Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa
File:                     ca233fea-c265-3736-9f5f-ff863e476586.roa (raw, json)
Hash identifier:          7N8Z5QqAnU/I5CqiUWlzfteMExP4OsX8SUbgEOtC55s=
Subject key identifier:   BB:53:A6:48:5B:E6:6F:65:CE:A1:BF:BA:C2:99:C3:3A:8A:35:1B:3D
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849FF7513A581241C8EDA742525
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     400238
IP address blocks:        147.185.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:13:a5:81:24:1c:8e:da:74:25:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=1c987b46-4f79-4714-8220-2613a3c14a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:5b:a3:fb:96:db:47:25:e8:94:b1:75:2d:
                    9b:7e:f5:e7:7c:ec:cd:e7:7f:ad:80:ee:be:9c:8e:
                    12:be:18:69:0c:dd:ff:a6:56:bc:13:f2:d0:4c:11:
                    4d:e2:a0:92:3a:c9:91:c1:56:18:29:76:32:ba:35:
                    8b:7f:61:ca:c4:91:00:d7:7c:dc:69:96:a5:77:c1:
                    8c:bd:14:17:7c:b1:a7:80:3c:15:5c:0e:7f:4b:ce:
                    f0:36:8e:0f:4f:67:ab:e1:2c:cb:2a:83:65:8b:43:
                    1c:db:16:ed:5b:32:62:ed:6c:f3:fe:6a:02:1e:df:
                    5d:5a:bb:9c:5e:1f:eb:fa:a9:86:ad:35:c4:06:a9:
                    2e:f3:6a:9a:c5:61:3f:3a:75:f0:de:93:52:87:d2:
                    90:ed:86:22:a3:0d:db:8d:df:5a:5b:5d:b4:c8:bd:
                    66:b9:e0:fa:8d:7c:19:60:da:33:57:68:12:4c:35:
                    f1:5e:53:73:fe:c0:ba:a3:62:47:1c:48:32:05:23:
                    a0:04:72:29:44:8e:be:07:56:8c:eb:d0:52:9e:d8:
                    20:ec:80:8a:c0:b5:ac:14:01:89:c5:f0:25:2e:62:
                    97:ad:51:a2:8e:db:8f:22:d1:26:a9:8a:21:ab:2f:
                    21:c9:5e:82:77:2f:a5:ff:bb:9c:24:aa:5f:2d:3b:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:A6:48:5B:E6:6F:65:CE:A1:BF:BA:C2:99:C3:3A:8A:35:1B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:dc:1b:c5:f7:dc:72:7e:27:74:3a:36:e4:da:3a:57:28:
         3b:1d:cd:89:7c:dd:16:52:ed:91:f3:24:8f:29:95:82:70:44:
         fe:ed:c4:a6:ee:e1:87:26:24:9f:34:d0:c7:4f:9d:44:f3:f4:
         1a:e3:be:96:7c:ac:f2:21:53:bc:de:ee:46:e9:c8:cb:b6:64:
         e7:86:f7:80:71:09:6a:b7:d6:2b:ae:57:40:be:c6:ae:17:cc:
         82:c4:99:61:11:5d:18:b2:d8:32:fd:70:ab:48:d5:21:4d:e9:
         4a:7a:dc:53:e3:41:85:cf:d1:61:1a:94:c0:3d:72:ef:b3:9a:
         e5:09:23:9e:70:7d:92:48:66:5f:71:c4:d4:06:b6:ad:bf:ce:
         f5:0a:5d:4c:d6:19:81:09:9b:40:42:d7:df:20:09:27:04:97:
         55:62:49:71:b2:83:64:07:e3:39:43:ad:fb:2e:bb:9c:80:92:
         29:9e:36:c0:a4:0d:f4:3c:cd:d2:4c:d1:05:7b:74:7a:e2:1c:
         10:7c:9b:8d:2e:9f:89:74:a9:4e:e8:03:7c:08:7b:0e:ec:a8:
         16:53:dd:9c:55:c8:4b:51:3c:8a:40:b9:4c:91:4d:4e:8c:6e:
         4a:5b:49:60:a3:00:4b:12:c0:ab:51:8e:b6:df:1f:dc:39:00:
         21:7c:6a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:15:10 2025 by rpki-client