Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
File:                     894b6866-3a19-3c26-9b99-d25c3c417e70.roa (raw, json)
Hash identifier:          sZnpRBtUcuIHfNNHpQ3SxY23xQo8eCNxRiUnyt2jp68=
Subject key identifier:   6D:27:E4:7A:F1:54:13:1C:9A:6B:6A:5B:BE:B8:AA:F4:98:C7:8F:B9
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01228F2E3831AAE57691C
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        24.149.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:12:28:f2:e3:83:1a:ae:57:69:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=1ce74a59-bb44-43a7-8bf7-1067298d1660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fd:88:70:c5:19:6a:77:d2:f9:ac:02:09:fd:
                    5a:5c:a9:dc:fb:23:c8:c1:a3:05:ce:c2:41:7f:33:
                    b5:b2:1d:5d:e5:0d:89:ee:ef:ce:b7:d0:42:ef:dc:
                    7e:69:f1:d4:b9:b9:80:d6:38:90:cd:b9:86:ca:fb:
                    18:cd:c7:bd:95:02:ba:e3:b0:27:d4:91:c2:78:80:
                    05:00:e0:09:9d:e7:fe:d9:69:f1:9d:3a:4d:3c:93:
                    ad:39:92:3a:ae:f2:09:db:52:90:90:54:63:6a:04:
                    89:61:0e:d7:43:34:da:03:43:75:66:15:49:ea:17:
                    51:b8:63:95:1e:b3:da:f6:aa:90:42:35:52:90:d1:
                    33:6d:13:0e:98:d4:0c:23:74:54:8d:1e:41:15:c2:
                    9c:a8:b4:7c:1c:a1:ce:dc:06:4f:9d:e2:14:0a:27:
                    28:5b:dc:92:a7:91:10:19:47:ce:a2:83:11:93:bd:
                    fb:da:2b:a5:85:51:d2:93:ba:2b:17:c4:5c:f8:16:
                    92:af:08:df:6d:d8:1f:85:f7:45:1c:dd:f3:bf:25:
                    11:7e:78:b0:f1:4d:87:d1:7a:8c:dd:93:8b:da:50:
                    95:93:24:58:b3:fc:7b:5e:90:b6:32:81:69:a0:6b:
                    7f:fa:4b:2c:66:9b:98:5f:2a:04:1b:04:56:d3:fe:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:E4:7A:F1:54:13:1C:9A:6B:6A:5B:BE:B8:AA:F4:98:C7:8F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:fe:2f:68:6e:13:04:ff:aa:1e:f3:97:ca:62:8f:94:41:
         0b:fa:3f:7e:9b:71:23:f7:4a:2d:8e:9a:cd:43:25:f3:ff:d3:
         16:3f:23:08:92:01:c4:df:4b:d7:87:67:f8:d0:fa:fd:d0:14:
         28:3e:1b:c3:13:86:da:01:2a:22:3c:25:92:cb:1e:e6:5c:85:
         8f:b1:9c:56:3e:b1:b5:78:1c:c7:e4:e4:9d:98:19:11:da:a4:
         e3:b1:e4:bb:ad:76:27:c4:fa:77:ec:96:86:cf:59:be:74:2d:
         4d:21:0d:0e:d9:9b:67:3d:35:45:a7:a2:02:b3:f7:17:7d:bb:
         13:a0:8a:52:8a:0f:37:26:b9:81:35:91:a7:f1:08:f6:40:ad:
         63:a1:ba:3f:aa:c2:9a:6d:f6:3a:bc:9f:ab:08:49:1c:19:fe:
         81:2a:dc:fa:3c:75:3b:7c:fd:a0:e7:76:d9:89:61:67:e6:4e:
         52:f5:78:56:0d:24:1f:69:b3:de:2a:83:ca:8e:d5:49:13:6c:
         d5:a6:82:3a:ae:b8:94:be:86:26:41:15:c9:cb:48:11:aa:67:
         fa:6f:52:0e:f5:fa:6b:47:7b:a4:d4:6e:53:27:41:8d:98:83:
         8c:e6:13:58:53:f6:ce:a2:88:66:58:e7:ed:56:99:43:46:e2:
         6c:70:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:03 2025 by rpki-client