Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/5781ffeb-465f-33d5-b6e7-a336b91e2157.roa
File:                     5781ffeb-465f-33d5-b6e7-a336b91e2157.roa (raw, json)
Hash identifier:          IUh2V7nRPQV3/UsanESObLTwgbPvgXVls6m7CbSgC+c=
Subject key identifier:   79:F1:89:E9:97:8B:D5:B1:F3:49:B0:AE:CF:62:B6:B2:1C:E4:FF:C5
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F43285849542458B49A4D359595E47580
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/5781ffeb-465f-33d5-b6e7-a336b91e2157.roa
Signing time:             Thu 27 Mar 2025 16:14:58 +0000
ROA not before:           Thu 27 Mar 2025 16:14:58 +0000
ROA not after:            Wed 25 Jun 2025 16:14:58 +0000
asID:                     2615
IP address blocks:        147.1.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:54:24:58:b4:9a:4d:35:95:95:e4:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Mar 27 16:14:58 2025 GMT
            Not After : Jun 25 16:14:58 2025 GMT
        Subject: CN=831de522-bd3c-4453-9082-2addcef75a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:55:5e:19:c0:a2:f6:67:18:7b:50:2a:ad:
                    9a:1b:e7:37:67:ed:6b:8c:f6:50:07:d7:d6:03:9e:
                    3b:2c:31:94:a5:88:13:1e:32:65:5e:95:44:05:dc:
                    c1:2c:98:b9:c5:5d:d6:bd:cd:e2:53:29:af:30:0b:
                    60:a8:fe:de:98:eb:dc:72:2c:79:5b:f2:a2:c5:a8:
                    03:87:82:02:93:cf:85:c2:b4:1c:b8:c5:a6:f1:05:
                    ae:39:0c:c7:7d:56:df:1b:44:a8:c2:75:c6:1a:e1:
                    4d:d8:ff:d6:ee:45:94:af:fa:f4:ef:cb:ac:ad:01:
                    6d:f3:e1:75:e0:28:70:ed:33:50:7e:50:ee:7a:75:
                    89:3f:94:36:71:0f:28:f9:85:d8:d0:39:9a:ff:d6:
                    05:02:1d:07:b8:2f:b2:7c:d6:aa:11:a7:7d:3e:df:
                    e1:70:d1:29:13:de:3d:16:ac:2f:f1:45:4f:eb:ae:
                    1e:e7:8c:8d:9f:3f:82:f0:77:e0:18:01:3d:f4:73:
                    78:df:78:4b:14:6a:10:97:1a:6f:16:50:a2:eb:d2:
                    d8:18:0f:cf:26:8a:f4:b4:8c:47:1e:64:0e:c1:e8:
                    3b:f4:6b:f8:6e:4c:08:a7:8d:35:a0:cf:66:8b:af:
                    cb:ff:66:f0:ed:ae:2c:48:70:b2:64:69:ab:70:ce:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:89:E9:97:8B:D5:B1:F3:49:B0:AE:CF:62:B6:B2:1C:E4:FF:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/5781ffeb-465f-33d5-b6e7-a336b91e2157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:af:ff:bd:4e:79:d3:c3:a1:82:b6:2c:61:f0:f1:34:39:
         2c:f9:6c:01:72:a1:e4:5a:8f:d7:f2:d8:9b:29:bb:b7:f3:78:
         24:5d:f0:b2:48:f9:5d:6a:08:4a:98:f7:70:51:a6:6b:c4:31:
         ca:e4:25:b0:be:35:1d:73:a8:3b:0c:58:b5:c5:2c:98:b9:d2:
         fa:83:69:01:ca:a7:27:eb:d2:70:ea:12:94:d1:3a:58:30:9e:
         58:94:03:9e:dd:b3:ae:13:6d:52:93:8f:a5:f2:cb:69:40:07:
         b9:f2:7f:7a:f1:d0:ca:e6:8f:71:7c:1f:1d:be:3a:1a:3f:fc:
         cb:9f:c4:98:ef:a6:d7:af:f2:67:3c:15:39:20:89:62:19:ff:
         99:fe:ae:b9:4b:7a:2a:0d:3d:97:83:0b:60:3e:b6:6e:fa:d0:
         dc:92:9b:f0:0c:64:a5:40:86:32:49:e0:39:f9:a6:29:c7:51:
         32:ff:f7:20:1c:ca:df:0c:d6:2c:c3:7a:07:3b:93:8e:5a:34:
         f9:d4:dd:6a:e8:d9:08:68:0c:e7:23:73:ef:47:fe:51:7f:2e:
         da:50:14:39:60:ad:92:a9:61:33:b7:34:83:53:9f:26:89:a3:
         05:97:5a:70:f4:c1:5f:56:5c:58:22:4a:27:65:0f:8a:47:32:
         f7:e5:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:46:22 2025 by rpki-client