Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa
File:                     f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa (raw, json)
Hash identifier:          WkM9Cg5NbeFMCvItnh2e2Juhls1wZmt/f0HjKLD0LpE=
Subject key identifier:   2A:D3:62:21:D4:9F:62:E8:D7:C7:5F:25:CE:8B:F5:56:CB:BA:40:71
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584AE19688B43C7F07904EE19EC0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26744
IP address blocks:        147.124.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:88:b4:3c:7f:07:90:4e:e1:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9e4ae55c-41ff-4bde-8f00-4d028d1177ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:40:f6:ce:60:0a:db:f3:8a:5f:4a:a2:3a:
                    cd:d0:6d:b4:01:c6:30:ee:ba:9d:dd:73:88:cd:61:
                    51:08:d2:39:31:fc:d2:83:81:9a:3e:ea:9f:2c:00:
                    b8:eb:29:d7:dd:6e:b9:34:51:f0:a4:51:55:3e:7f:
                    ee:a8:81:f4:1d:1a:48:10:2f:53:d2:85:85:fa:e3:
                    c7:61:87:1e:dc:34:6e:aa:a8:1a:dd:31:8e:97:9c:
                    12:c7:60:b6:e7:49:4d:74:72:4e:d6:de:49:a9:f7:
                    15:59:b1:d8:e6:3b:35:f6:96:c5:09:eb:f3:21:3a:
                    30:6e:92:25:b4:a0:43:9c:95:21:3c:7c:ce:17:7f:
                    d7:7e:33:b3:76:a3:01:df:e5:32:42:4b:75:77:8c:
                    96:0f:37:9d:d6:67:cb:96:ac:b5:56:15:d9:f5:04:
                    30:2d:e4:9b:11:72:7c:d9:ef:e8:74:03:e1:c3:ea:
                    48:b7:ef:b1:86:e1:3f:50:41:62:94:bb:4d:0d:9a:
                    4b:72:56:2a:c0:c0:05:32:64:89:79:72:85:f0:89:
                    4a:a2:4c:5d:b9:3f:8e:50:6a:a0:06:ae:8a:9e:f6:
                    44:91:70:5d:b2:f4:93:fc:65:b6:7c:b6:01:a5:8b:
                    cd:fb:cc:a4:bd:3d:03:40:4c:a7:40:30:96:1e:5b:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D3:62:21:D4:9F:62:E8:D7:C7:5F:25:CE:8B:F5:56:CB:BA:40:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:89:a6:96:cd:d6:f5:2c:8c:5e:fb:2d:9a:23:1a:36:62:b1:
         27:26:ba:62:0b:18:a1:2f:40:a8:d8:f8:32:6e:22:98:e6:e5:
         5d:ca:72:79:ec:50:2e:5c:38:ce:bf:27:65:f8:d9:dd:9d:f0:
         ae:d7:44:de:93:14:d6:9e:df:11:22:68:e4:a2:d8:ee:77:2b:
         c3:0b:2e:5f:1f:a9:c0:b7:d9:e7:c4:bd:bd:2d:ce:07:08:a3:
         3d:e4:d8:89:55:28:50:c6:c0:69:6c:3f:8a:1b:f7:84:5a:f6:
         10:7d:49:6c:09:d9:d9:a0:66:04:fc:a0:c8:ac:1f:85:36:60:
         c3:c6:1f:b5:1c:cb:fb:4d:c7:1f:32:e4:cc:00:e3:c6:8a:6d:
         c6:51:b6:f0:32:ac:32:de:27:1b:84:a4:87:96:e5:06:7b:31:
         39:e4:6a:48:2e:20:bb:cd:72:c7:49:d5:a5:a2:03:3e:b1:19:
         51:1e:6f:d4:1e:3c:9c:b8:8f:0c:b3:86:ad:12:59:8f:85:9d:
         a0:a2:35:13:f0:5e:87:1f:b6:9b:3e:e5:55:58:2f:6b:21:3e:
         ec:c4:d4:f7:f1:ce:17:6c:47:6b:32:05:2e:49:cc:80:f7:42:
         dd:ca:2b:9e:8d:28:28:8f:32:99:a6:0d:ee:7f:99:a0:b8:54:
         b5:8e:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:12:19 2025 by rpki-client