Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa
File:                     9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa (raw, json)
Hash identifier:          vUNtu+tDrUw6faWnk1bfPr6l6F0eW908Mux7EAMNbfA=
Subject key identifier:   CE:07:7C:39:D5:D1:2C:FC:09:81:A3:8A:A2:11:B9:F5:B9:C6:55:14
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB6778EF746663856AF6A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:67:78:ef:74:66:63:85:6a:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=45b8cb18-55cd-4517-ab5c-8c023f4b7798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:58:45:b9:e9:b3:84:ad:bf:11:9e:1c:6a:
                    e5:76:ca:c8:08:cb:cb:85:01:24:35:b8:b1:6a:11:
                    ac:f1:d9:4d:7c:4b:ee:d9:82:c8:2b:6a:46:65:44:
                    6e:8d:16:cf:18:84:ef:29:af:ae:5e:7b:43:b8:62:
                    38:42:c3:39:a5:b4:67:3f:98:5a:49:f9:99:fe:fe:
                    d6:b3:ac:29:d3:83:c7:42:30:9c:47:be:40:c8:93:
                    25:91:35:02:01:20:b3:41:36:1e:d5:c4:34:32:ea:
                    d2:4c:71:86:d5:fe:5d:40:43:4f:98:4d:88:16:a6:
                    82:12:22:3b:cc:a3:32:70:33:a7:97:db:0c:04:88:
                    56:c0:db:b9:4f:ed:39:ba:3e:1b:b1:b3:62:ca:46:
                    ea:46:44:0f:b5:8b:90:33:bb:79:07:a9:6e:5c:1b:
                    79:05:f1:81:3b:e5:02:f3:d4:6c:1c:02:1f:12:82:
                    43:16:18:c0:36:46:9e:3e:6f:6f:3f:45:96:c9:4f:
                    24:40:43:ae:9c:90:08:36:4d:85:9f:59:27:c6:f3:
                    24:c8:f9:5b:97:6b:5a:89:b5:a3:af:0d:5f:ce:69:
                    b1:ba:d5:ff:8b:fb:f1:f1:83:2f:87:5c:fd:52:f4:
                    b3:da:aa:ac:bf:55:65:4b:50:27:37:f3:92:5b:ca:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:7C:39:D5:D1:2C:FC:09:81:A3:8A:A2:11:B9:F5:B9:C6:55:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:84:ef:92:34:15:d3:20:86:25:9d:db:37:a4:ab:9c:e9:72:
         ad:d0:2c:6a:9b:32:bd:b7:ca:57:67:e3:5b:f2:fa:42:0a:45:
         c1:d7:ed:c6:54:97:87:0a:f1:3c:3b:6b:f3:6d:01:18:31:d2:
         66:b1:b9:ac:bf:10:c2:3d:a9:1e:19:49:98:79:ff:f5:c9:90:
         27:ba:e5:6e:19:22:f3:50:d0:a1:50:18:bb:f0:b8:d2:54:35:
         a8:96:73:02:00:ce:ff:d6:f7:30:8e:1f:0a:6f:b5:80:ea:4a:
         a0:a6:65:d3:ae:4b:58:75:1a:67:17:dd:51:6c:c4:5b:65:2c:
         fc:2c:ea:7d:d9:e9:ca:f5:eb:e4:8f:d7:3b:3a:5a:85:05:ef:
         b3:b8:27:ea:db:35:9e:ad:e7:b3:28:69:57:1f:33:4a:26:24:
         48:f1:bb:d0:48:4c:2d:da:ef:d2:a5:7f:9e:f8:97:05:38:c1:
         b5:0d:34:44:62:bb:9e:65:b6:3a:74:17:1e:34:00:71:f3:a0:
         57:ee:9f:93:f3:10:c9:ed:76:85:15:ec:2a:44:0f:bd:5c:67:
         be:43:63:90:f2:94:7e:a1:19:bd:11:51:05:b0:77:61:c1:48:
         4e:02:d2:de:c4:a7:cc:1e:ec:7e:6d:82:cf:60:c9:e9:c4:76:
         cb:9c:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:55:20 2025 by rpki-client