Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/75fb2ddb-1681-39a0-8c6a-1a775b4930b4.roa
File:                     75fb2ddb-1681-39a0-8c6a-1a775b4930b4.roa (raw, json)
Hash identifier:          MqYiawXL5ZlMcYQvDmDrHoClcRImSy6hAnCX3V03fh4=
Subject key identifier:   B8:BF:3A:51:31:AB:EC:22:A1:A8:EC:35:59:90:71:F5:84:0D:08:1B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858484D758F272BF9C83F3F09FB00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/75fb2ddb-1681-39a0-8c6a-1a775b4930b4.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     15313
IP address blocks:        147.124.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8f:27:2b:f9:c8:3f:3f:09:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=27ac41d7-ec55-4c8e-a45a-8fa18cfc1626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:78:68:d3:44:d3:69:a8:23:ca:53:df:43:
                    ee:16:e9:16:5b:ae:8f:e8:cb:44:0d:6e:47:f8:ee:
                    f7:a8:40:4b:c3:bb:ca:a0:7a:b2:76:fe:a1:ae:c5:
                    55:64:18:98:b4:9f:45:54:05:6c:ae:29:84:8f:c1:
                    5b:1b:5f:6a:0c:43:ed:c6:0e:94:29:98:11:9d:58:
                    14:bc:cd:8a:d8:15:9e:12:3b:2d:72:06:cb:2b:df:
                    22:6c:02:87:82:f4:aa:fb:8b:0d:09:0d:9b:29:80:
                    07:1b:06:63:e6:5f:80:78:15:d4:50:bc:4d:1d:5f:
                    95:68:6a:89:73:18:9b:ca:81:00:2f:92:39:02:7e:
                    c8:e0:b1:23:1f:a2:32:3c:62:42:ae:78:02:6b:ef:
                    d3:3c:3b:d6:8f:9e:8e:13:01:6b:6b:cf:92:bb:20:
                    7b:be:f7:08:24:4e:65:12:9d:e8:a3:68:7e:ba:82:
                    45:b0:cd:e5:11:87:d2:53:9e:06:c2:39:ff:e0:ae:
                    39:48:4a:75:96:08:58:77:b0:08:e8:d3:38:5e:d5:
                    0e:7d:25:14:f9:e7:52:cc:dd:e5:e4:f3:7d:07:b9:
                    0a:bd:ce:8e:4f:11:0a:84:2a:11:5b:ff:fc:d4:ed:
                    c9:9c:3e:d8:28:e1:91:75:d2:8f:d2:2f:7a:f3:3e:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:3A:51:31:AB:EC:22:A1:A8:EC:35:59:90:71:F5:84:0D:08:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/75fb2ddb-1681-39a0-8c6a-1a775b4930b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:ab:40:1e:d5:ac:fc:79:d6:17:49:7e:63:6b:1d:2d:a2:
         b5:44:cf:bd:39:1a:a2:bd:8b:f4:5c:0a:1c:a2:6e:a4:cc:3c:
         a6:a2:6b:23:16:49:84:73:91:f5:c3:27:da:53:b9:4f:94:e0:
         01:09:6d:f5:d6:7c:b1:45:12:2c:47:7b:20:50:e6:a7:45:ff:
         02:b3:80:9d:16:fe:8b:8b:e7:6b:d4:94:2d:1a:a0:75:1c:83:
         35:9e:dc:af:8e:73:95:dc:39:51:e7:22:1b:a2:6a:72:97:77:
         8f:71:c7:3a:ad:a5:b3:ac:04:7d:c7:45:2e:99:ee:16:24:df:
         5d:c0:bf:25:6e:a0:19:cb:47:0f:b8:79:76:77:b9:57:2a:7c:
         1d:2d:ae:5a:8c:58:85:d6:2e:68:0f:d7:8c:10:63:49:64:d0:
         f6:ec:b4:0c:21:ca:4c:fe:21:aa:19:b5:18:c7:4e:63:0c:19:
         93:4d:5f:d9:14:53:27:3f:57:ae:70:15:94:32:29:02:df:71:
         86:b4:15:86:17:74:57:dc:d3:ac:16:95:d7:03:b6:0a:be:29:
         4b:68:e0:02:a6:25:85:22:14:f8:e0:fd:6b:84:b6:20:4a:cf:
         1f:a0:f9:92:59:2b:71:98:45:fe:f7:1e:cc:b9:19:b8:57:87:
         33:66:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:41 2025 by rpki-client