Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa
File:                     3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa (raw, json)
Hash identifier:          imjcfSvr4gCm6U1h8Njw9a45hZYMY08oFwtVzpsUfuQ=
Subject key identifier:   CE:AF:B5:25:E7:4C:B9:EC:24:44:0B:24:A7:8F:CA:E4:D6:C2:55:ED
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A0C0564A524DDA93EE9A46780
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        147.124.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:64:a5:24:dd:a9:3e:e9:a4:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8135e6cc-9884-4de3-99c4-4a8b674e6f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:68:51:7d:4e:fc:d7:af:c6:cf:51:dd:29:
                    0d:a3:8c:bb:56:f7:8e:7b:fc:b5:8f:68:d3:61:15:
                    8f:8e:37:32:9e:e5:af:16:73:18:a6:3a:c1:ec:86:
                    3b:af:24:1a:b1:62:59:1f:f9:fe:26:16:8c:06:04:
                    a2:c7:31:48:ac:20:0f:99:34:a2:50:60:31:2e:96:
                    6f:a4:12:f3:f4:c2:e6:a2:e4:fe:58:62:b3:c2:c1:
                    8c:43:d7:18:ca:ee:ac:5e:88:b9:45:bc:ac:61:9d:
                    f7:9f:c5:e7:7d:28:cd:e1:3f:ec:ed:81:06:44:9c:
                    80:44:fe:4e:f0:eb:a4:a5:3f:74:df:47:a9:25:46:
                    29:80:87:24:ac:3c:ea:c6:be:0a:67:24:3a:9a:d4:
                    45:66:23:a4:5a:cc:64:92:f0:00:70:34:5e:09:d7:
                    2f:14:48:51:83:90:03:f3:9d:6c:17:f1:72:ee:04:
                    0e:83:9f:38:c3:73:bd:0f:3f:4c:aa:35:73:29:73:
                    6b:75:4c:2c:16:cc:ab:c0:e7:5e:5c:de:24:51:e0:
                    fd:d0:09:19:ba:a4:d7:c0:5d:21:06:96:df:57:09:
                    63:3c:d7:27:1d:6c:05:75:e6:89:86:53:df:00:e9:
                    c0:31:da:d1:7c:dc:80:e1:e0:c5:e2:c8:13:c9:fa:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:B5:25:E7:4C:B9:EC:24:44:0B:24:A7:8F:CA:E4:D6:C2:55:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:88:4a:28:15:65:69:ff:2b:01:99:2e:2a:a8:9f:dc:2a:e6:
         88:f6:42:a5:bf:d4:94:a9:98:11:73:42:96:07:c0:40:8d:75:
         7f:66:ea:e7:7b:77:e6:f1:91:db:f6:c5:03:b9:f6:4b:3f:78:
         50:51:6d:ca:96:14:7a:21:0d:bc:40:39:6d:03:66:50:d9:46:
         79:2f:8b:37:4f:26:58:6e:27:ae:63:bd:43:e6:60:d4:0a:ed:
         19:99:b9:99:94:44:f5:32:5b:99:31:7f:35:b0:17:59:b1:9c:
         54:46:2c:81:e4:58:cd:92:95:04:8a:a0:bb:2b:0b:ff:b2:34:
         e4:83:d8:84:d3:d5:ab:27:6a:8a:6b:4e:88:e9:85:ec:1e:d5:
         a6:2e:ff:e9:7b:3b:1f:39:87:78:89:3c:c9:7e:bc:58:ee:52:
         b9:91:13:10:ff:ef:c4:80:53:e1:0a:9a:0e:07:96:14:21:ea:
         99:12:3f:f6:a1:30:a3:19:71:af:6d:e4:f9:9f:b1:2e:4b:c7:
         a8:72:bd:43:ba:99:63:91:82:8d:b7:ba:0e:b4:d6:d5:19:e5:
         98:5e:de:78:3a:4c:2e:c7:92:4e:b4:83:fa:a0:b0:6e:c7:70:
         1a:6f:97:d4:a2:d7:26:a3:8e:72:8c:7b:4e:b7:eb:2d:be:8f:
         63:93:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:51:14 2025 by rpki-client