Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa
File:                     224a8eaf-90ca-3555-ba36-8b880b90fb50.roa (raw, json)
Hash identifier:          1eT1zRtda3aGAj9Lk4heu/cDLd3uf8YimO5fNEJDSkU=
Subject key identifier:   0B:CF:9D:FC:AE:FB:44:6A:4F:97:81:27:CB:F0:01:71:A0:FC:AD:EC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84123263C0A97D8ACF291380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:32:63:c0:a9:7d:8a:cf:29:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cdf654fb-a5a0-44fd-b7b1-7a505fdc56a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:25:9d:c6:71:8d:81:43:af:0f:d5:5c:92:
                    fe:06:32:48:10:20:c6:b0:74:0f:e6:62:8a:4f:64:
                    98:52:5c:91:6d:34:1e:1c:3d:17:df:af:01:83:ee:
                    a2:6e:3e:b9:c3:ac:79:50:02:26:51:c7:c3:5c:2e:
                    a2:b4:46:65:6e:7b:3b:65:21:cf:b4:e8:1a:e9:6b:
                    27:3c:70:fe:d0:0f:cf:bc:c7:dc:7c:94:14:86:4f:
                    54:ec:18:90:b4:08:f2:75:db:88:b2:b7:45:e2:30:
                    ba:7a:15:eb:9c:ef:7b:49:04:16:67:c9:61:b4:1a:
                    2d:27:9a:32:e5:78:06:19:50:0a:16:8e:0f:0c:87:
                    63:0d:85:e9:31:2a:f2:73:c5:9a:93:8c:82:a4:bb:
                    10:7f:75:80:bb:86:f6:f9:2e:f8:ce:63:40:1b:06:
                    2b:2d:ed:35:79:82:13:e3:0e:51:19:41:76:b8:7a:
                    85:ab:2e:da:bf:6d:81:f0:99:80:81:a8:da:83:df:
                    07:60:e2:91:68:e3:cf:54:94:ae:3e:a8:3c:18:7f:
                    8a:ab:51:fb:47:2b:dd:82:79:88:83:fe:d2:4d:45:
                    ee:1c:8a:3f:74:60:f4:b0:89:ff:09:23:be:05:70:
                    4f:3c:43:80:01:82:90:b0:e4:fe:c8:d7:15:16:a6:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:9D:FC:AE:FB:44:6A:4F:97:81:27:CB:F0:01:71:A0:FC:AD:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:10:08:7e:05:9f:ab:b5:8f:f9:63:df:d0:2b:29:b0:f4:af:
         bd:7c:91:3b:bc:54:cd:12:6a:07:6e:94:3b:8c:a3:67:60:5d:
         d9:3d:4a:ff:19:ea:4a:f9:60:82:18:3c:da:d6:3c:e9:33:f4:
         a2:11:60:8a:88:a6:61:70:bd:d0:f1:d5:77:a2:50:cf:ec:3a:
         a4:9b:de:8f:96:cc:8f:aa:90:b5:44:3a:38:dd:90:d4:99:33:
         3f:06:11:c8:58:af:94:42:9c:4c:05:1c:1c:40:cb:39:9a:ef:
         7c:7f:6b:97:6d:a5:a0:5a:9e:39:1a:28:89:86:03:a3:51:b1:
         50:cd:98:c7:06:bc:d1:74:cc:de:72:4e:9d:34:2c:86:db:65:
         49:dc:13:54:78:f7:4e:2e:23:c9:70:20:4b:64:40:81:df:92:
         1a:10:08:7c:e0:ee:6a:83:87:9e:92:9d:b5:b6:08:d6:54:71:
         6f:e5:25:41:1e:26:a1:c9:1f:cd:f1:6c:6f:b5:ef:d3:bd:f6:
         da:8f:72:dc:02:90:fa:92:92:a4:f5:32:55:35:57:6c:5a:7b:
         76:34:8c:f3:92:ee:d9:38:d7:14:55:c3:63:fd:5c:cd:b8:f0:
         73:2f:ad:d6:bf:b8:71:7d:ce:84:85:a4:39:ba:e8:31:29:66:
         69:e7:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:54 2025 by rpki-client