Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00e32bd9-37bf-3455-a145-cb1c6c089745.roa
File:                     00e32bd9-37bf-3455-a145-cb1c6c089745.roa (raw, json)
Hash identifier:          Li1YZl9PoBnwJceDpUzEO4AMBQB2I4k/hZeQOmyhAC8=
Subject key identifier:   93:4E:D2:2E:5C:05:8C:42:18:9D:C3:0D:B8:FF:6F:99:B2:AC:1F:56
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA2D6E28B9A77082C05B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00e32bd9-37bf-3455-a145-cb1c6c089745.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2d:6e:28:b9:a7:70:82:c0:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=4d89b9d2-47e4-4500-ba8e-bc73a4ffa6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:29:23:ad:d3:6f:2d:22:cf:ef:f9:33:45:54:
                    b2:d8:9c:98:dc:dc:56:6f:16:0f:8b:74:50:c1:66:
                    6a:e0:60:a7:34:a7:09:08:8a:61:d9:96:79:fa:61:
                    b1:76:4f:0e:5b:52:50:7b:20:34:7e:12:e8:1a:20:
                    ba:fa:53:5f:43:34:fd:72:2a:cf:3c:91:99:21:4e:
                    55:a4:b2:9f:dd:82:36:87:5f:3a:6a:ee:40:a3:77:
                    23:bd:55:b8:99:18:dd:9f:03:d8:84:01:1a:d6:ee:
                    17:04:60:aa:0c:81:5a:61:dc:82:f6:c0:2d:ca:87:
                    00:52:43:a9:3b:9b:60:ce:cd:35:82:c6:35:18:ad:
                    5c:ea:ca:2c:a4:17:50:ff:45:ae:01:e9:f6:a5:fe:
                    ac:23:b8:ec:e9:b1:62:67:1c:73:71:5a:aa:b5:e3:
                    74:45:cd:c3:0a:e3:22:ff:90:0f:fb:a1:74:fb:f4:
                    ef:b6:78:28:c0:ae:25:41:b4:e2:12:6f:11:f0:b8:
                    d7:ed:0b:df:64:e7:13:c4:d8:72:bc:7b:42:ea:02:
                    6a:69:66:ac:f1:cc:f4:5e:a4:d0:f9:21:3a:db:67:
                    09:66:c8:ec:64:4d:cc:98:6e:03:71:be:81:fc:98:
                    e7:9c:e4:80:f5:37:43:e9:be:21:c0:56:e0:9f:96:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:D2:2E:5C:05:8C:42:18:9D:C3:0D:B8:FF:6F:99:B2:AC:1F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00e32bd9-37bf-3455-a145-cb1c6c089745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:64:f4:9d:b9:a9:c6:37:32:5d:57:f9:67:64:76:95:99:7c:
         3b:bd:d5:da:74:f2:9a:ef:61:2e:3b:02:3e:9b:1e:9a:d3:dd:
         39:16:23:cf:9c:b1:a3:81:1d:d9:5d:ff:bd:3f:66:42:cc:2c:
         ae:9b:72:ba:00:6b:3d:50:e0:f9:40:ea:f7:c5:86:31:48:af:
         d1:80:a5:49:61:a6:5f:0a:06:6d:3f:72:92:74:7d:30:bc:1b:
         32:66:a0:b2:c2:d5:23:8d:44:9d:6d:70:0d:d1:83:04:3a:24:
         a0:46:a0:38:19:a2:36:3e:7c:1b:cd:99:38:d0:5e:02:c2:3e:
         0d:25:17:54:8a:c6:da:e2:cd:1d:7d:27:de:22:5c:4f:36:71:
         8e:cf:e6:4d:22:fc:6a:b0:4f:80:45:c3:14:67:99:59:8c:55:
         a2:fa:a5:96:d4:d2:60:d7:06:53:c5:85:6b:5d:98:aa:45:e5:
         36:03:72:96:23:7f:c6:52:c1:66:7e:8f:59:b5:55:af:ac:2e:
         45:94:7c:53:e2:94:25:96:24:38:e4:3b:89:b0:aa:1c:51:ee:
         4e:ec:bf:bc:cb:d8:04:b2:23:97:8c:2c:0d:7c:df:30:65:55:
         86:01:03:f0:87:ce:39:d5:24:be:b2:78:7d:83:77:9b:ea:02:
         6e:13:e7:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i1uKLmncILAW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
NGQ4OWI5ZDItNDdlNC00NTAwLWJhOGUtYmM3M2E0ZmZhNmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCkjrdNvLSLP7/kzRVSy2JyY3NxWbxYPi3RQ
wWZq4GCnNKcJCIph2ZZ5+mGxdk8OW1JQeyA0fhLoGiC6+lNfQzT9cirPPJGZIU5V
pLKf3YI2h186au5Ao3cjvVW4mRjdnwPYhAEa1u4XBGCqDIFaYdyC9sAtyocAUkOp
O5tgzs01gsY1GK1c6sospBdQ/0WuAen2pf6sI7js6bFiZxxzcVqqteN0Rc3DCuMi
/5AP+6F0+/TvtngowK4lQbTiEm8R8LjX7QvfZOcTxNhyvHtC6gJqaWas8cz0XqTQ
+SE622cJZsjsZE3MmG4Dcb6B/JjnnOSA9TdD6b4hwFbgn5YUCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNO0i5cBYxCGJ3DDbj/b5myrB9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBlMzJiZDktMzdiZi0z
NDU1LWExNDUtY2IxYzZjMDg5NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxk9J25qcY3Ml1X+WdkdpWZfDu91dp08prvYS47Aj6bHprT3TkWI8+c
saOBHdld/70/ZkLMLK6bcroAaz1Q4PlA6vfFhjFIr9GApUlhpl8KBm0/cpJ0fTC8
GzJmoLLC1SONRJ1tcA3RgwQ6JKBGoDgZojY+fBvNmTjQXgLCPg0lF1SKxtrizR19
J94iXE82cY7P5k0i/GqwT4BFwxRnmVmMVaL6pZbU0mDXBlPFhWtdmKpF5TYDcpYj
f8ZSwWZ+j1m1Va+sLkWUfFPilCWWJDjkO4mwqhxR7k7sv7zL2ASyI5eMLA183zBl
VYYBA/CHzjnVJL6yeH2Dd5vqAm4T5+g=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:11 2025 by rpki-client