Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa
File:                     774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa (raw, json)
Hash identifier:          EGRPbYArUHaHI47xYnlNV8nG0/x6QDpMc3EruNlTSTY=
Subject key identifier:   02:7B:46:57:B6:ED:7E:11:AE:E5:CE:3C:73:C0:74:B2:BD:3E:0C:A2
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584A348014160654EBE9E53CF000
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     2615
IP address blocks:        147.1.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:14:16:06:54:eb:e9:e5:3c:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=09b9690f-77bd-44e1-ab55-569798cd7376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:ee:33:f6:8e:26:72:7a:e1:10:9c:27:c0:
                    dc:8e:c7:da:6e:09:01:cf:b1:1d:01:c1:a5:12:50:
                    d3:55:15:cb:db:7a:be:bb:e7:6b:93:c7:58:e5:09:
                    35:ed:68:61:97:a3:39:41:83:01:04:2b:b5:2b:9a:
                    1b:ba:94:7a:78:03:70:45:5b:14:91:fd:80:45:26:
                    59:fb:9b:6a:f2:58:48:d6:ac:5c:f2:d5:44:d6:71:
                    74:38:fb:ff:6f:3e:cc:9f:07:fb:9b:34:31:1b:09:
                    a7:c3:38:9b:52:3b:2a:92:e9:ae:cb:7d:a4:67:f4:
                    42:6c:6b:ab:51:00:f2:96:86:14:83:cd:f7:ac:c5:
                    cb:65:ea:b5:30:e0:c9:4e:3f:14:62:a1:7a:7f:b1:
                    65:69:d0:75:a6:7d:92:ff:33:7b:79:c1:02:b9:29:
                    61:e0:c4:91:65:89:e8:52:55:fc:d0:6d:f4:ca:56:
                    d0:28:32:77:74:1f:7a:6f:b7:e9:25:6d:54:d0:25:
                    9f:41:7e:9a:a6:43:14:93:dd:a2:d2:88:da:bf:ef:
                    0c:4a:54:ba:70:df:b7:6e:15:e5:f0:bd:7b:06:b2:
                    60:49:eb:ab:5a:57:ef:c1:10:f3:11:d8:87:34:90:
                    ef:9d:16:7a:31:22:1e:3e:f9:1a:2a:fc:79:70:44:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:46:57:B6:ED:7E:11:AE:E5:CE:3C:73:C0:74:B2:BD:3E:0C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/774f36fe-24d1-3b9d-bc52-048c5dacbcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:11:15:4b:3c:1b:b5:4e:70:da:82:23:6f:5a:18:0f:15:c8:
         e8:fb:1c:4f:c3:42:3f:10:72:6f:b7:68:1c:34:68:c7:bb:3c:
         b6:26:cb:53:a0:27:1a:a7:a6:21:db:a6:e1:27:f7:85:45:7c:
         9e:64:43:18:10:ca:a9:15:a2:54:89:34:97:a4:20:ce:01:51:
         cc:13:c9:9d:9d:41:2a:f1:f1:0f:7c:96:57:02:93:db:4f:62:
         ae:6a:cd:e3:04:33:3b:f9:8d:d9:19:19:0f:8e:f2:51:02:c0:
         94:4d:68:3e:41:11:f3:8c:3b:65:2d:f3:ac:44:f3:9d:21:b6:
         46:13:2f:fb:30:01:c2:09:ba:10:50:da:2d:a0:bb:33:5f:15:
         63:fc:30:ce:2b:64:be:67:8d:bf:7f:af:9d:bd:09:a2:8b:89:
         d1:7f:46:6a:b2:d7:97:f6:c6:df:b6:70:6f:37:18:de:71:53:
         d2:96:7a:4b:cc:4e:78:92:31:05:50:e2:df:59:85:d1:07:39:
         09:aa:8e:39:1a:21:54:6d:9a:8c:00:99:ed:f5:b0:d2:6f:ee:
         b4:9e:ed:6a:23:f7:5b:cd:31:07:f1:72:9a:dd:98:7e:72:04:
         bf:63:ff:67:05:2d:a3:f8:cb:e9:cc:23:02:50:81:67:22:4b:
         ad:b5:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:05:55 2025 by rpki-client