff:eb:
                    88:c0:c4:7d:a7:0d:15:69:d7:d3:4d:36:b2:90:12:
                    f3:41:d7:18:a1:5b:42:43:16:61:e7:e1:0c:9e:5b:
                    a4:3c:f2:5a:99:92:c1:e0:81:17:f1:30:8d:00:36:
                    97:76:5b:d7:ae:3a:7d:b7:0e:a1:68:50:e2:bc:a1:
                    3d:a2:ea:05:af:34:8e:f7:b8:29:37:94:49:68:57:
                    0d:ba:cc:17:68:53:e6:d5:45:a5:5f:46:12:71:80:
                    a4:b2:15:ef:72:42:99:bb:1b:5b:5e:35:fb:ce:a7:
                    2c:34:f9:f1:69:a6:9e:ea:e4:4b:62:07:6a:f5:37:
                    b9:4d:00:1c:96:3d:cd:06:e3:f0:0e:90:ae:46:7c:
                    a5:66:ea:19:5d:c4:30:47:d1:d9:9f:f6:1c:4a:08:
                    a7:a9:b2:b9:4b:18:72:df:91:25:14:40:7e:a2:65:
                    c8:89:d5:ca:f9:56:36:b1:99:4b:23:e2:3e:b1:fa:
                    5b:20:f2:ce:34:b5:41:fc:ab:8c:05:51:ed:38:32:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:C2:DB:C0:70:D7:38:68:A4:D9:C0:D7:45:10:A0:CD:2B:23:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5046fdd3-91da-368f-a9dd-efd056f100b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:48:05:52:ac:2a:d5:20:eb:91:78:43:ac:dc:7c:24:7f:
         09:f9:3a:d7:82:1e:83:fd:3d:16:1c:cc:4c:f0:ae:d1:07:66:
         79:2b:0d:ee:8a:19:17:69:51:6a:e0:86:e7:28:42:de:99:6e:
         d7:d1:2d:12:5f:6d:e3:c7:46:f5:7f:17:b3:eb:95:4a:c0:df:
         0d:62:d0:69:86:98:03:85:1b:18:1d:a1:ef:96:65:3b:c1:46:
         e0:be:ec:ed:38:39:72:dc:3f:11:8f:dd:b3:c7:24:10:01:1a:
         4d:48:a7:95:c8:d1:31:ee:94:30:78:c3:4e:11:0a:18:c9:09:
         4b:77:92:07:c8:5a:07:85:2b:42:96:4b:1c:4f:83:88:01:d7:
         36:91:f2:5c:7a:97:4b:37:0a:57:f5:66:6f:8f:a9:c7:90:e8:
         d0:95:50:e9:fe:bd:26:39:05:04:d5:e1:d9:1b:9e:9c:6c:98:
         7d:c5:4d:92:c3:1c:de:5b:a5:04:5f:0c:fa:5f:14:83:1e:3c:
         3e:8f:40:bf:01:94:bb:7d:0e:9f:aa:ab:31:e3:c7:26:95:86:
         9f:99:38:df:e5:78:f6:a0:1c:f8:01:5d:19:d2:ec:f6:5c:92:
         9f:bd:45:29:9a:29:2f:e9:79:05:32:83:46:03:ce:2c:6b:8d:
         9f:d8:c4:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUuPKWJ3Hz2QI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MmQwZjcwODEtNGUxZS00MzA3LTliYjMtNzRiOWJjZTE5MjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HnylHVfBmSMaSDIWn+fZyKGM0o7IrWB3Uy6
YFXtgbrd+abOM4+hz8TozL8T7vnaIkuVrx2DlP2N/+uIwMR9pw0VadfTTTaykBLz
QdcYoVtCQxZh5+EMnlukPPJamZLB4IEX8TCNADaXdlvXrjp9tw6haFDivKE9ouoF
rzSO97gpN5RJaFcNuswXaFPm1UWlX0YScYCkshXvckKZuxtbXjX7zqcsNPnxaaae
6uRLYgdq9Te5TQAclj3NBuPwDpCuRnylZuoZXcQwR9HZn/YcSginqbK5Sxhy35El
FEB+omXIidXK+VY2sZlLI+I+sfpbIPLONLVB/KuMBVHtODJbqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsjwtvAcNc4aKTZwNdFEKDNKyNnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNTA0NmZkZDMtOTFkYS0z
NjhmLWE5ZGQtZWZkMDU2ZjEwMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+RSAVSrCrVIOuReEOs3Hwkfwn5OteCHoP9PRYczEzwrtEHZnkrDe6K
GRdpUWrghucoQt6ZbtfRLRJfbePHRvV/F7PrlUrA3w1i0GmGmAOFGxgdoe+WZTvB
RuC+7O04OXLcPxGP3bPHJBABGk1Ip5XI0THulDB4w04RChjJCUt3kgfIWgeFK0KW
SxxPg4gB1zaR8lx6l0s3Clf1Zm+PqceQ6NCVUOn+vSY5BQTV4dkbnpxsmH3FTZLD
HN5bpQRfDPpfFIMePD6PQL8BlLt9Dp+qqzHjxyaVhp+ZON/lePagHPgBXRnS7PZc
kp+9RSmaKS/peQUyg0YDzixrjZ/YxFs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:31 2025 by rpki-client