Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa
File:                     dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa (raw, json)
Hash identifier:          eG+wkiT+QqYjaZ494C5/KCiTXNdDDoRlK1rTlBEFsaA=
Subject key identifier:   0B:38:26:7B:AE:1B:B3:DC:47:50:58:9C:6E:15:0C:45:1C:30:5B:FF
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AECC138DBDA7C41048D1D0730
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     15313
IP address blocks:        147.124.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:38:db:da:7c:41:04:8d:1d:07:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=399c2304-eb72-472b-8815-aad673e170b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:d9:1d:2f:bc:58:02:81:58:1c:0f:ad:ea:
                    23:08:e4:11:40:49:e7:60:e8:12:aa:58:da:04:80:
                    48:ca:d3:37:12:10:04:b3:7a:47:ff:1d:74:07:11:
                    6e:12:3e:0a:9c:07:b2:cb:53:4a:52:50:79:86:c7:
                    df:b4:eb:f3:3e:b8:62:d0:97:4d:7c:8b:6b:95:bf:
                    c1:7f:d1:23:7e:f6:c6:1f:ad:9f:41:5a:0c:52:96:
                    23:8f:4d:ee:d8:9e:05:0a:20:b1:f8:79:16:e9:5e:
                    90:a9:a7:df:7e:de:b1:d5:ea:bb:4a:60:18:6a:21:
                    10:c7:d7:84:a8:60:44:4e:a1:2d:65:3c:1b:fe:7d:
                    7c:4e:e4:25:2e:d8:7f:3b:b4:df:c2:e4:c7:c6:2c:
                    db:c1:87:7f:7c:7f:de:a6:92:a1:cd:23:3b:b9:c5:
                    c1:7d:32:60:98:cd:25:30:26:df:04:af:b7:b8:75:
                    98:8c:87:c9:21:04:d3:68:4f:89:60:b7:f7:4c:b1:
                    ff:0f:e6:13:60:c5:a3:ec:96:df:f9:72:c5:b7:95:
                    83:9f:8a:68:80:3e:d8:4d:6e:22:19:76:ea:16:27:
                    0b:a3:2a:ca:b1:04:3c:fc:23:ec:21:44:e0:4e:aa:
                    b8:71:79:3a:d8:83:6d:1a:6c:b2:40:b4:7e:6d:52:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:26:7B:AE:1B:B3:DC:47:50:58:9C:6E:15:0C:45:1C:30:5B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/dacb7db5-f3e3-30f4-90a9-6fa9c06fc9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:43:26:6e:56:81:90:bc:e3:60:10:f7:e5:e2:67:cc:f2:33:
         e1:ed:fc:8a:ad:30:86:61:c6:b3:e9:b9:69:65:02:b4:76:31:
         a8:44:7f:9b:7f:1f:4f:8b:b4:bb:2c:06:3e:dc:2e:2c:c5:a8:
         96:38:64:f9:2b:86:f6:7e:46:7b:d6:6f:b2:43:37:19:a5:96:
         e9:bf:c7:cf:13:61:7e:36:f1:07:d3:7e:e6:b9:a5:69:21:aa:
         47:70:a5:73:f8:ba:51:26:6e:29:28:d5:36:dd:12:11:82:41:
         7a:b6:e8:c9:04:fd:87:72:0e:61:da:50:2c:69:8c:45:95:3b:
         0b:57:c7:5d:0c:cb:80:d6:33:50:57:5a:cf:a0:82:68:20:dc:
         ca:d2:61:66:37:a3:8c:38:6e:8b:e1:39:dc:1f:3a:c8:93:de:
         a6:72:7d:92:da:af:3f:bc:ea:67:b5:54:f7:34:da:d3:b2:80:
         53:0d:a4:1d:8b:60:af:da:be:85:af:73:92:3b:6c:5f:e5:22:
         8b:2a:56:97:5a:35:43:6e:11:e7:4c:5f:25:51:9d:1f:65:2f:
         ae:0d:bb:ca:6d:c9:63:37:86:f3:52:d4:6e:05:a9:90:1a:5d:
         0f:f5:b4:c4:c3:3a:75:0c:fa:55:45:e5:5f:00:d8:01:4b:af:
         f8:03:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:57:01 2025 by rpki-client