Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa
File:                     23e558ef-b1ed-349b-bb7c-72c343e78b57.roa (raw, json)
Hash identifier:          4/fIswdgedLtr1HC/s4ZTRh/cjbiA1BbaFb8OzWuI+0=
Subject key identifier:   78:26:8D:E2:0B:A4:A9:86:AC:F5:C3:A9:DA:42:54:03:12:DF:11:6B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841170ABCBABFC522D323980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:70:ab:cb:ab:fc:52:2d:32:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=41228329-a989-4cc6-956c-2a8cfd72dbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:fd:00:da:e2:c5:40:d5:f1:bb:d9:e7:da:
                    bf:b6:8e:e4:fe:b6:b2:6d:92:40:9d:b7:c1:af:ab:
                    93:9f:c6:ac:00:98:f2:9d:3f:3c:31:e4:b1:67:34:
                    6f:83:f9:9f:21:ec:a4:f2:2c:1d:dd:40:db:69:87:
                    40:de:7f:5f:17:07:bf:d3:70:0d:be:18:f4:94:8d:
                    87:8d:56:2c:7a:1b:1b:b4:20:9a:15:6c:d9:e3:88:
                    0d:30:ae:0a:e2:76:80:d2:a5:b7:c9:df:d6:31:2e:
                    9c:fe:82:0b:9e:23:e0:d6:b4:5e:8c:ae:45:16:e0:
                    3a:04:26:db:94:78:40:93:9f:d8:d0:54:b1:30:53:
                    da:66:42:93:5f:92:b8:f2:73:93:30:99:47:a3:7a:
                    c0:53:1f:15:00:46:0e:03:ae:0d:ac:2b:d2:59:91:
                    bc:5a:4c:0e:24:39:4c:dc:8c:72:9c:7d:57:55:91:
                    6c:eb:5c:35:10:cc:ff:08:1c:57:1c:6f:e6:a0:16:
                    de:4c:3f:6b:2f:1f:6d:3f:b7:56:00:e7:8f:3a:7d:
                    6e:78:70:00:b3:11:a6:6a:bf:d2:75:80:1e:a2:46:
                    6f:70:9e:82:90:17:a2:d5:ec:e2:5c:92:43:30:02:
                    b3:e7:a7:ef:f7:c4:4e:6b:15:a6:0a:08:68:bc:6b:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:26:8D:E2:0B:A4:A9:86:AC:F5:C3:A9:DA:42:54:03:12:DF:11:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:dc:6b:49:aa:11:ed:1c:32:8b:7b:1d:ac:0c:e6:aa:4a:3d:
         f9:5f:18:4e:b6:fc:17:e1:bc:70:22:67:ba:45:1e:bb:67:71:
         ce:f8:e5:b5:5f:e5:52:35:65:63:66:f5:b5:6f:83:87:b8:2e:
         04:72:73:bf:c4:9e:ae:cc:6c:7e:59:c1:d5:b6:a3:8d:67:35:
         ac:92:5c:67:8d:03:f5:74:3a:c7:8b:56:2a:e8:2b:cf:ec:6f:
         fe:9b:a3:55:bc:cc:c5:c8:04:43:a3:fd:72:3a:ec:fb:00:1c:
         02:0f:ff:e6:69:69:17:37:67:2b:46:06:c8:d5:7b:f8:5e:69:
         be:b4:04:9f:d7:8b:20:e2:3f:1e:8a:4c:31:b0:ab:07:5c:65:
         d1:ed:83:bc:d7:b2:a0:34:89:fe:73:36:14:7a:d1:4c:85:d8:
         be:a0:69:d0:5f:41:ac:9a:44:3d:17:43:14:a8:a0:fb:61:24:
         07:f0:a8:6d:a6:cc:d3:33:84:31:e0:98:91:b8:22:7d:cb:23:
         44:6f:b5:46:1d:de:80:36:7f:5f:72:bc:36:02:c5:92:a7:1c:
         69:d0:3f:54:0f:69:45:37:b5:15:7c:0c:b0:4b:7b:ee:b4:34:
         fb:a0:ad:f0:da:b7:ab:a1:4f:7e:75:ed:2a:ff:ba:5e:37:65:
         b9:b0:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:10 2025 by rpki-client