Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/f26d7d43-d275-3402-8ae5-5579450cdc70.roa
File:                     f26d7d43-d275-3402-8ae5-5579450cdc70.roa (raw, json)
Hash identifier:          O7GCl39wC0MbCL1ePwz/2t6ctNp1f2F9+6zFvUNLbBY=
Subject key identifier:   AF:3E:52:EF:5D:D5:09:A6:01:B3:4B:51:25:8E:13:2D:53:08:79:E3
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F432858496E498CD8231CAFB26802C3E0
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/f26d7d43-d275-3402-8ae5-5579450cdc70.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     15171
IP address blocks:        144.86.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8c:d8:23:1c:af:b2:68:02:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=cfcdc45d-d72e-44f2-8610-1aa8ab27fd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:3b:82:df:dd:1a:7f:8a:cc:65:76:20:4f:
                    e9:83:a4:d6:20:86:d4:34:bd:2f:0e:18:f5:a7:7c:
                    f8:cb:26:cb:e9:7f:d8:b9:ba:6a:9d:86:e8:ad:b9:
                    6c:85:2d:ee:bd:8c:7a:86:02:ac:2f:da:be:cc:a5:
                    07:ff:49:0f:3f:62:a7:0b:64:80:f4:cb:a4:3b:89:
                    bf:dc:85:46:64:f8:0e:56:dc:14:78:87:77:df:b2:
                    ba:5a:7e:64:b8:12:1e:38:57:e3:72:27:4a:5a:7f:
                    96:46:a6:46:8b:62:fe:ed:e5:b3:e4:ea:18:cb:06:
                    38:79:be:85:2f:35:97:ec:aa:df:c9:b9:42:e9:20:
                    8f:81:b1:83:ba:b2:df:2a:cc:8c:d8:be:fa:2e:b4:
                    cb:01:57:05:3c:26:e3:30:b3:3d:6b:67:1a:d5:2e:
                    d8:53:89:d9:24:96:00:b4:d0:8b:cc:10:f8:86:55:
                    de:6b:6c:26:09:35:e1:e6:7d:d1:9a:d7:e7:99:11:
                    67:f0:f2:fc:dd:3f:67:27:20:ef:27:2f:69:a2:89:
                    d6:66:49:f6:5d:19:ab:76:f4:f4:6b:5b:16:f8:c7:
                    8b:62:b8:e1:6e:2c:cd:f6:2f:09:bb:62:96:e6:05:
                    b8:6b:a5:8a:db:26:f2:76:d9:a5:95:0b:4c:f8:c0:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:52:EF:5D:D5:09:A6:01:B3:4B:51:25:8E:13:2D:53:08:79:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/f26d7d43-d275-3402-8ae5-5579450cdc70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:20:6d:6f:9d:cb:bf:7f:8a:0c:98:f9:db:4c:21:a6:5e:24:
         ab:53:7c:fa:fc:54:fc:a2:88:8f:1f:30:10:c6:ee:a1:47:b0:
         83:ab:fa:a5:5d:d3:02:66:69:86:d9:e7:44:ec:bc:ec:85:c1:
         a0:3b:92:d6:bc:63:8d:b6:ff:6e:f1:6c:d7:17:33:a5:fd:11:
         80:6d:2c:82:9d:74:4c:3b:8a:c7:6c:be:21:18:b6:46:a7:5f:
         51:7e:c8:fd:a0:e3:43:43:3c:80:ea:92:c7:3c:22:80:e8:97:
         83:82:a5:a0:5a:48:4a:00:ad:3b:42:57:6a:dd:f7:ef:29:f9:
         1a:30:79:42:8d:67:61:67:f0:72:62:ae:3c:11:a7:d4:47:22:
         8e:33:ef:c9:6c:85:3f:89:2d:f9:aa:3a:b0:96:e9:24:ab:9c:
         7a:6f:d8:1f:52:2b:0b:cc:80:13:ae:13:a6:24:0e:cf:57:ab:
         73:ec:44:12:16:7b:25:92:18:29:24:b7:2d:b8:54:f6:50:ad:
         94:6f:b9:f5:25:0f:31:95:98:be:1a:61:b9:21:44:c3:02:b3:
         1b:4f:ba:23:0a:2d:cf:1b:79:7d:ca:57:60:0f:5d:61:8e:84:
         30:0f:42:de:4e:4b:fc:32:27:13:54:75:fb:86:44:6c:ad:0a:
         10:9a:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:30:59 2025 by rpki-client