Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa
File:                     5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa (raw, json)
Hash identifier:          W/ncM01wdXacfsJrFVho5CdkVKRKqvER72V7M1a0uEA=
Subject key identifier:   DD:E5:60:0C:16:0A:18:0C:AE:BB:C6:57:82:9C:4D:A7:08:75:84:8B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849C904F7BF74F8FC660C2C5480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        192.178.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f7:bf:74:f8:fc:66:0c:2c:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=954ad42d-0d6d-4cd6-9eb1-5be8d918a997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:52:a0:86:d7:c6:c4:31:88:f2:75:40:43:
                    41:33:2f:e8:12:53:d0:17:ff:ba:b8:7c:bb:69:23:
                    cd:f6:83:a9:86:3a:e5:b9:90:69:f4:45:56:fa:dd:
                    20:e4:43:0b:e2:f9:94:ac:6f:58:83:2d:71:c3:7d:
                    e4:71:8a:62:f6:a9:65:f7:89:cb:ec:c8:a1:aa:72:
                    8a:07:3f:c4:fd:28:0b:73:8a:be:00:3d:c7:75:cb:
                    e8:28:f9:d1:63:08:77:6f:da:eb:c3:fe:77:9f:e6:
                    66:28:fe:bf:27:c1:61:61:a2:10:4d:e8:4f:49:a6:
                    4c:37:f4:d2:19:d2:c7:d9:98:fb:e9:ae:74:61:4b:
                    31:8b:78:18:42:01:6d:5c:48:96:8f:58:bf:dd:8e:
                    0e:d7:34:63:aa:4e:c1:b7:5f:64:f4:56:77:a9:d3:
                    46:c4:4d:60:fb:84:a7:15:49:ce:47:51:72:59:b3:
                    19:51:28:a8:fd:93:0f:88:7e:45:35:25:46:77:93:
                    be:b7:64:ae:a6:67:fc:e1:ba:c3:b7:5f:ce:ad:a0:
                    4c:1f:f2:bc:8f:fa:3f:53:52:80:c5:75:8f:8e:99:
                    58:16:61:b5:60:bc:58:9e:11:44:90:a5:39:e5:69:
                    9f:7e:33:51:e7:97:a9:da:1d:2f:46:a9:41:38:88:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:60:0C:16:0A:18:0C:AE:BB:C6:57:82:9C:4D:A7:08:75:84:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:5f:66:4b:ac:6e:14:1f:31:66:3b:48:a8:92:15:4c:53:
         13:f4:58:95:0c:87:e7:7b:01:a4:6a:42:bc:a8:18:6e:eb:c8:
         b1:09:e8:b0:5c:46:e1:e8:7d:ff:38:0d:25:1e:03:64:68:c4:
         65:b4:f5:47:1b:67:90:69:de:74:60:bc:de:ec:aa:24:3c:cb:
         8a:d9:ea:ff:87:b4:61:7d:12:01:f4:35:0d:6e:11:6c:f4:63:
         fa:a5:23:22:38:e9:ac:10:32:1c:73:88:5c:15:8d:02:c4:d3:
         9d:fd:51:11:3a:cf:71:77:c3:dd:2c:16:23:fa:24:3a:f2:82:
         27:9f:71:26:04:00:48:f7:8b:53:76:62:1e:1b:44:9c:bf:74:
         3d:1f:1c:3f:7f:cc:01:f2:a1:df:42:38:30:a9:9e:bb:50:85:
         7e:44:ec:7a:25:42:f5:75:b1:24:1c:49:0c:30:cf:7f:c0:99:
         d1:4f:d6:ee:6b:39:b6:fc:37:3b:ff:2c:44:ca:ce:75:28:c2:
         de:41:02:b2:f7:e2:ad:cc:f7:33:1d:50:ae:b9:69:2d:db:a0:
         ef:4d:c3:95:72:8b:a5:82:79:74:a7:4b:62:07:99:26:cd:21:
         d1:e0:81:b3:35:11:17:89:20:1b:2f:b1:31:7c:f5:52:f7:0f:
         f4:d3:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:52 2025 by rpki-client