Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa
File:                     0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa (raw, json)
Hash identifier:          hz1KCzmwS29TyPHbHrHya62gnY468w6W3U6rDihdmF4=
Subject key identifier:   DF:76:C1:FF:2A:AF:57:B6:53:05:15:4B:30:B5:49:8F:81:14:D8:E6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA3523F427F7556978AE20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.251.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:35:23:f4:27:f7:55:69:78:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=9013f5c3-45d0-4102-a012-57cb6deb14b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:49:ae:81:72:70:f0:0d:22:9e:eb:a9:3d:
                    ee:1c:40:ac:48:eb:7b:38:dd:43:1c:1d:23:c9:41:
                    e3:ec:4e:6e:86:37:61:96:a3:fb:1d:11:80:fa:24:
                    8e:a8:73:34:fd:11:c2:88:94:e2:ac:26:f1:fa:8b:
                    d8:d1:9e:21:d6:65:1f:60:90:9b:77:1c:a3:59:d7:
                    d2:6a:e3:1b:9b:26:6d:71:88:47:1d:da:b6:ff:f8:
                    ef:31:6e:4a:40:fa:a8:93:38:bd:1e:98:f5:b3:ef:
                    4f:d2:4a:da:b4:10:5f:e9:a2:3f:7f:6b:a1:23:8d:
                    a4:5b:ac:d3:94:e8:6b:72:02:ca:0e:3a:2b:e7:81:
                    f9:eb:40:13:6e:9e:e4:1c:71:bc:41:5d:a8:50:33:
                    8b:ff:ab:3b:26:b7:d2:3d:8a:23:a6:f8:61:03:44:
                    e4:6a:4d:13:96:8e:a2:9d:19:f4:b7:c2:6e:08:78:
                    dd:53:73:f8:fe:a0:a6:f0:c8:51:c3:20:08:d3:c8:
                    5e:c0:c3:5d:58:35:6c:18:88:7f:d0:52:2c:c2:c4:
                    9c:c2:04:47:20:21:43:8f:69:d9:c0:de:fd:f1:f5:
                    c2:cb:26:98:99:7d:2f:1f:6e:1d:fe:a3:16:8d:31:
                    60:73:7e:97:bc:6a:37:7b:e2:31:10:93:18:35:74:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:C1:FF:2A:AF:57:B6:53:05:15:4B:30:B5:49:8F:81:14:D8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:52:29:70:81:2a:f4:65:b1:9c:e1:3a:67:33:e6:83:d9:5d:
         cc:18:56:05:c3:da:a1:ea:75:d4:dc:bf:b2:bf:13:d0:10:01:
         f2:98:0a:63:7f:4d:67:11:62:93:f9:96:1f:3c:91:df:32:3e:
         5a:d2:12:a3:6e:63:4e:26:31:33:8f:8e:9b:ec:e0:dd:9e:af:
         a3:57:09:02:2c:05:8c:76:e2:c9:d6:45:bb:5b:33:fe:bb:16:
         a2:f9:72:06:d2:ce:ed:c3:d4:3f:f6:1d:9c:45:a7:86:a3:ba:
         1c:1a:a2:db:0d:cb:69:a2:3a:1b:10:f0:77:ee:bb:46:a6:b9:
         fc:d4:5d:bf:a4:ba:34:36:d2:e4:77:2d:7f:f9:13:e2:ba:48:
         42:94:72:88:31:17:56:8a:3d:ff:51:d1:91:2a:68:ad:78:a1:
         30:6e:e3:75:b9:47:85:98:6f:67:ac:0e:3d:a3:c0:ad:5e:ff:
         61:73:53:f4:55:48:45:12:1c:3e:eb:53:c1:df:64:4c:fa:41:
         b2:16:7d:a2:f1:10:83:32:55:7c:98:c1:36:5c:fb:d6:3e:57:
         ce:b5:de:8f:a8:98:03:2a:62:54:ca:68:80:04:1a:3b:72:20:
         16:1c:74:6e:8a:98:16:36:9d:f5:45:ee:f8:e1:25:68:57:f1:
         b0:a5:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:18:23 2025 by rpki-client