Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a57367d5-9043-398f-998d-3ef5f5822e72.roa
File:                     a57367d5-9043-398f-998d-3ef5f5822e72.roa (raw, json)
Hash identifier:          pHSpenD623hT8XO7YiyY+bfTlHYguoyMcR4xsEkXFRU=
Subject key identifier:   8F:DA:B3:BB:C4:27:B6:0B:4A:14:C7:49:43:EA:09:41:69:0D:4D:97
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AECC14BDA87C29066C68E4A00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a57367d5-9043-398f-998d-3ef5f5822e72.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        147.124.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4b:da:87:c2:90:66:c6:8e:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=bf169d9e-cdad-4a12-b72c-c5c3e765633c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:88:f7:6e:8a:ba:bb:d7:ee:de:69:7b:81:
                    ce:57:fd:3d:ce:40:30:38:1b:ba:a4:a7:53:11:9d:
                    cd:ee:1b:2d:d3:66:73:64:1d:ee:4e:36:17:e5:ce:
                    1a:cf:26:e8:34:b8:7b:32:c6:c2:33:f0:17:81:47:
                    3e:44:33:2b:61:f9:aa:66:98:11:51:56:11:24:d0:
                    54:aa:4f:e9:98:ea:4a:68:b9:a9:62:64:ea:bc:1d:
                    15:5f:15:a1:9b:b8:3d:cf:2e:76:0d:8f:fe:54:54:
                    15:95:07:e7:b6:e9:27:32:77:85:36:fa:d0:2a:e3:
                    79:3e:f3:54:3f:00:cb:5d:2a:3d:b6:6a:c2:5b:46:
                    11:50:d6:18:4b:41:92:31:8e:65:dd:0a:cf:91:05:
                    0b:c2:98:4a:c3:b2:c8:81:ab:a5:fb:2f:66:de:f5:
                    10:f4:ef:91:49:f5:b9:8b:44:42:3f:ff:91:9d:9d:
                    6e:35:be:5c:27:01:e1:03:7b:d2:53:06:81:c5:95:
                    43:85:2c:07:14:8c:88:45:74:d4:59:4b:a9:67:29:
                    e1:26:56:85:bb:9d:f7:df:d8:59:f2:f9:b1:8c:83:
                    53:71:c9:05:1b:c4:92:0b:79:48:f1:5c:21:25:12:
                    e0:85:34:99:da:f6:a4:0a:51:d9:43:cb:11:58:b7:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DA:B3:BB:C4:27:B6:0B:4A:14:C7:49:43:EA:09:41:69:0D:4D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a57367d5-9043-398f-998d-3ef5f5822e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:e8:20:e1:ef:ff:05:48:e7:ac:d1:01:73:9a:a0:31:2e:
         70:ea:7f:bf:bb:93:33:d1:1a:c2:5e:3d:fb:fa:1c:85:1f:3f:
         1d:f4:1d:59:c9:c6:9c:4b:e1:e9:01:a3:45:48:e0:b0:b9:d9:
         6e:95:cb:ed:32:f3:7f:67:74:d0:e3:b4:32:b4:2f:3f:c5:f2:
         5c:87:da:c9:e7:44:fc:16:42:f7:8b:ba:bf:87:01:1b:47:50:
         8b:52:07:90:c3:49:61:31:c7:41:14:62:95:91:27:6e:cc:98:
         d6:f2:be:1f:59:18:25:c5:3c:5d:ee:41:1d:ae:f6:dd:36:a7:
         bb:cf:2b:63:94:74:c8:96:f1:18:f6:0a:5d:ca:10:96:0b:41:
         c3:f9:dd:c6:85:b1:83:5e:00:48:68:03:1b:16:09:da:2a:5f:
         0a:ce:71:39:51:69:bd:6f:36:9c:61:d5:ed:c8:6d:4a:fc:50:
         80:4a:72:a2:5a:59:3f:f3:16:aa:d6:91:d9:34:c2:66:95:ce:
         8f:6c:c9:62:4e:36:50:de:da:f3:38:e2:fa:d8:cc:ee:c3:40:
         9b:ad:ff:98:1b:9b:a5:6f:85:7a:a7:94:33:a2:65:89:c4:60:
         2a:2e:4b:06:af:cf:0c:17:18:df:ec:e7:de:8c:9c:38:76:e2:
         fc:1e:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:14:13 2025 by rpki-client