Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08219e39-dba3-3a88-a343-d5162e81972f.roa
File:                     08219e39-dba3-3a88-a343-d5162e81972f.roa (raw, json)
Hash identifier:          TvJelK+awYXGi6caq7nUD0rcKCEnmBK5cWvoD0kL38I=
Subject key identifier:   C5:6E:95:45:D8:E5:93:24:BB:4E:C2:72:B7:DF:8A:DA:71:ED:48:C6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A94D0D595B2F0B0A88D9999C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08219e39-dba3-3a88-a343-d5162e81972f.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d5:95:b2:f0:b0:a8:8d:99:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=0b65b603-6bfa-4d45-b077-09e7ba8ac445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:d9:ae:1c:6d:d3:24:48:36:7c:d1:ad:c5:
                    22:33:c3:0c:b7:5c:b8:11:bf:a9:8f:6c:82:5e:f9:
                    5a:48:1c:94:b2:c8:ba:92:66:ef:35:eb:c8:52:05:
                    04:c3:15:5e:c1:1c:d3:3c:1b:a1:54:43:3f:85:3b:
                    8c:cc:96:cb:3f:c2:24:dc:f1:eb:4d:f6:ec:c0:be:
                    8a:a5:df:4a:7c:0c:1e:69:9c:13:b8:5f:b1:2c:41:
                    9e:19:b8:0b:0f:2c:ba:1f:88:bb:c6:a5:ed:14:9c:
                    ea:8e:86:fa:b0:ba:cd:db:95:31:39:1e:26:84:b6:
                    bc:be:84:6e:ff:68:37:e2:13:f1:60:be:5c:7e:5b:
                    40:4d:a3:4c:dc:6d:82:57:58:ba:96:d5:22:27:88:
                    89:43:c5:d0:65:54:2b:02:4e:37:7a:ea:cb:de:2f:
                    8a:56:f5:c3:a0:05:ba:e7:78:69:f5:4b:ef:0f:06:
                    4c:ee:61:2a:75:6a:48:ea:b9:84:a2:a8:20:22:f7:
                    a0:4d:aa:14:21:68:8b:09:1b:17:2d:fb:e9:e9:c3:
                    1f:b4:77:3f:7d:89:13:2a:81:c0:36:91:d5:ac:d8:
                    d6:d0:11:cb:14:33:e4:f2:1b:00:01:0e:8e:e1:0c:
                    bf:b0:05:eb:01:5f:21:91:36:bd:16:e5:6e:1e:d0:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:95:45:D8:E5:93:24:BB:4E:C2:72:B7:DF:8A:DA:71:ED:48:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08219e39-dba3-3a88-a343-d5162e81972f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:5e:8a:ce:8c:b4:3f:65:b0:b5:2d:5f:26:0d:e4:4f:dc:
         fe:ff:f1:80:f7:d8:7c:f2:a7:a4:8b:95:3e:a6:f2:9b:e1:58:
         6b:ee:17:e5:4c:35:70:17:73:ea:65:9e:04:e9:1c:5d:61:e9:
         c2:34:ed:ac:a9:dd:cd:f4:47:06:a8:1b:c7:b3:00:c7:95:ae:
         a1:3f:a1:27:13:46:fe:64:c4:89:d6:19:68:45:f1:5d:8d:dc:
         bd:ef:e9:9e:41:bd:30:d1:53:78:68:fa:27:f7:fa:7a:3e:31:
         7d:63:38:16:35:e0:4b:aa:b5:d4:2b:3c:13:fb:3c:f6:17:bd:
         25:ce:a6:a8:c9:1b:b9:c3:cc:89:09:1d:90:06:b5:da:46:f1:
         87:99:63:ae:32:a3:9f:c3:f0:b2:35:ea:f6:ce:08:59:83:48:
         73:98:63:06:3c:cf:a4:77:46:91:68:0c:47:b4:96:4a:34:83:
         d0:27:f4:6f:6e:f4:91:87:24:38:0c:d2:cd:85:c3:b7:1f:5b:
         ea:36:89:e0:bc:92:cd:55:89:22:ab:0b:86:e6:ec:96:4f:37:
         e6:00:a2:ea:8a:24:cb:9e:90:3a:0a:49:76:34:ea:4d:0c:94:
         a2:e5:5c:00:66:93:c0:a4:54:fa:e4:e0:af:c3:24:f1:51:f6:
         29:8b:40:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NWVsvCwqI2ZmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
MGI2NWI2MDMtNmJmYS00ZDQ1LWIwNzctMDllN2JhOGFjNDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWLZrhxt0yRINnzRrcUiM8MMt1y4Eb+pj2yC
XvlaSByUssi6kmbvNevIUgUEwxVewRzTPBuhVEM/hTuMzJbLP8Ik3PHrTfbswL6K
pd9KfAweaZwTuF+xLEGeGbgLDyy6H4i7xqXtFJzqjob6sLrN25UxOR4mhLa8voRu
/2g34hPxYL5cfltATaNM3G2CV1i6ltUiJ4iJQ8XQZVQrAk43eurL3i+KVvXDoAW6
53hp9UvvDwZM7mEqdWpI6rmEoqggIvegTaoUIWiLCRsXLfvp6cMftHc/fYkTKoHA
NpHVrNjW0BHLFDPk8hsAAQ6O4Qy/sAXrAV8hkTa9FuVuHtAQlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVulUXY5ZMku07Ccrffitpx7UjGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDgyMTllMzktZGJhMy0z
YTg4LWEzNDMtZDUxNjJlODE5NzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAsXorOjLQ/ZbC1LV8mDeRP3P7/8YD32Hzyp6SLlT6m8pvhWGvuF+VM
NXAXc+plngTpHF1h6cI07ayp3c30RwaoG8ezAMeVrqE/oScTRv5kxInWGWhF8V2N
3L3v6Z5BvTDRU3ho+if3+no+MX1jOBY14EuqtdQrPBP7PPYXvSXOpqjJG7nDzIkJ
HZAGtdpG8YeZY64yo5/D8LI16vbOCFmDSHOYYwY8z6R3RpFoDEe0lko0g9An9G9u
9JGHJDgM0s2Fw7cfW+o2ieC8ks1ViSKrC4bm7JZPN+YAouqKJMuekDoKSXY06k0M
lKLlXABmk8CkVPrk4K/DJPFR9imLQLE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:21 2025 by rpki-client