Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11f4474f-e088-3870-8bf0-4f672c0a6dee.roa
File:                     11f4474f-e088-3870-8bf0-4f672c0a6dee.roa (raw, json)
Hash identifier:          fFGHFY8QJgl8e56omwmZEYCCchBxBDp+QqygY0sdct0=
Subject key identifier:   8B:DC:DA:7C:64:B3:A0:54:A5:5C:E8:09:8B:21:13:9A:28:FD:FA:74
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB6B7167CA7542F8F5A680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11f4474f-e088-3870-8bf0-4f672c0a6dee.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        173.194.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6b:71:67:ca:75:42:f8:f5:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=59a52154-7ede-4305-af8a-2d5a11554339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:44:86:87:6c:83:02:ac:02:44:aa:1f:3b:
                    9a:18:1a:36:87:b3:07:7b:f2:ba:2b:39:56:60:51:
                    17:c9:e6:95:73:3c:ec:c4:c6:47:15:03:a9:34:d6:
                    00:67:cb:c3:51:b5:e3:77:25:d5:20:d5:2b:29:36:
                    6b:4d:fa:4a:14:46:c5:fa:e0:d9:1d:0c:4f:4e:79:
                    26:11:68:7e:54:65:ad:d6:94:0d:e7:23:b2:af:b6:
                    48:a6:0b:80:ba:92:c5:9b:38:ce:f5:f1:aa:7a:e1:
                    e5:f8:a8:39:e3:70:69:0c:8a:27:68:ae:bb:e4:9d:
                    17:41:be:8d:35:94:1f:cb:6c:54:f2:28:76:9c:4e:
                    9b:16:ea:98:1a:5a:b2:ea:ac:56:58:2f:1d:6b:e9:
                    d8:ce:21:89:2b:7b:ba:fd:e7:59:92:06:19:98:10:
                    57:fa:77:ff:b7:e4:69:e9:cd:0a:84:04:3a:20:d5:
                    d8:68:0d:6d:d5:99:d3:38:8f:c4:32:93:a3:11:4b:
                    ce:c2:ba:94:4f:dc:97:5c:16:04:ce:72:70:22:8e:
                    29:39:bb:3b:ff:99:eb:5a:12:75:9d:d3:dc:1e:eb:
                    ed:f3:a4:ff:ac:e0:db:46:ba:eb:05:1a:b8:93:3d:
                    36:14:9a:1a:c9:a4:be:bb:df:85:09:ac:4a:17:9b:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DC:DA:7C:64:B3:A0:54:A5:5C:E8:09:8B:21:13:9A:28:FD:FA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11f4474f-e088-3870-8bf0-4f672c0a6dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:30:b9:28:81:a3:45:3b:ec:8a:00:3e:53:81:58:61:8b:
         99:60:f3:f4:fb:35:14:d0:c1:b3:e5:32:3b:42:36:eb:69:1c:
         6c:8c:49:1f:c4:fb:30:2b:0c:61:e9:9b:5b:19:be:d2:47:9a:
         6d:4e:a6:87:39:2f:ed:87:4b:97:fc:44:cc:1c:40:b6:c6:06:
         d0:b2:f9:62:04:70:23:02:e9:86:1c:52:72:3d:6b:64:3a:8d:
         af:18:cc:96:ce:a1:64:72:6a:f9:9a:18:b2:6d:59:8f:1c:04:
         e6:66:5c:8a:f0:5c:24:90:16:e0:e7:ff:d1:ff:ad:0d:06:92:
         0f:c0:ca:92:4d:12:c0:82:64:39:7e:95:d2:35:a5:26:a6:f2:
         d7:31:e9:4f:3b:78:3e:26:c1:ed:9d:5d:10:61:e4:8f:e4:a0:
         79:9b:72:16:5b:cd:c3:94:ab:56:bb:db:59:6e:85:e0:b4:d8:
         d9:d6:e0:da:f0:02:09:d6:43:67:14:67:55:fb:d0:c6:44:81:
         b1:8e:e7:33:ad:4d:fa:4b:2d:38:89:1e:07:e6:7b:ed:f9:05:
         50:f4:5c:7a:a1:74:7c:8d:c6:22:77:6b:99:41:d1:f2:6c:b6:
         cf:aa:12:4c:b5:d5:c9:06:ed:47:f7:83:8c:c4:f2:57:4b:26:
         46:06:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:54:51 2025 by rpki-client