Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/246bd626-0625-3db6-b777-bca6733e65d9.roa
File:                     246bd626-0625-3db6-b777-bca6733e65d9.roa (raw, json)
Hash identifier:          5WjZxETAhTq84579/4Oiu8hMPgMXPsHD35Jz4+i9v3I=
Subject key identifier:   CE:EA:53:A7:88:11:00:D0:3A:4A:5D:02:E9:33:33:FD:0F:F5:03:69
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A784C4DEDE3430D7CDE431C8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/246bd626-0625-3db6-b777-bca6733e65d9.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        142.251.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c4:de:de:34:30:d7:cd:e4:31:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=9e09db06-5287-4049-a478-8c67dabb3739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:0e:79:73:7a:6f:4a:88:18:7e:da:cf:45:
                    12:d8:90:9d:40:1c:28:fb:7b:5a:09:45:98:15:33:
                    eb:ed:7d:a4:ac:0e:b0:7e:ef:5d:98:32:e9:79:ff:
                    04:f7:42:6d:c8:3e:7a:85:39:51:bd:b7:c8:5f:20:
                    a6:df:6e:96:1b:c0:8b:da:17:d1:a3:a6:be:95:95:
                    9e:61:3a:44:eb:a6:20:02:ba:55:ec:43:3d:71:40:
                    dd:91:71:71:3b:f0:a0:36:45:4f:c5:dd:44:4d:ee:
                    6e:62:96:ed:31:cb:33:ae:6d:de:c5:ff:45:97:51:
                    34:8b:66:c0:ae:a4:6e:b7:71:8f:3a:ef:c9:b3:e7:
                    58:22:60:7a:e5:14:f9:f8:27:e1:90:12:9e:85:17:
                    c0:ca:61:0b:3d:3a:e7:6b:10:bf:7e:2f:09:54:96:
                    c8:b0:9b:3d:ea:4b:54:0d:3e:c1:00:76:9d:f1:2d:
                    01:ff:f2:9b:d2:d4:f8:96:ca:89:78:3c:20:08:91:
                    7d:e3:96:ad:df:32:03:fc:ce:47:26:09:52:d2:c4:
                    c9:76:cb:75:89:a7:7d:69:7c:d8:71:76:b8:0d:20:
                    ee:fd:07:bf:bc:1d:8c:8e:96:d6:24:39:e1:c8:fa:
                    f0:56:d8:cc:6c:7f:c5:fe:57:70:23:44:f4:f4:36:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EA:53:A7:88:11:00:D0:3A:4A:5D:02:E9:33:33:FD:0F:F5:03:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/246bd626-0625-3db6-b777-bca6733e65d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:18:fc:f0:1f:32:d9:f6:1b:05:c8:d7:d3:64:a8:7c:27:
         96:bb:be:5c:cd:0b:16:e1:c6:79:4c:2d:cc:bc:76:a9:17:9c:
         e1:87:52:e0:4c:98:e2:e9:1f:80:55:1e:b5:77:a5:b8:e3:1c:
         14:c2:3d:7e:a5:37:99:91:f5:01:a1:dd:47:c5:65:70:cb:15:
         49:48:84:dc:59:96:9f:d4:fb:45:9d:f8:50:d3:3a:2e:57:84:
         b1:45:40:ad:3b:46:e9:9d:99:0e:12:6e:94:e3:60:03:15:93:
         11:5b:5a:44:0f:d0:24:54:de:75:f7:df:9d:5f:ce:47:88:f3:
         3f:6d:ef:23:40:31:c4:cc:7d:9c:0a:ad:8f:f0:fa:9f:2f:fe:
         2a:bd:d0:0a:28:14:be:55:33:19:73:d2:96:30:a0:a9:46:fc:
         a6:29:94:07:d6:b6:2c:5e:e3:5e:ae:c0:93:8e:88:b8:bf:d8:
         3f:bc:8a:a0:44:e1:61:5b:82:36:12:e9:5f:56:5b:47:57:49:
         f1:1f:de:61:4d:9f:f9:c1:90:eb:38:30:74:8a:5c:c9:fb:e6:
         fa:bf:51:16:6c:90:62:25:a2:e4:33:fb:d5:22:df:42:92:68:
         6c:16:25:bf:10:a1:07:fd:45:47:51:aa:88:7f:e0:12:b4:1e:
         da:aa:27:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMTe3jQw183kMcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
OWUwOWRiMDYtNTI4Ny00MDQ5LWE0NzgtOGM2N2RhYmIzNzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU8OeXN6b0qIGH7az0US2JCdQBwo+3taCUWY
FTPr7X2krA6wfu9dmDLpef8E90JtyD56hTlRvbfIXyCm326WG8CL2hfRo6a+lZWe
YTpE66YgArpV7EM9cUDdkXFxO/CgNkVPxd1ETe5uYpbtMcszrm3exf9Fl1E0i2bA
rqRut3GPOu/Js+dYImB65RT5+CfhkBKehRfAymELPTrnaxC/fi8JVJbIsJs96ktU
DT7BAHad8S0B//Kb0tT4lsqJeDwgCJF945at3zID/M5HJglS0sTJdst1iad9aXzY
cXa4DSDu/Qe/vB2MjpbWJDnhyPrwVtjMbH/F/ldwI0T09DazyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7qU6eIEQDQOkpdAukzM/0P9QNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQ2YmQ2MjYtMDYyNS0z
ZGI2LWI3NzctYmNhNjczM2U2NWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHu7GPzwHzLZ9hsFyNfTZKh8J5a7vlzNCxbhxnlMLcy8dqkXnOGHUuBM
mOLpH4BVHrV3pbjjHBTCPX6lN5mR9QGh3UfFZXDLFUlIhNxZlp/U+0Wd+FDTOi5X
hLFFQK07RumdmQ4SbpTjYAMVkxFbWkQP0CRU3nX3351fzkeI8z9t7yNAMcTMfZwK
rY/w+p8v/iq90AooFL5VMxlz0pYwoKlG/KYplAfWtixe416uwJOOiLi/2D+8iqBE
4WFbgjYS6V9WW0dXSfEf3mFNn/nBkOs4MHSKXMn75vq/URZskGIlouQz+9Ui30KS
aGwWJb8QoQf9RUdRqoh/4BK0HtqqJ9U=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:14 2025 by rpki-client