Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa
File:                     2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa (raw, json)
Hash identifier:          H3WALOaeOSDUPzUXKenY5mvjtZZgbDRMY0SYP9Sidyc=
Subject key identifier:   C6:66:AE:8A:65:84:EC:8F:40:BA:1E:DF:5F:37:0A:CA:47:CD:7A:AD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA31343A1B033751756B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.251.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:31:34:3a:1b:03:37:51:75:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=1f29d8bb-45a4-4519-936e-4614548bd273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:20:90:de:f2:dd:b8:38:2f:f3:27:68:2f:
                    9d:0d:1f:27:a2:9e:59:97:a9:fb:b1:85:10:c0:5f:
                    e6:8a:37:53:91:81:b8:ea:17:af:fa:63:2e:c4:b2:
                    62:83:53:9a:3f:58:3f:a4:d4:57:e7:4d:3d:74:69:
                    37:2c:d4:f6:b0:c1:5e:72:b7:ab:2a:7e:db:fe:ab:
                    da:62:66:e7:7c:25:46:9f:6a:f9:7d:73:da:3a:ed:
                    60:11:9b:02:2c:f3:cc:5c:85:c4:65:f7:43:54:d4:
                    a7:2d:94:6e:3f:44:c9:fb:19:fb:cb:75:d2:25:08:
                    7b:9b:7d:bc:ed:54:26:d5:13:02:b0:88:29:1f:7c:
                    72:d9:ae:7d:fb:da:e1:ed:0a:94:3a:14:b1:51:09:
                    5d:9b:f6:97:6c:5c:9a:9b:16:7d:48:60:b7:40:7f:
                    1c:d1:c6:76:38:fd:38:52:03:6f:62:49:41:90:3f:
                    5f:5a:b8:82:77:2e:ce:ab:6f:a7:23:0e:68:90:98:
                    00:56:20:af:81:4b:fb:d8:4e:66:dc:4d:2e:a6:fd:
                    b8:14:84:fc:e9:26:0c:a1:5e:fe:ed:29:e5:1b:ed:
                    15:c8:f6:9c:67:a1:3a:29:8b:be:58:9c:6e:46:c7:
                    4b:49:ca:64:97:7b:4f:35:0a:c6:c5:3b:9c:8f:ff:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:66:AE:8A:65:84:EC:8F:40:BA:1E:DF:5F:37:0A:CA:47:CD:7A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:73:98:5f:cc:99:be:f9:04:66:54:db:33:7e:39:7c:18:
         e5:4b:69:29:91:49:5f:03:7b:a4:3e:13:14:7b:06:27:9f:10:
         13:ae:a2:04:3c:f2:93:84:f2:01:a1:1e:c5:bd:ca:0e:c8:04:
         27:16:b2:89:08:fd:09:eb:c5:3d:bf:88:49:a7:04:8d:aa:c3:
         6a:ea:d5:a4:ba:5e:6c:a8:25:75:18:1d:ee:cc:16:9c:0d:3d:
         52:79:a4:bf:31:65:2c:16:c3:f4:17:ce:5c:04:6a:46:6c:39:
         2a:38:07:92:dd:43:60:cc:f5:35:8c:b7:1b:92:17:2b:85:de:
         74:7b:b9:d5:2b:11:d2:3f:ee:c3:b2:bc:d2:b3:f7:e9:26:0a:
         9a:0a:51:8a:f9:62:88:17:1e:e9:a3:2d:6b:81:1d:f6:13:e1:
         18:68:3c:37:4d:e3:d0:f0:d6:f4:e4:89:b6:c0:a5:c4:16:ed:
         42:89:f8:cb:38:22:3a:35:1c:56:fe:f5:4c:f3:f8:17:40:ae:
         e6:57:69:b1:93:87:fc:0b:3f:06:fe:1f:4e:af:04:e2:be:70:
         18:b3:14:0a:80:59:42:54:ab:ac:c6:36:e7:7a:65:ed:88:8f:
         13:d7:b4:ec:97:f0:d9:9c:17:3a:a0:af:89:21:d8:5f:6a:83:
         7f:0f:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:13:14 2025 by rpki-client