Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa
File:                     c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa (raw, json)
Hash identifier:          /Nw50l+Guq6fS3GWbAEs5CqU3xqfwS2Xa6z+5//C8oI=
Subject key identifier:   D1:04:0F:CE:F6:C4:50:5A:80:E9:93:0B:FC:09:93:7F:B0:57:A6:1D
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849FF75131551C069390F0E9B00
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     400238
IP address blocks:        147.185.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:13:15:51:c0:69:39:0f:0e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=0f785319-7408-4c9f-a33e-1db9c4b3ceb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:b5:87:3f:68:e2:59:03:f3:0b:5b:16:02:
                    1c:3a:33:28:86:ba:7c:32:0d:4e:d2:0b:13:3c:a4:
                    e8:65:71:de:7b:1c:65:04:17:7f:0b:5b:75:9a:4a:
                    e0:93:fe:49:f8:63:4c:de:f8:9e:64:d2:48:59:c6:
                    af:27:1c:c3:7a:55:b0:20:0b:9c:ec:c7:e2:55:d9:
                    1f:b9:f8:14:c7:18:20:bf:f7:40:0e:eb:e0:14:e5:
                    8d:dd:18:7a:18:ce:35:9f:5d:19:02:65:3a:a5:04:
                    62:86:84:83:7a:da:65:3d:c1:f5:dc:4c:e6:76:16:
                    75:07:b2:bf:c1:eb:18:19:68:84:bf:2a:d1:21:e4:
                    46:81:56:57:fb:06:9b:29:0c:4e:be:68:48:46:6b:
                    72:e6:6e:4d:58:2c:00:c2:a2:f5:8a:be:a0:7a:7c:
                    db:6e:5e:17:e0:ee:ff:67:de:30:9a:2d:97:12:6a:
                    d0:25:c7:6d:8f:72:c5:3b:23:0b:4b:4f:de:c2:0a:
                    d5:de:75:a3:6e:a5:9e:24:56:16:fc:3d:9e:89:51:
                    92:47:d8:88:9a:64:98:18:15:eb:12:ac:d9:c7:8f:
                    7b:c6:de:0d:63:93:5c:0c:05:d7:1b:30:a5:1a:d2:
                    25:0a:08:90:43:c8:a1:b9:98:e2:59:70:d2:9c:74:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:0F:CE:F6:C4:50:5A:80:E9:93:0B:FC:09:93:7F:B0:57:A6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f1:59:d5:2b:33:f9:9f:67:06:21:9e:68:03:df:f0:e5:27:
         c8:65:07:05:5e:3a:15:48:a2:b6:96:65:5a:da:97:8d:4c:36:
         0f:69:e5:b2:2b:d3:ce:c5:b5:c5:af:49:bb:b6:14:1a:11:f0:
         d8:8a:59:6d:14:08:91:95:54:f8:ca:d6:15:0e:cb:22:5a:c2:
         2c:88:8b:65:0d:11:b6:4c:21:15:ba:81:a2:53:04:1a:90:97:
         10:d2:62:10:fc:36:11:cb:bb:a5:5f:a1:e8:e8:c7:ae:47:e3:
         ff:c6:4f:1d:3e:43:74:bd:c2:18:eb:7f:98:0f:cb:c1:2a:64:
         4a:de:5c:08:c2:c5:29:61:27:f6:ab:b8:df:1b:fe:8e:d8:ca:
         34:40:ad:6f:70:b7:78:8e:78:27:c6:2f:78:ff:b7:20:29:df:
         c4:a9:c3:d2:af:93:d1:f3:ea:49:87:c9:5d:1d:de:0a:0d:54:
         67:4d:f1:20:69:21:c4:58:e6:76:8a:69:91:99:a3:ec:f7:4a:
         3a:ca:3a:14:f4:f6:90:22:b0:ac:9f:ff:ad:5a:83:1d:d7:dc:
         2b:21:3c:39:98:d1:70:b3:83:ba:21:6d:5b:42:81:38:e5:5b:
         1f:c1:e7:dc:f2:18:cc:93:e8:d0:39:84:b7:d6:4e:44:2e:28:
         b3:67:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:09:17 2025 by rpki-client