Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7b95e84c-0e98-3f1e-b6d9-aa212571c705.roa
File:                     7b95e84c-0e98-3f1e-b6d9-aa212571c705.roa (raw, json)
Hash identifier:          bushSqNw1rPBGGEr7WgCR10cBcyR7Ksv+gcK6ULH3PE=
Subject key identifier:   87:39:86:5F:27:17:33:EC:AD:EE:B1:A4:BE:FF:D5:48:DD:17:56:94
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AD92EECF7E48C58E3D100
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7b95e84c-0e98-3f1e-b6d9-aa212571c705.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        147.124.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d9:2e:ec:f7:e4:8c:58:e3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=65908b43-a622-4fd3-b4ce-65bc51237079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:5d:95:4b:0f:b1:67:fa:12:64:0e:9f:d6:
                    66:ca:cb:98:e8:7e:e1:81:a4:94:b5:46:ad:46:d0:
                    15:bf:f2:76:cd:a7:e1:4f:98:6f:8e:c6:b9:5c:ab:
                    e4:ba:13:fd:78:8f:ee:ee:48:c3:98:dd:4a:37:4e:
                    27:42:35:32:c6:0d:41:84:6a:f5:e6:e1:a4:3f:5b:
                    66:ca:d8:d4:42:aa:8a:95:62:f8:64:40:8e:7a:17:
                    0e:8b:a8:03:36:07:d8:e3:23:9b:f5:0a:0f:25:6f:
                    84:5e:6b:08:a7:d5:97:83:3f:f3:90:11:9b:b6:c8:
                    a4:96:71:c8:8d:45:b5:cf:06:13:9a:04:01:62:c9:
                    37:98:ff:11:c0:a2:d6:a1:94:4e:dc:68:b9:21:cd:
                    54:7d:2d:3f:a3:b2:63:fb:a5:78:6b:3c:e7:8c:38:
                    a3:3a:76:4e:d1:b7:2e:eb:14:8f:9a:f0:52:88:a7:
                    c3:51:3d:54:84:12:d6:14:c4:a8:16:1b:b4:46:9e:
                    ae:39:61:75:1a:0d:bc:d0:67:02:c4:d5:a3:6d:72:
                    81:f0:e5:f4:80:3e:ab:a4:8a:96:9e:81:78:a5:73:
                    c7:dc:6f:ce:eb:ab:19:3b:af:2c:60:22:b8:ab:cb:
                    c1:43:8d:fa:23:df:02:a5:d7:c2:19:d9:49:df:12:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:39:86:5F:27:17:33:EC:AD:EE:B1:A4:BE:FF:D5:48:DD:17:56:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7b95e84c-0e98-3f1e-b6d9-aa212571c705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:22:0d:45:31:87:90:1c:40:ad:f2:a3:72:11:d4:00:32:59:
         08:e1:11:7e:6a:57:a4:a3:7a:c5:aa:e4:74:78:a7:6e:0a:fa:
         90:0b:8a:9d:d6:e4:8a:f1:92:15:00:0d:be:7a:d2:d5:3b:ac:
         59:86:ee:62:2e:9e:15:96:ca:71:06:c8:f3:57:b5:3d:47:0c:
         6e:0f:a6:f3:c6:14:32:b5:54:3b:01:f7:59:19:68:c7:94:5d:
         5a:20:9a:ec:d4:56:49:1e:d4:37:0d:5e:1c:ec:e9:36:70:89:
         14:20:6a:bf:e4:1f:28:da:56:46:42:6a:81:fc:14:86:7f:13:
         f4:28:60:01:e6:01:56:0e:f8:88:b3:74:e8:ce:27:b6:18:73:
         83:1f:40:6f:e5:74:18:3d:aa:97:dd:88:6d:c0:d9:9b:e4:42:
         48:da:f8:f2:a0:c4:a1:ed:19:01:38:ba:d2:af:b2:d8:97:f0:
         0c:19:b1:b8:8c:48:5a:8e:24:7e:c4:b1:7e:7c:ef:b0:14:b8:
         5b:46:c8:8f:97:aa:58:11:dc:cb:8c:93:02:e6:d3:4d:9c:67:
         89:b6:70:51:87:27:d5:57:a2:b9:02:9f:4b:ca:bc:d9:06:36:
         ff:fe:f3:ae:9d:4f:8f:19:4a:0a:63:d8:7a:98:90:61:3b:68:
         e4:18:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:07 2025 by rpki-client