Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa
File:                     f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa (raw, json)
Hash identifier:          j1PK0/za4mWSA+ghwohQfTDAC9tFVrZVR8vhkMLd7os=
Subject key identifier:   8A:FD:4A:5C:07:8D:F2:6F:E5:EC:69:FD:73:6D:78:0D:83:7C:76:71
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A00DAC4346A2F34589849C140
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26744
IP address blocks:        147.124.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c4:34:6a:2f:34:58:98:49:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b88ed12d-f137-4b34-8752-6b290c768ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:4d:54:d5:ff:fc:66:67:07:c9:d9:b3:2c:
                    b3:5b:6b:6c:87:5a:47:66:69:77:10:dc:50:40:c1:
                    79:cf:5a:66:1c:95:27:e4:f7:2d:69:b7:89:b3:b6:
                    d8:45:75:ae:bc:6e:05:22:0b:a0:5e:03:ab:bb:7e:
                    c2:2c:ed:40:3f:18:84:bc:f8:67:a0:4d:09:a6:3a:
                    c0:3a:55:14:0a:59:3f:1f:57:2d:15:16:02:b9:f3:
                    0b:a0:25:24:7a:4b:0c:19:98:30:c7:d6:16:2a:c9:
                    ef:33:3c:5b:32:5a:39:4d:fb:99:e7:88:8d:51:0e:
                    d7:71:a7:16:29:70:e9:17:66:52:f5:21:51:34:75:
                    d5:c5:d0:49:2f:29:64:08:e7:38:d3:c1:df:65:ee:
                    a8:b0:ed:2f:d8:78:d9:0e:ca:2c:a5:55:08:c2:85:
                    7c:ea:94:30:0d:a8:90:ac:51:15:89:03:5f:9f:3d:
                    b9:3e:03:8b:2a:6c:9f:fb:3d:1b:a1:9b:76:2d:1c:
                    7a:d0:f7:dc:92:f0:8c:25:8f:d0:e6:d1:a9:11:92:
                    31:6f:f9:c7:60:bb:82:c3:61:64:e7:e2:02:8b:62:
                    bb:15:fb:fb:87:f3:e0:d4:d9:62:c5:79:19:18:67:
                    8e:7e:dd:68:fd:54:b2:dc:81:d5:8f:ba:da:b6:e6:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:4A:5C:07:8D:F2:6F:E5:EC:69:FD:73:6D:78:0D:83:7C:76:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c4:33:d9:56:c0:34:ba:65:61:3e:2a:b0:d9:5a:da:0b:2c:
         40:42:52:65:a6:68:b6:90:6c:86:16:d9:5b:51:e1:b3:3b:31:
         09:f7:f7:19:dc:aa:8c:b6:95:32:0c:20:ed:47:f8:e4:75:81:
         28:73:cd:90:ca:25:5c:fe:a6:65:51:a8:d5:37:5c:5e:3e:4f:
         95:94:86:7c:38:00:f4:b9:a5:77:ce:8f:d6:93:10:f2:39:91:
         b6:07:95:b5:65:f7:4b:8c:44:0c:36:fa:93:2f:12:88:21:82:
         9b:b3:4a:d2:b9:dc:c6:bf:2a:92:e6:7e:a6:2b:7f:4f:04:1f:
         94:78:f0:89:93:9a:8c:73:44:78:b4:12:48:93:87:68:e5:c3:
         1b:74:c0:12:2e:7e:95:4b:44:65:ff:1c:4a:b5:8b:51:65:83:
         08:8a:cb:27:df:45:88:60:e8:7f:9d:a9:f7:9f:de:40:21:d1:
         49:e0:9c:3e:b2:df:d1:ca:41:b4:86:9e:38:90:53:ea:b3:c8:
         b2:77:f5:b4:dd:61:d8:ef:e3:4f:8c:3f:87:27:d7:bb:29:11:
         99:13:6a:bd:79:4b:83:04:2f:1c:1d:3c:55:f1:4b:f6:29:98:
         ec:9f:80:b8:82:03:90:ef:00:49:cb:a7:b5:3b:37:fb:5a:b4:
         d5:90:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:18:18 2025 by rpki-client