Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa
File:                     8725cbd2-7d4c-3441-b378-daac43948e62.roa (raw, json)
Hash identifier:          oXZbCc1UjsfDmp8czav5jVSfxlw9ic7ebIm6CnPRnW8=
Subject key identifier:   6F:17:5B:2E:45:13:B6:D9:82:58:E8:54:7E:DE:E2:11:DB:14:2A:68
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F4328584987019828C74DCA391882D740
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa
Signing time:             Mon 14 Apr 2025 21:31:10 +0000
ROA not before:           Mon 14 Apr 2025 21:31:10 +0000
ROA not after:            Sun 13 Jul 2025 21:31:10 +0000
asID:                     2615
IP address blocks:        147.1.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:01:98:28:c7:4d:ca:39:18:82:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Apr 14 21:31:10 2025 GMT
            Not After : Jul 13 21:31:10 2025 GMT
        Subject: CN=04dd11bb-e394-4877-ba12-6c6e1e576c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:10:51:00:6d:44:8e:08:c2:61:70:85:1f:
                    02:0d:d7:82:e0:91:b1:25:4c:22:af:d0:77:b0:06:
                    bf:b6:55:9d:4c:a0:9b:cd:05:f4:52:4c:11:d6:e6:
                    c9:d7:b5:a9:a0:a0:7e:df:25:78:c4:fa:72:26:dc:
                    94:4c:f6:49:a8:3f:d4:2c:05:5d:d0:fb:d2:58:a0:
                    a6:a4:87:ad:e2:50:c3:47:3e:e3:6d:6c:a9:17:79:
                    7b:91:b4:9e:80:bc:11:6b:6a:1b:55:01:24:0a:c2:
                    b2:da:d4:40:d7:fe:68:6e:36:77:2f:24:ea:3c:91:
                    48:02:b8:87:51:44:67:bc:de:c6:a2:75:df:2b:d8:
                    27:22:1a:eb:92:7f:97:2b:aa:3b:40:ef:bf:49:2d:
                    be:72:de:4d:a2:14:e6:3d:78:ee:d3:31:5d:be:45:
                    76:1f:eb:65:bb:ff:db:b4:1e:65:72:5a:ce:24:81:
                    bd:de:b1:e7:9b:2b:f7:07:68:5b:62:24:08:ef:c2:
                    dd:5f:16:a7:07:92:ed:a8:11:20:e6:55:b5:e3:a7:
                    7d:47:80:e9:fc:13:0e:2d:8b:0c:d7:2a:c3:6e:32:
                    cb:63:af:fd:37:cc:f8:ab:84:d7:53:30:c6:7f:ab:
                    0f:9e:cc:d8:f8:33:f3:c5:72:24:73:e0:e9:ce:42:
                    81:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:17:5B:2E:45:13:B6:D9:82:58:E8:54:7E:DE:E2:11:DB:14:2A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:05:54:e3:0d:a6:d6:80:d9:b8:c6:f8:43:fa:5d:3d:a8:
         27:de:19:4f:ce:6c:d8:75:8c:85:6c:99:a8:48:90:78:44:c9:
         d8:53:af:ae:c8:be:96:3c:4b:27:8f:5f:a7:0f:48:76:ac:3c:
         78:28:72:2c:86:91:84:f4:76:0f:2d:64:84:14:cd:e3:b4:08:
         65:eb:e2:2e:d1:1b:4c:c1:17:92:9c:a5:42:0c:08:fa:e3:72:
         47:ea:44:a5:5d:eb:78:39:43:49:1b:48:b2:35:ce:6c:f0:13:
         59:80:64:f5:68:8a:8a:d7:97:c4:c3:9f:45:a2:f8:0d:d1:61:
         22:53:27:d0:77:20:6d:aa:5a:2a:cc:e5:d5:6c:91:3e:8c:25:
         dd:08:3f:d7:64:79:56:bf:72:19:7f:cc:48:57:59:20:fd:d8:
         3d:35:e5:84:98:83:9b:52:76:da:69:b2:ad:76:a6:88:98:99:
         20:9c:e1:12:60:a2:1e:ec:72:13:b6:ba:51:1c:e9:2a:e9:9c:
         fd:6c:6b:f8:08:39:b2:bc:b4:53:5d:ea:d8:c9:26:d4:f9:8d:
         e1:c1:62:aa:eb:aa:0e:06:bf:30:fe:7d:62:af:14:c3:39:d5:
         f5:9c:81:bb:26:87:61:3f:6d:56:2d:8a:2b:e1:08:9b:d6:7a:
         f1:09:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:38 2025 by rpki-client