Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa
File:                     f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa (raw, json)
Hash identifier:          85f7CAL3sIuvhABVq2HCji5i0g9Z6CoQDbzM12T7cmo=
Subject key identifier:   E7:58:E4:76:1B:17:EF:D1:2B:37:F5:40:C0:AA:E0:69:A9:CF:32:CC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA36F0C75B62DED6281080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:36:f0:c7:5b:62:de:d6:28:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=5b686988-6e8a-45ab-afcf-a02a119c2c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:a5:77:9d:39:0e:cd:b5:d7:ae:2c:dc:55:
                    fa:37:2a:7b:32:f9:1c:d3:b3:c1:48:b3:76:36:10:
                    1b:0c:87:35:e1:6d:9c:08:0a:ae:ca:0c:7b:89:a4:
                    f2:77:2b:ba:0e:c5:2f:2f:c4:ee:48:39:b6:2d:ea:
                    8d:82:03:16:c5:fe:bb:a3:38:ce:88:6e:9e:10:26:
                    0c:1c:8b:e2:18:97:2e:2f:e1:35:1f:a5:83:ef:d6:
                    14:f3:85:ed:e2:f0:9a:60:e4:ba:b2:e9:2f:6b:bc:
                    54:47:5e:a0:d9:6c:6f:05:f9:20:7d:be:0e:63:ef:
                    32:b3:61:bb:38:93:b9:31:b1:dc:e7:9b:34:3c:36:
                    9b:82:c0:eb:80:6c:e9:e9:be:a9:c0:49:ed:8b:8b:
                    fd:b7:77:a1:8a:ed:27:e4:c9:4a:2f:b5:ba:5f:16:
                    84:5e:3e:36:cf:a4:07:60:6f:f3:25:80:09:d6:3c:
                    46:a1:d3:dc:05:4d:30:da:a5:86:a3:00:e4:c2:24:
                    35:69:f9:fb:7f:27:eb:68:0c:b3:6f:76:19:f0:ee:
                    17:a5:5a:44:4d:91:c6:52:d4:b3:9c:33:91:26:e6:
                    39:74:24:24:7b:af:a5:89:21:c6:cb:1b:30:54:92:
                    9c:0c:f1:6e:01:99:a5:0a:20:fc:11:2b:55:44:62:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:E4:76:1B:17:EF:D1:2B:37:F5:40:C0:AA:E0:69:A9:CF:32:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2e:e9:f1:4c:db:41:8c:65:c4:6a:64:cc:51:6a:44:ce:8a:
         d6:a4:13:70:9f:a3:5f:2c:65:98:6f:4f:50:ef:ef:4b:d5:aa:
         29:88:89:ad:d4:7b:7f:5e:2c:24:d9:ef:5a:d4:2d:87:80:75:
         5a:ab:54:ea:aa:b2:e1:a8:f8:3d:57:51:ec:c6:1d:d8:51:be:
         96:9b:71:e1:b2:52:13:90:14:a9:82:f9:1b:0e:de:f4:db:e4:
         01:3c:4f:b0:34:eb:e2:74:1e:8d:50:3b:74:fc:fe:8e:f5:6a:
         c9:b1:47:26:a2:5d:0d:c6:ad:74:fc:f2:54:2b:dd:f5:8b:c6:
         b5:d0:21:de:df:06:cd:a0:82:d4:f1:3d:bb:28:62:2e:47:4b:
         11:7e:16:fc:84:85:1c:1a:ca:30:27:7c:0f:37:c3:f9:6d:bf:
         0a:58:02:e6:3a:f0:ee:59:7e:16:ca:7a:ee:4a:eb:cc:e2:5c:
         15:24:71:3e:38:e8:9d:27:d5:a8:01:08:47:de:8c:67:db:e6:
         36:49:bf:f0:d8:db:20:55:89:50:50:2d:82:66:b7:4c:ad:e2:
         2d:f3:c8:be:51:70:d5:68:18:2e:86:62:bb:25:4d:56:95:77:
         a7:52:01:f1:c9:c8:a3:62:f5:75:bc:0f:39:a4:2d:6f:d8:9e:
         2a:c4:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:21:53 2025 by rpki-client