Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa
File:                     7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa (raw, json)
Hash identifier:          m8LicbcKElk9VIEiaB++4eOCmVLwOL0E2k/A8HDU/yo=
Subject key identifier:   A8:18:2D:43:73:1A:4C:79:5D:8D:0E:AC:A4:1A:02:CA:1B:45:F9:EA
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858484D758F790713A5186B25CCC0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     15313
IP address blocks:        147.124.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8f:79:07:13:a5:18:6b:25:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=f5f89e75-4ca7-4d00-9ac1-fec4149b3ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:99:2a:c9:29:2c:d5:65:75:68:c3:ae:0f:
                    e0:04:f9:47:09:f8:28:37:dd:4d:8d:e9:8f:c3:f1:
                    f2:13:01:2d:63:28:7d:22:10:01:d5:cb:8a:d7:b5:
                    7c:7e:80:4a:84:62:41:3e:18:1d:51:27:ee:b8:f1:
                    6a:ec:2b:8b:07:f0:a8:93:32:2e:f0:10:cb:aa:1e:
                    06:5f:57:69:3e:99:50:37:fe:2e:47:f3:68:69:cd:
                    e2:76:74:88:86:22:26:2a:0b:d7:48:22:a9:e0:aa:
                    f7:66:14:1f:d5:ce:6f:b1:cf:33:25:91:b1:93:fd:
                    47:2d:fc:22:26:68:e0:e6:03:4f:85:31:5d:9f:9c:
                    3f:a1:84:6e:ca:bd:23:32:c3:0e:57:7d:5e:85:70:
                    a9:b1:d1:38:8a:94:06:7b:ed:ba:19:fe:ea:f2:5d:
                    2f:15:dc:85:74:22:3e:ea:1f:a3:2a:f3:46:41:ec:
                    f3:55:c6:74:fe:e3:ef:7d:dd:c3:a2:ef:6f:14:10:
                    8c:fa:ed:4e:8e:72:85:08:f5:d3:98:a7:1a:76:82:
                    f3:34:4f:a0:09:83:24:5e:84:86:0e:76:59:8f:07:
                    4e:c6:2e:14:2b:55:11:6d:f8:fd:cd:93:f1:eb:1b:
                    c2:23:cf:ae:23:d4:75:d1:a2:ed:33:31:8f:ed:54:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:2D:43:73:1A:4C:79:5D:8D:0E:AC:A4:1A:02:CA:1B:45:F9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/7bfd9c2c-6278-397e-8c0c-9e6ab2ec940f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:31:94:e2:ef:18:08:79:83:02:d0:22:18:2b:bb:ef:03:
         14:fd:d1:c8:58:e6:05:a8:27:7c:99:6a:c8:fa:75:e7:d5:39:
         5c:bb:aa:57:ba:24:a6:b1:3e:42:00:c1:bc:68:27:96:ba:67:
         f4:f1:6a:4c:ca:9b:74:14:34:61:80:df:45:49:d7:60:cd:eb:
         0c:f4:36:a9:b0:3a:b1:7b:0e:34:16:9b:d4:2d:21:34:d4:10:
         4f:d5:7d:b7:85:0b:81:bd:b2:6d:2f:2b:e6:9c:9e:7c:47:5e:
         4b:ac:b9:1f:d9:3a:fe:45:55:20:c9:b5:bf:30:31:41:5c:e1:
         7a:de:b2:ae:2f:b6:7d:61:97:38:90:3d:bf:1c:1c:15:7c:0c:
         58:57:e6:95:7e:ea:f4:2e:a8:c7:93:dc:9d:68:1e:c5:3c:af:
         5d:ef:9b:6a:61:57:ae:a8:42:9c:ef:c0:68:b9:7c:05:45:62:
         0e:1b:d4:ea:32:24:9d:dd:32:f6:65:8b:b8:38:cb:1e:26:2a:
         6c:c3:a4:7e:33:5a:12:15:98:36:ef:d8:57:26:c5:02:be:01:
         56:9d:76:07:18:d6:2b:c9:d5:c0:97:19:9f:ff:92:b5:4b:bf:
         2a:de:f8:de:f3:8b:a4:b9:df:dc:a2:52:10:a2:1c:8a:21:c7:
         8c:80:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:08 2025 by rpki-client