Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa
File:                     0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa (raw, json)
Hash identifier:          ehfRVriZVitLkqEU5En8d9fVOzYvd919y+obqSSGoRI=
Subject key identifier:   12:B2:39:06:12:DC:1F:12:7E:19:A3:D4:B0:CD:34:70:7C:AE:FD:CD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA2F946B5E897BFA7E6900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2f:94:6b:5e:89:7b:fa:7e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=de13c9e1-f94e-4228-8f0d-ba28b9d46e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:0c:89:33:3c:08:39:e9:ed:b1:38:48:f0:
                    bb:9b:80:0d:b0:50:f0:ee:40:d5:7e:77:6b:5b:74:
                    e3:92:80:f0:8b:b2:43:59:46:44:37:d1:f6:40:22:
                    f4:65:40:c0:dd:76:a9:c3:31:aa:38:c9:0a:64:e6:
                    ec:0b:a5:e8:8a:ee:4e:90:3f:45:3d:9d:ae:84:c5:
                    c8:ca:87:ee:82:87:2b:95:e4:0d:95:f8:59:66:0a:
                    fd:74:9a:f0:80:66:7e:12:6d:bc:da:a8:13:ed:d7:
                    d9:af:53:6e:27:20:8a:ff:86:70:84:f1:4e:92:fc:
                    bd:52:ee:05:61:c5:55:67:4d:04:94:8b:92:11:66:
                    69:52:bb:ab:f9:2a:0e:0f:f8:11:e1:a1:16:41:9f:
                    3e:07:ac:50:70:2c:d7:aa:b2:eb:0e:73:c3:ee:78:
                    e8:7b:88:ef:a2:22:33:d9:25:80:23:7d:67:a6:0e:
                    fc:3a:78:ce:c6:45:38:d4:ed:9a:a6:3b:e1:c2:25:
                    76:4b:b3:51:23:6e:c2:4d:6b:dc:38:20:fd:27:47:
                    80:a4:df:eb:58:fb:0c:67:bc:a6:65:70:a9:6b:18:
                    41:c6:e7:24:51:3d:74:74:69:e4:01:0c:33:62:74:
                    63:00:1e:be:22:ed:5f:d5:d9:a0:16:eb:a6:7d:4a:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:39:06:12:DC:1F:12:7E:19:A3:D4:B0:CD:34:70:7C:AE:FD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:60:ff:44:e8:91:bd:29:b2:16:17:ce:5f:a6:eb:47:9d:f7:
         ea:50:ee:01:ee:07:fe:e1:1a:05:03:79:59:fd:b5:c1:fb:de:
         e9:44:8a:c4:ca:3c:f4:d9:7a:29:61:09:2e:14:fb:d9:50:b7:
         f8:d9:f5:77:75:67:8b:87:1c:d8:1e:6d:8e:01:f0:d4:d8:85:
         ca:70:4b:7e:16:ac:88:20:68:5f:28:74:fd:14:c5:ed:45:5a:
         2a:7d:41:ef:e6:1f:9d:84:06:9f:c8:b7:db:a2:3b:ac:4c:01:
         37:71:4d:a1:90:f6:6c:24:c6:9b:2d:52:09:e1:13:53:06:57:
         ea:ea:d6:34:50:c5:f6:fa:9f:e9:b5:7d:16:21:e2:b9:15:65:
         d5:f1:f6:99:e6:1a:d2:ef:f5:74:c1:9f:d7:5c:ed:ed:9f:1f:
         9d:28:52:bc:c8:91:82:9f:3e:12:d2:d5:04:51:33:f9:52:c8:
         cc:61:54:c5:02:f9:3e:a6:1b:76:91:6a:2b:b4:b1:8b:71:a8:
         20:5a:76:a3:40:8b:e6:f4:16:af:f2:8d:e9:99:4e:f0:de:a2:
         0c:3f:6d:e5:5c:89:18:3b:eb:b8:b0:cf:31:c9:77:9b:fa:d1:
         a3:d0:51:13:8b:69:f9:52:f5:01:12:30:3e:a5:19:69:0a:49:
         c1:d1:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:09:35 2025 by rpki-client