Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa
File:                     7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa (raw, json)
Hash identifier:          CWW1cZc6Q+k9mw1m3ieOIYQ832RhPgLxgo4x4O122Sc=
Subject key identifier:   43:6F:B5:F1:1A:52:DC:72:89:EC:F4:EB:C1:B7:6E:36:5B:ED:46:3A
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A0C056448F563426014A2EA80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     15313
IP address blocks:        147.124.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:64:48:f5:63:42:60:14:a2:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=707bfc04-377a-4660-bb7b-ecb1c14757ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:a9:a4:eb:3a:c7:3a:61:55:16:88:d9:9f:
                    dd:31:b2:58:d3:2a:fb:d9:99:a7:9c:e5:3a:0f:e8:
                    be:84:7f:42:43:c0:55:c6:1e:e2:a5:c5:89:fa:4a:
                    5c:6b:88:4d:bf:2f:58:cb:d6:75:13:e4:b6:71:23:
                    91:71:57:ca:e2:a5:c8:0f:de:65:61:1e:b2:50:4a:
                    14:ba:f9:a3:fb:68:06:fb:b7:2e:3b:ac:a2:51:ac:
                    15:e3:80:1a:ee:58:9b:95:ab:c2:bf:10:47:fd:53:
                    25:15:2c:21:9c:64:27:a8:8a:44:a6:e0:e4:03:b7:
                    75:d0:54:7f:a5:84:cb:f4:8f:25:3a:1c:1a:27:0b:
                    c6:63:70:44:3a:e9:bb:7f:ad:38:28:8e:8e:89:05:
                    aa:75:98:1f:74:a8:d2:0b:84:ea:1b:28:7b:ae:62:
                    bf:ed:e6:a3:69:d0:f5:a3:06:52:14:a4:72:04:3a:
                    20:45:ed:88:1f:4a:53:10:58:17:24:e9:7a:5e:6d:
                    e0:12:6e:67:36:81:a4:77:77:47:f6:6c:f4:d8:92:
                    22:5c:12:08:ad:4f:6a:5e:c1:4e:2e:7b:db:28:1b:
                    b2:ec:a3:f0:71:43:cf:61:5a:f2:72:49:56:d5:c6:
                    9a:23:74:74:c4:92:93:ed:f5:be:c0:7b:7f:d2:e1:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:B5:F1:1A:52:DC:72:89:EC:F4:EB:C1:B7:6E:36:5B:ED:46:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:aa:f2:41:d0:c7:a4:5b:e2:05:60:32:f0:e5:28:62:6f:
         fd:00:57:14:3e:84:86:8e:ee:17:0a:42:9a:76:89:7f:85:b3:
         f5:fa:06:0a:ae:64:4b:93:8b:51:13:3d:8e:93:bd:e8:17:c9:
         2d:62:6f:5f:e3:62:c9:56:ba:ce:35:03:de:cf:cd:f8:66:f7:
         77:54:dc:a4:95:e9:d9:15:a5:0a:0b:f7:d3:56:d0:f6:35:3b:
         32:c4:ea:34:49:e9:6a:da:41:10:16:8b:0c:a1:8b:fd:3b:e0:
         a5:df:5c:bf:65:44:b3:f7:b3:d2:9e:19:d2:37:f0:ea:90:6a:
         03:08:0e:a1:8c:0a:d9:2e:05:60:40:a0:37:be:87:f8:6a:89:
         c4:f1:15:14:34:17:64:8c:ec:4d:c5:df:d6:05:8a:3d:1f:f4:
         97:f9:ad:2a:83:d4:3c:fe:70:1c:1a:0b:fb:77:9e:63:d2:20:
         fb:ba:64:f6:e1:42:87:df:6b:77:30:8f:8e:c0:e2:b7:40:a4:
         d9:76:6d:c7:f1:00:6d:2b:82:54:26:73:3a:1e:5b:8c:3a:3a:
         46:16:5e:01:f8:29:41:9c:30:85:e2:f1:b2:80:14:0f:1d:35:
         c9:89:21:e2:66:21:2f:ee:be:1a:d9:c0:67:6e:8d:b1:70:f5:
         4a:db:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:02:45 2025 by rpki-client