Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa
File:                     15cbeea1-441a-3e43-aaac-8a33f07a4058.roa (raw, json)
Hash identifier:          Uv5u9R3ml1JH0mwLstKFwqvbQaD6jG7LMd9A20rn8+E=
Subject key identifier:   48:66:F0:DC:EC:9D:56:36:4D:54:97:5C:80:65:AF:95:D8:0A:4A:2A
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584A936B611BD842363FC90D2D80
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     11620
IP address blocks:        147.124.32.0/21 maxlen: 24
                          147.124.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:61:1b:d8:42:36:3f:c9:0d:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=ff056fa3-b244-4971-afe7-3f3cd1e78758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d5:d7:7c:d8:c4:85:19:ef:5e:7a:e8:60:36:
                    20:df:9a:13:0e:15:cf:90:6d:74:1e:9f:bd:ed:b9:
                    57:2d:0e:2d:c1:31:d5:b3:52:c7:53:1d:dd:18:5a:
                    2e:dc:53:c7:92:21:74:16:f4:f5:41:e8:68:ac:c7:
                    5a:ca:91:62:ac:a8:38:1b:96:49:26:d5:23:66:9b:
                    39:9a:38:40:fd:d3:3f:b4:e0:23:ee:d7:4d:c1:b5:
                    e1:70:ef:33:3e:32:19:eb:0b:07:50:d2:78:16:39:
                    a9:ef:6b:aa:6b:09:d4:72:c5:f8:51:79:38:3e:52:
                    b0:bc:d2:17:3f:f9:d9:a1:49:02:1f:da:83:65:e7:
                    d3:20:97:b1:c5:24:4d:84:17:52:b3:44:08:a7:d0:
                    02:9d:f1:2c:86:1e:47:94:8c:21:c5:98:2a:e0:94:
                    a5:40:17:e9:53:8c:4a:14:ea:63:c0:18:83:1e:73:
                    d5:ad:94:d4:5c:d4:5a:20:f8:2b:14:8e:83:00:ea:
                    c0:4b:65:c7:2d:a0:5d:55:bc:bc:24:23:10:3b:92:
                    72:2f:b5:51:45:c5:0f:fa:98:03:a8:e3:d3:92:80:
                    81:06:72:e2:6c:03:eb:a3:62:95:5b:3f:e8:f6:9a:
                    eb:8e:6b:f9:66:0f:2a:1c:c4:b9:ec:ea:df:2e:cb:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:66:F0:DC:EC:9D:56:36:4D:54:97:5C:80:65:AF:95:D8:0A:4A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:04:d2:07:ec:dd:82:b8:e0:d2:8c:16:91:ff:e4:e3:ae:55:
         b8:3c:5f:a8:d7:05:b9:a0:c6:eb:1e:e3:a0:dd:30:48:35:c9:
         05:18:91:a0:bc:c7:61:37:ee:00:dc:3b:ad:0b:a9:42:42:59:
         2b:58:c5:ef:ca:ae:98:f2:0c:45:a2:fa:34:86:a7:17:e6:ba:
         3d:1f:11:50:79:f4:88:b0:0d:63:cd:f1:ef:a4:f0:9c:3d:7f:
         2d:3f:66:41:27:d7:d3:47:9c:23:c6:65:7b:f1:99:af:54:52:
         33:7f:fb:bf:67:86:65:44:e2:97:63:11:21:7e:80:0d:fb:bd:
         5f:fa:d2:db:6f:f1:f4:59:cb:f3:02:0d:e5:24:1a:ba:fd:f6:
         38:82:c1:ce:e6:42:4b:e6:d5:a1:e6:57:7b:fd:c0:87:82:4a:
         ff:95:22:8d:07:0e:c7:f9:ac:07:6b:eb:1b:1d:25:63:16:2f:
         23:b7:29:20:d0:1a:da:8f:74:fc:29:42:18:69:83:20:35:72:
         b6:f5:fa:a0:41:90:b5:77:95:80:25:14:8f:14:d4:5d:f9:92:
         71:d0:02:d8:39:21:09:a9:be:a7:b1:0f:53:2a:0c:bc:45:c3:
         36:50:94:6d:09:79:b7:b6:ad:f1:d4:1a:56:ac:aa:3d:9f:cf:
         f0:2f:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 01:12:36 2025 by rpki-client