Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa
File:                     9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa (raw, json)
Hash identifier:          kgR5aao2r/jHrJkdoj+qQvgraru8SveQ/xmmJNsO/bE=
Subject key identifier:   D1:C1:E6:5E:2D:94:0D:E8:04:49:7A:12:0F:DE:D5:5C:9F:B0:94:BA
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F43285849A1EF73FA6873EE015343B640
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        147.124.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:73:fa:68:73:ee:01:53:43:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=31a1a25f-05ee-4de0-9de7-74d385873e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:c0:3e:9a:8c:ff:c7:6b:ee:db:6d:3a:ea:
                    31:62:f5:65:28:a6:9a:f2:61:da:7e:d5:fc:61:08:
                    96:d2:51:9c:0b:ad:01:bd:60:97:fc:d9:e1:a8:97:
                    0c:69:a1:f2:96:6d:dd:8b:9e:7d:8c:dc:37:7e:6e:
                    aa:99:8c:cf:4e:1a:3b:23:21:2d:4b:cd:07:d5:dd:
                    fd:d2:ba:b1:0c:d2:67:9c:fa:6e:95:08:0f:12:94:
                    c2:48:30:f8:c8:8d:fb:7d:1f:36:92:83:c6:a4:80:
                    ab:7c:dc:ce:b4:eb:29:07:15:04:b4:a3:bb:3e:e9:
                    b4:b9:f0:68:34:3a:ab:d1:b7:37:be:10:51:1b:c5:
                    ec:16:77:fb:04:ec:e2:38:1e:42:97:52:5d:76:44:
                    e8:d5:e4:58:95:4a:61:99:05:56:fe:0c:fb:8b:ff:
                    a3:36:72:e3:ef:70:09:6b:90:d3:ac:0b:e7:aa:7e:
                    f4:2c:40:0b:ee:ee:9e:13:2a:06:3d:3d:4b:96:a1:
                    7b:8d:20:fb:0f:05:b3:b4:31:08:68:b4:4b:bd:f0:
                    b4:5d:52:ba:b2:89:1e:e0:d3:3a:5b:71:1b:3b:5a:
                    32:c8:1f:c2:25:19:9a:69:25:3c:b0:af:10:78:ef:
                    43:7c:36:81:bb:82:90:0c:a3:ad:7a:42:48:f2:44:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:E6:5E:2D:94:0D:E8:04:49:7A:12:0F:DE:D5:5C:9F:B0:94:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:8e:e1:6c:5f:99:43:9b:60:bb:ee:c6:fc:46:22:6d:82:
         f8:53:8a:ec:75:8c:c0:8c:27:c5:23:95:84:76:e2:9b:ad:0f:
         77:ea:e3:d3:c7:14:24:79:be:0c:84:13:16:c7:06:c6:27:a0:
         be:ac:cb:db:69:92:fa:b7:d1:cd:2e:88:ed:12:2c:00:b0:7f:
         77:fa:8f:67:02:a1:7d:dc:03:35:44:84:0b:4e:93:20:2d:96:
         13:2f:84:87:1a:6f:b8:bc:9b:16:bf:76:98:fd:d2:9a:ee:df:
         50:d1:cf:d7:c1:80:c8:0f:bc:9d:cc:07:99:f5:2f:cb:c2:e4:
         ce:7c:26:19:a9:27:27:95:08:30:d2:0b:1e:d5:04:0d:cc:9c:
         22:90:74:00:07:f1:6e:b2:1f:39:6e:34:a7:2b:2a:97:0a:f4:
         56:80:c1:0d:61:8d:95:f8:18:ff:49:5e:07:34:76:6f:89:90:
         1d:87:8a:0d:14:2f:37:3b:6d:8d:f1:cd:7e:3f:a8:c6:e4:ac:
         66:86:a4:b2:db:0c:90:69:67:b7:41:b1:c5:20:39:99:54:17:
         a6:43:80:ba:45:2f:7d:c8:a1:52:5c:6f:c6:3e:f5:e8:6e:a5:
         41:8f:94:e6:09:7a:30:8f:7f:6c:a5:fd:0d:62:97:0f:31:13:
         6e:01:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:07:43 2025 by rpki-client