Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/57957ef8-a4e1-36c0-87d5-256360043422.roa
File:                     57957ef8-a4e1-36c0-87d5-256360043422.roa (raw, json)
Hash identifier:          EACSPr1DktK/ivChHRZbpfAR4dghmw5jaBdI9mk7b2s=
Subject key identifier:   2C:58:52:7A:BF:B5:54:1A:5B:56:BE:4E:B4:6C:C6:06:C6:23:4B:FB
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A00DAC45E29AFD936A0A1A6C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/57957ef8-a4e1-36c0-87d5-256360043422.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26744
IP address blocks:        147.124.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c4:5e:29:af:d9:36:a0:a1:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c7371f04-1cb8-4b70-9ed0-66ddc449a7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:27:62:fb:81:6a:d9:f0:58:10:30:e0:fb:
                    56:fe:00:20:1a:b5:8e:a3:fe:ac:7a:8b:3c:13:24:
                    2e:61:2b:2d:2e:15:d9:50:f8:f2:02:ab:5f:d0:18:
                    d2:02:f0:4b:e0:af:b9:a8:c5:19:de:10:85:e9:32:
                    75:a4:98:30:a8:63:a5:06:47:e7:92:32:da:f1:c5:
                    44:ab:79:11:66:b5:4e:28:e6:3d:9d:ac:c7:9e:c8:
                    c3:fc:4e:0b:27:0b:04:71:16:c9:86:64:92:b5:2c:
                    e2:8a:68:1c:29:7f:ba:82:b0:77:e3:68:99:9a:45:
                    bf:51:c5:de:9e:8b:6d:e3:65:98:00:c4:0c:5c:32:
                    4c:01:02:74:80:cc:76:78:3f:eb:1b:c4:e7:d6:65:
                    00:42:f2:bc:f6:a6:1f:3c:99:76:da:b0:70:c9:3e:
                    e9:a5:1f:05:a9:29:43:97:9b:9b:98:bd:de:17:12:
                    01:41:57:23:e7:b1:91:16:6a:6c:bb:24:32:c3:6f:
                    9a:cd:35:63:73:13:50:5e:ed:9e:75:7c:a0:40:02:
                    4e:e7:9b:6c:e7:d7:30:05:69:50:26:ac:95:ed:c0:
                    95:dc:ce:33:61:e6:a9:51:8b:03:50:57:30:f4:73:
                    73:89:19:5b:3a:a1:8c:a3:b9:4a:ab:fd:7e:62:c6:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:58:52:7A:BF:B5:54:1A:5B:56:BE:4E:B4:6C:C6:06:C6:23:4B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/57957ef8-a4e1-36c0-87d5-256360043422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:30:1c:68:28:26:21:bc:d5:30:a6:63:6f:23:a7:ca:aa:cc:
         9e:95:d3:0f:1d:40:97:6b:10:6e:d1:8c:4a:e0:6a:ca:f0:b1:
         ce:a2:ce:67:f3:ff:00:9c:bd:df:f7:a1:70:71:88:c2:eb:51:
         c5:f1:fa:0b:63:50:ae:c0:9d:d2:cb:38:27:45:cc:c7:7c:a3:
         2e:a8:3b:7d:7d:82:57:87:66:5d:00:e4:58:d8:dc:00:4e:b4:
         96:5b:fe:f4:24:81:44:d6:68:4e:b5:b3:24:72:99:d1:78:7c:
         5a:f0:03:9e:e0:67:a3:20:4e:7b:2e:95:48:47:e6:b2:29:c7:
         18:66:e8:3d:a2:ff:21:97:94:a8:57:30:6c:91:1b:82:e8:e3:
         64:45:3b:48:06:a6:de:17:dd:51:71:bc:fe:14:98:42:70:8a:
         f6:ab:a5:e1:c5:3d:95:5c:95:68:b7:54:7f:7a:ab:7a:67:8d:
         26:71:ae:f8:3d:c1:3e:e6:90:18:04:2c:d7:11:66:06:ef:b7:
         85:2c:41:09:74:0b:ef:cb:49:77:9e:b7:fb:c6:67:4a:a2:cc:
         8b:75:d5:5f:27:14:00:78:de:31:c9:46:e5:23:aa:a2:50:fd:
         fd:bf:e1:dc:fb:b9:8b:44:ea:38:de:68:7f:58:95:b7:9c:00:
         68:67:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:03:59 2025 by rpki-client