Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7650e5e9-1eae-374d-b035-624e6007a5d8.roa
File:                     7650e5e9-1eae-374d-b035-624e6007a5d8.roa (raw, json)
Hash identifier:          KWuYubI9tzG9GF3YjZmBJ/10JwjLD6WzNoOqGdSXRcg=
Subject key identifier:   20:6B:40:05:1F:97:84:8D:1D:DE:7D:A7:E8:D5:ED:6E:D2:75:08:6B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285849218411B2FB54BA70C38CD600
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7650e5e9-1eae-374d-b035-624e6007a5d8.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        162.247.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:11:b2:fb:54:ba:70:c3:8c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=aba0638c-0998-4b14-a467-ac1daeb25791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:1b:4d:ed:a3:66:df:dc:d5:f2:a6:9e:b9:
                    1e:0b:8e:6a:0f:d9:f2:e6:39:d7:54:dd:3f:63:66:
                    d8:24:ce:bf:c9:46:ae:0a:46:ff:16:01:c5:a9:3a:
                    cf:0c:01:9b:c8:ef:5e:5c:87:ed:b1:7b:ea:3f:3b:
                    e2:25:a1:68:f0:f5:4e:07:c5:c1:aa:09:07:e3:a9:
                    b7:ff:f8:6d:4a:fa:4a:81:ea:d5:f8:86:50:66:20:
                    8c:cc:9a:5d:44:c4:e0:12:75:a8:92:e3:0c:0b:34:
                    5d:5f:f0:ed:ec:25:11:7c:44:56:f3:47:65:ea:52:
                    42:aa:f1:ae:fe:a2:e8:58:8d:64:e0:69:23:66:d2:
                    77:d6:d7:df:8f:d7:cf:16:82:7c:40:3d:52:c3:08:
                    e3:ac:f9:1b:a6:c1:c3:b1:5b:f8:42:e4:5b:6e:69:
                    cd:80:5f:65:bd:c5:9e:91:3b:64:02:6d:9d:65:46:
                    d2:12:a5:e3:a1:b3:dd:cb:f6:cc:3e:0b:b8:74:d2:
                    8d:15:dc:e7:e0:d1:12:38:7f:ed:3b:7d:3d:d3:f5:
                    fe:6f:33:d6:ea:aa:f3:e7:a2:10:59:fd:23:99:7a:
                    24:3d:70:32:1c:74:41:42:fb:91:5e:86:b2:00:d1:
                    66:a5:b0:b1:9e:28:f6:a7:a0:ac:de:63:5f:b8:31:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6B:40:05:1F:97:84:8D:1D:DE:7D:A7:E8:D5:ED:6E:D2:75:08:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7650e5e9-1eae-374d-b035-624e6007a5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:06:de:2f:ac:8c:39:53:08:ae:36:05:48:51:04:ed:f6:
         63:b5:31:3d:ee:79:f8:d3:fe:dc:28:60:93:52:f4:70:3f:88:
         59:71:e9:5d:35:b6:5b:5d:f3:5b:5c:2d:97:41:a6:d2:58:0d:
         22:4f:dc:a7:07:f7:a8:38:03:e6:44:b3:0f:6a:04:6d:0a:40:
         1b:e1:b8:11:fd:0c:7e:dc:b5:60:ea:99:2c:47:e2:77:8c:19:
         14:2c:16:06:ce:03:bf:28:20:7f:36:12:d8:d3:42:7a:05:ea:
         fe:5e:72:b8:98:dc:15:ec:be:2d:94:b7:77:12:7c:f4:3a:0b:
         f7:4c:9c:b0:51:8f:7a:ee:89:e8:da:51:a8:99:73:18:07:b6:
         c0:27:5a:f7:e4:f6:7b:6f:fd:44:60:ad:8b:ad:d9:bd:42:c4:
         fd:ee:16:f2:db:8f:6b:18:ab:7e:dc:82:c6:2e:0d:ea:36:01:
         14:a1:6d:b4:68:e9:f3:c7:e3:e2:4d:dd:0b:f4:d6:30:8b:4f:
         d7:e4:21:fc:81:1f:ba:80:d3:b8:93:ba:2c:97:24:6c:0e:5d:
         40:83:81:3f:cd:ff:ef:06:e6:d4:36:76:c2:ba:7b:df:4e:4d:
         cc:f8:89:16:57:a7:d4:dd:0e:4f:3c:f7:a4:c4:06:cf:b9:c4:
         51:4a:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:38 2025 by rpki-client