Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/264a563c-c2b2-3c02-9362-c859a0704c62.roa
File:                     264a563c-c2b2-3c02-9362-c859a0704c62.roa (raw, json)
Hash identifier:          LmWqN3r4i4LtI17dvofegHs4E8kxRAEBnCt4mfqnZFM=
Subject key identifier:   78:4A:F2:2A:0D:13:30:B4:AF:1D:D1:F6:52:E4:F0:C0:73:B8:83:54
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F432858497F099C6EDA3AD60AD21F1CC0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/264a563c-c2b2-3c02-9362-c859a0704c62.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     2615
IP address blocks:        147.1.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:9c:6e:da:3a:d6:0a:d2:1f:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=e850443e-f260-49aa-a6a7-f156a292a602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:16:58:c5:43:df:28:cd:c4:17:be:a3:43:
                    f6:8c:f1:f0:24:fb:4e:c2:51:a9:08:bc:18:73:89:
                    18:c7:35:d1:74:7e:a3:3e:95:c6:10:85:53:4b:84:
                    30:e1:4c:96:c5:1e:70:2d:7f:f6:2e:b2:4b:ac:67:
                    1a:c7:fe:82:f2:a3:84:1d:d8:4a:94:83:f1:ca:84:
                    84:00:b5:c4:0d:89:a6:59:44:56:f8:3e:41:f5:61:
                    5c:95:51:04:24:f8:e5:85:25:40:fd:9b:0e:51:70:
                    eb:d8:74:ad:b0:a5:9c:a1:73:4b:15:a0:c4:d4:6f:
                    3f:57:49:60:03:e0:b2:f9:e5:54:a3:68:e8:e6:48:
                    87:fe:a8:bb:89:7c:08:cd:ce:96:80:0e:f5:85:b8:
                    aa:a3:17:41:16:be:59:ea:f7:15:09:f7:aa:39:28:
                    3e:11:db:30:2d:c9:d7:a3:fe:6b:15:01:1b:af:ee:
                    35:f7:52:fe:3e:16:df:61:41:75:d2:31:f7:de:71:
                    a8:c2:cf:71:55:fe:2f:03:bc:51:07:f5:ab:e7:ad:
                    b2:76:f3:f4:48:34:97:87:f5:3a:8b:c7:be:ec:a0:
                    48:ec:0b:d7:37:20:f8:81:ee:26:00:57:34:9b:3d:
                    f6:a9:89:d0:89:a7:4f:10:3b:04:df:d1:2e:56:83:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:F2:2A:0D:13:30:B4:AF:1D:D1:F6:52:E4:F0:C0:73:B8:83:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/264a563c-c2b2-3c02-9362-c859a0704c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:22:86:08:d6:ee:09:6b:d7:af:ad:f3:3c:12:63:01:3a:
         ef:19:48:be:ca:ff:5e:00:37:a3:51:94:4c:5e:c4:2f:f8:d9:
         f6:9e:d7:f1:14:99:85:41:e5:83:7f:c6:20:cd:bf:43:cd:c8:
         fb:13:e4:94:8a:59:37:a7:74:d6:fb:bc:8a:74:b9:ec:7e:7f:
         42:c5:78:a9:cd:f0:c0:0c:72:38:43:40:0e:8d:c5:fa:89:c6:
         11:24:d1:34:bb:2a:9b:c3:00:a7:19:5d:c6:d2:c1:26:24:58:
         e4:4e:e4:74:cd:c8:1d:2c:0c:70:e1:05:75:c6:bd:e3:c5:68:
         75:5a:a7:7e:75:6a:6d:92:b3:1b:60:92:36:cc:42:9f:f5:0b:
         d8:33:4e:61:48:5a:d8:f5:03:36:7a:9d:a8:8f:e6:9c:d9:d9:
         8d:c9:d6:30:ae:25:30:2f:35:4d:57:4b:bd:17:81:4d:15:78:
         a0:5a:8f:13:e1:59:03:cb:04:a6:58:16:23:8a:da:83:c9:97:
         4f:c6:ac:d0:cb:a0:31:9b:36:57:a9:b1:2b:7d:e3:55:6b:7d:
         7f:2a:5e:56:62:9e:87:49:70:31:cd:37:b0:b1:8f:1d:f9:80:
         dd:fc:f4:0a:e9:e7:7f:86:b1:0e:30:91:5f:7a:85:0b:63:bf:
         44:07:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:54:10 2025 by rpki-client