Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa
File:                     e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa (raw, json)
Hash identifier:          +6I7vx96PIi9u0t1WP15YOnAJnLp18fris372SadMM8=
Subject key identifier:   36:14:23:01:B8:FF:AB:CA:ED:8C:69:AF:89:91:26:FC:FE:9F:4C:F7
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F43285849F5AFCF88028FD731DCBD8C80
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa
Signing time:             Sat 24 May 2025 13:01:04 +0000
ROA not before:           Sat 24 May 2025 13:01:04 +0000
ROA not after:            Fri 22 Aug 2025 13:01:04 +0000
asID:                     6195
IP address blocks:        148.86.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f5:af:cf:88:02:8f:d7:31:dc:bd:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: May 24 13:01:04 2025 GMT
            Not After : Aug 22 13:01:04 2025 GMT
        Subject: CN=dad0cb6f-0206-42bf-bb80-3d6569428592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:e3:68:71:45:29:a7:71:9f:15:53:92:6a:
                    a9:47:e8:0d:f4:71:ca:b5:ba:bb:e8:bb:fa:03:d7:
                    14:85:71:06:3d:65:5a:b6:d0:ec:a6:24:d3:bb:7a:
                    db:30:84:e4:58:d2:4a:95:6d:65:a6:bd:2b:76:a3:
                    fd:3b:99:ef:13:67:1a:86:4e:74:b2:ef:45:f2:46:
                    07:f0:67:e2:80:74:49:65:e3:e7:46:e9:d9:3f:49:
                    80:ab:cf:50:f6:67:ed:50:eb:b5:52:46:77:52:bd:
                    2a:cf:28:43:9d:cd:89:67:35:b2:91:23:2c:96:83:
                    88:d6:ed:c6:1d:68:02:69:50:fb:0f:5d:82:a9:ef:
                    42:4f:09:dd:ff:09:dd:4b:98:67:21:5e:52:b4:d4:
                    38:5e:05:26:f1:5f:c1:d1:7a:d6:2b:e0:de:c2:a8:
                    b4:8e:7d:26:7c:d4:94:24:32:92:a3:4c:a2:29:4e:
                    8e:a3:8f:61:60:2b:54:b3:1d:89:17:d8:de:60:2d:
                    52:57:ba:7d:5a:20:9b:16:4f:0d:0c:d0:76:5f:74:
                    6e:05:2d:1e:82:bd:ca:7d:1a:1c:26:92:8f:91:c7:
                    e3:aa:70:20:98:35:2c:c7:bc:78:52:0d:ed:18:67:
                    41:e5:b1:83:e1:1b:82:ed:0e:f8:cf:28:49:54:aa:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:14:23:01:B8:FF:AB:CA:ED:8C:69:AF:89:91:26:FC:FE:9F:4C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/e08824eb-fbd9-3cbc-aa23-c6c73b677eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.86.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:38:e2:9e:ed:50:23:73:19:da:70:a1:b7:22:31:7b:03:
         9a:be:dd:4f:60:c9:f0:bc:2a:af:6e:b5:4c:6e:4c:00:af:a8:
         44:c2:58:14:a2:8d:6b:39:52:50:7e:62:19:f7:0b:e4:57:43:
         d2:89:fc:8a:53:d5:99:69:1c:64:d6:79:eb:e0:d5:9f:c2:09:
         b2:cd:67:9f:e6:1c:8b:32:28:e6:6e:3d:3f:cc:2a:98:c9:71:
         c9:8a:14:fd:bf:26:bf:07:b6:0d:9f:6b:bf:3b:2c:87:c6:bc:
         23:84:17:40:61:af:67:f8:b6:0d:54:1f:57:78:d8:b5:21:fe:
         3b:e9:04:56:84:c5:af:c1:c3:d8:39:00:f3:e1:03:35:18:dd:
         b9:59:dd:8f:4f:d5:57:ba:a1:00:53:f0:92:6f:f9:a3:49:b7:
         35:eb:42:ca:21:23:48:11:35:f5:ae:5b:c0:d5:ed:79:ce:2d:
         09:de:41:d6:5c:e6:21:65:dd:69:93:17:d9:29:f3:d9:6c:28:
         12:7b:db:32:1a:8b:c6:65:cd:d5:f3:26:09:19:95:3e:e3:41:
         0d:e3:35:85:54:4a:45:c1:2f:1e:b4:c3:9b:5e:cf:b0:18:71:
         d6:1e:8a:9c:02:ac:21:65:33:90:bd:15:78:c8:16:99:2d:28:
         44:ca:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:47:41 2025 by rpki-client