Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50f2817b-4535-38e1-8c2e-2307de2c26cd.roa
File:                     50f2817b-4535-38e1-8c2e-2307de2c26cd.roa (raw, json)
Hash identifier:          RUq/1SlmQyXcazfzZ4drjUlLoi3ddMr1KAT8oq2fbWc=
Subject key identifier:   20:3F:0D:B9:F4:DB:90:A1:39:C0:E2:72:7E:7D:1A:DC:32:B7:8B:CE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB6182612F13ACC0AE4A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50f2817b-4535-38e1-8c2e-2307de2c26cd.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:61:82:61:2f:13:ac:c0:ae:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ac3cb33b-d745-44a4-863d-9174563a00a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:1f:e3:d9:f2:c7:6b:a2:ba:90:d9:a4:f0:
                    90:4a:2c:aa:dd:a7:2c:9c:a8:5f:7f:29:36:67:7f:
                    21:00:64:30:17:74:c9:66:2e:53:3b:00:09:30:01:
                    d9:1f:c9:57:e4:7b:7f:10:f4:fb:9e:5f:92:39:71:
                    f2:4b:71:05:cc:cf:41:c6:49:3f:71:bc:51:c7:0d:
                    23:77:dd:f2:11:90:cb:ae:05:77:82:f2:a9:be:62:
                    8b:17:8c:6a:9b:1b:a9:63:1d:20:e1:32:c4:87:7c:
                    53:72:3a:58:6c:0a:0a:0b:1d:ae:f2:88:94:99:83:
                    2d:eb:8e:38:0c:c2:ba:4a:b0:38:f1:08:1b:3f:d6:
                    71:af:dd:f5:c2:ac:3b:7d:7d:59:76:86:56:f1:a8:
                    ba:0a:61:be:6f:f5:af:7c:14:48:7e:7a:a3:29:8b:
                    8a:96:55:bc:8b:08:1d:78:be:1e:1c:68:66:f7:b5:
                    19:9f:f3:90:2a:1e:5d:39:f3:f3:83:72:3b:d9:11:
                    88:f7:af:fb:38:27:0c:a3:3d:f1:27:c5:29:f7:1a:
                    33:a4:ca:73:4a:a0:dc:27:70:c4:02:f5:9a:65:0a:
                    6d:4c:df:88:8a:ae:85:a9:a0:5f:4d:70:71:92:a9:
                    93:63:ba:bb:6f:b8:90:bb:81:4f:d2:a6:34:b2:71:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:0D:B9:F4:DB:90:A1:39:C0:E2:72:7E:7D:1A:DC:32:B7:8B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50f2817b-4535-38e1-8c2e-2307de2c26cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:74:ca:01:ef:c6:53:a0:63:2b:23:e8:57:48:e6:60:ba:0e:
         5a:5e:f0:5b:47:f1:7f:85:17:bd:76:c1:d8:73:e9:d3:47:06:
         63:84:13:6f:3d:da:2f:43:70:08:31:45:d5:74:df:e5:0a:79:
         3a:a5:85:ca:60:67:3b:1f:4d:de:82:4e:3c:3c:23:8c:38:7b:
         fd:5a:9a:93:4e:42:54:84:c8:ed:24:a1:7d:f1:4e:be:78:8a:
         cb:96:54:29:80:e0:6c:b5:9d:f8:c1:41:aa:79:64:d2:63:f8:
         45:1d:33:ca:ee:d4:71:33:70:fb:b1:0a:fe:27:87:20:be:ad:
         3f:5e:b7:56:04:c5:7e:10:1f:e4:53:f6:a5:aa:58:84:88:93:
         f3:1e:7e:42:35:30:07:e6:46:86:6e:b4:a1:9e:87:5b:0d:22:
         a9:ed:14:85:08:2a:1d:51:ec:46:03:dc:f7:8e:8a:91:2c:b0:
         60:9b:37:fe:37:4a:2e:a9:13:0a:f1:cd:65:87:95:4a:76:55:
         f3:2b:61:ec:5d:61:13:6a:6d:12:d3:f9:75:3b:13:fa:f2:f7:
         7e:c1:c4:db:01:f0:d0:4a:84:9e:73:c4:ca:0e:4d:66:93:f6:
         dc:01:d5:b1:e5:88:f4:2e:2e:be:60:02:7f:c0:f7:d1:8c:c1:
         fe:1f:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:54 2025 by rpki-client