Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d511f7f3-4ce4-35a0-9e23-9488b4807a2d.roa
File:                     d511f7f3-4ce4-35a0-9e23-9488b4807a2d.roa (raw, json)
Hash identifier:          QSDijT2QZ7g2/1NaT1CW5iOTap0REZcjSi0FMP0fguo=
Subject key identifier:   37:CA:13:A8:C9:87:04:D6:E2:66:F2:E3:80:DB:E4:05:04:FA:64:9E
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AECC1383EA7250CD5F5B2C560
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d511f7f3-4ce4-35a0-9e23-9488b4807a2d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     15313
IP address blocks:        147.124.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:38:3e:a7:25:0c:d5:f5:b2:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8a6698ee-70fe-4f6d-8f13-6ecbac2f4143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:c5:fb:8a:99:98:4a:62:47:d4:3a:bd:88:
                    a1:0e:ea:28:ee:34:c3:08:a3:5f:7c:68:84:a0:28:
                    60:7e:1b:84:2e:43:40:64:22:b3:40:a8:cc:3f:82:
                    21:f5:42:d4:68:c0:4b:22:c9:da:a9:cd:97:a2:08:
                    52:0c:4d:04:90:33:ba:5c:7b:1e:0b:c7:1d:1c:2e:
                    d2:2c:ed:bd:1e:af:9e:8f:78:e3:48:6b:a7:b8:ee:
                    2e:e5:51:94:2f:af:08:49:26:b4:02:73:d1:1a:9e:
                    01:1b:a9:ab:d9:b9:c4:f8:5e:da:f6:7b:17:83:a0:
                    1f:79:39:50:c6:72:40:7c:1e:a5:fa:02:e4:d5:37:
                    c4:7d:f6:98:e9:f8:4d:be:b6:22:e2:3b:02:0a:5d:
                    3f:5c:f9:8a:f3:81:a7:3c:31:97:d8:e9:04:66:71:
                    60:ea:8d:d3:eb:36:d0:7b:3f:77:38:24:fb:48:57:
                    62:cd:ff:6b:07:51:bf:fc:f7:f4:f8:7c:af:29:82:
                    f4:22:40:85:3e:30:8d:74:11:95:0a:39:ed:e3:ef:
                    44:6a:f4:d5:f8:38:79:31:2d:75:1c:20:ba:8a:5e:
                    d0:6f:a5:36:48:e8:4f:12:c0:96:e4:80:be:d7:45:
                    52:0b:e3:b9:b0:27:37:13:fd:8d:f6:79:39:ff:45:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:13:A8:C9:87:04:D6:E2:66:F2:E3:80:DB:E4:05:04:FA:64:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d511f7f3-4ce4-35a0-9e23-9488b4807a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:6c:d7:8f:b0:bc:36:7b:ac:10:65:a2:48:be:b0:2d:85:4a:
         91:f6:3e:55:ac:9b:74:eb:3d:f4:25:27:50:da:95:cb:a9:b2:
         61:44:ac:de:ff:52:83:a3:d8:63:04:c3:51:32:92:88:30:2e:
         52:d2:19:2a:fa:88:60:b4:32:5a:f6:d0:74:3c:d2:4e:a1:7b:
         27:2b:ae:fe:4c:d1:d8:d2:35:d3:d3:4d:a7:78:e9:7d:cb:df:
         2e:75:72:0e:8b:c2:f8:cb:d9:39:fe:ad:46:75:f2:95:d6:c0:
         d2:11:f1:fa:a6:dd:07:27:9b:07:e5:e8:14:8a:88:f8:be:ef:
         da:06:ff:c6:19:a6:b0:58:e0:43:df:d2:96:22:e8:8f:b9:14:
         c5:23:7c:bb:ad:65:64:18:ce:14:57:87:94:d1:11:d8:35:fe:
         3d:f9:da:57:1e:f2:b2:55:96:11:54:e2:d1:c4:bb:8d:1f:e3:
         99:2c:92:1c:75:3c:c3:98:d3:64:da:a2:8c:5b:69:34:0a:0c:
         6b:67:5e:f7:8f:fe:58:8e:57:93:cb:f1:bd:d1:77:bf:d6:34:
         eb:9a:96:ba:bc:cb:75:a0:03:0e:f0:5a:20:bd:4a:f5:9e:85:
         57:6d:97:80:37:80:86:61:ea:b7:09:2c:3a:f3:32:ef:bd:36:
         3b:29:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:12:29 2025 by rpki-client