Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/87c4a881-fd35-3296-a99c-aa20859bb0f6.roa
File:                     87c4a881-fd35-3296-a99c-aa20859bb0f6.roa (raw, json)
Hash identifier:          NUCm4Z4zZ5w4A17Idl9o4XGqjsFEJWcqeN1I2nvDyJ0=
Subject key identifier:   50:07:5F:DB:AF:41:1F:14:A7:1F:B5:72:E7:17:E6:B9:0D:B8:AA:0B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858492CB215C0CCB7C68ECA003D80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/87c4a881-fd35-3296-a99c-aa20859bb0f6.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     393740
IP address blocks:        147.124.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:15:c0:cc:b7:c6:8e:ca:00:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=8de05275-3c99-4a77-b875-79bed3c96c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:d1:af:b2:4d:ea:e7:8c:21:4a:d5:16:26:
                    55:3e:55:13:26:28:4c:9b:f0:ab:2e:96:db:1b:3a:
                    11:d4:71:28:2c:31:5a:47:31:0d:6e:63:22:db:cb:
                    53:b9:b1:0b:22:b1:e0:ad:05:d6:b2:7c:82:0e:31:
                    81:3d:9e:18:29:97:37:51:89:43:81:3f:e8:d0:36:
                    bd:34:ba:f5:dc:43:59:63:5d:7f:75:7b:3b:db:04:
                    1f:cc:80:b8:18:db:b0:44:26:db:63:19:4f:13:c2:
                    b0:25:11:f8:5e:00:14:19:b1:2d:7b:fb:88:9e:ff:
                    9c:0a:bb:6e:ee:4a:c0:ba:c4:ca:bb:07:ec:4f:6c:
                    a4:bd:4f:59:dc:7d:63:1d:0a:5e:90:b7:7a:47:5b:
                    51:5d:30:7e:9a:8a:e7:4c:bc:c7:f6:29:8e:0f:89:
                    91:22:b9:e3:02:fe:63:14:89:0d:66:4f:c4:91:07:
                    2f:03:07:e5:61:42:94:33:63:97:a1:39:c4:d3:43:
                    5d:a7:0a:4e:8f:68:82:c7:6b:10:d8:ac:95:96:2d:
                    c4:41:81:c4:d9:ef:5b:22:73:7f:f6:cb:da:6d:68:
                    99:c6:f0:19:48:7e:90:57:0a:00:46:7c:4f:db:82:
                    24:b2:4b:d4:f9:2f:73:b2:8c:ee:6d:fd:f0:7b:d8:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:5F:DB:AF:41:1F:14:A7:1F:B5:72:E7:17:E6:B9:0D:B8:AA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/87c4a881-fd35-3296-a99c-aa20859bb0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d5:04:e3:73:10:36:b8:6d:84:92:ba:8c:02:d8:7d:bc:5d:
         4f:3c:23:95:35:36:25:c4:94:3d:1d:a0:66:b5:b3:8f:94:05:
         6e:db:de:df:94:33:50:be:40:90:04:d3:77:29:3d:3b:b9:9a:
         40:5c:89:57:21:7e:ef:54:6f:05:57:f7:4a:5c:07:01:30:09:
         14:71:98:98:59:9d:55:4f:2b:b8:4c:c5:16:d6:66:ab:5e:58:
         90:13:c3:96:7f:fb:53:f3:96:ed:af:64:2c:64:13:e0:4e:4d:
         5c:75:50:66:93:29:0d:ec:55:ac:f7:ba:31:b4:65:b7:1f:44:
         c3:be:dd:e8:b5:da:7e:e8:d6:5d:57:20:df:0a:b4:05:6a:16:
         e3:19:43:d5:3d:22:d7:ca:24:71:a8:4b:f5:24:b6:c9:dd:d9:
         80:0f:57:0a:6c:70:71:81:3a:9d:ec:17:44:75:61:e6:5b:ac:
         fb:2f:ab:2d:89:13:e5:9e:83:06:d0:2a:b8:7b:58:6c:1d:01:
         d7:ab:d7:b9:24:1d:ce:40:1e:80:6f:f7:86:bc:e6:db:98:2d:
         5d:e1:0f:07:f5:3f:d7:42:2c:59:4e:1c:10:54:82:86:16:df:
         2b:0a:5e:88:f1:cb:72:c7:09:65:4a:11:3c:e2:49:ed:77:2d:
         3d:d8:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:55:13 2025 by rpki-client