Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa
File:                     5ea868a1-53fa-343b-8393-c4b366e016ff.roa (raw, json)
Hash identifier:          QUYoKdPwQyRQnuR9U2uH+vxa2On040VL25tq5Szb0/s=
Subject key identifier:   F7:AA:9A:94:D1:E9:15:5B:37:58:9B:2D:AB:38:0E:67:83:92:2B:CE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841171EE59514F90154FFC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:71:ee:59:51:4f:90:15:4f:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8c5d98df-d7ca-444d-9b3f-2d6692d6b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:8d:0e:ad:b2:6c:3b:05:99:83:5a:bc:66:
                    b1:97:97:56:90:e2:3f:db:5c:b2:e3:e3:f0:a7:bc:
                    26:42:db:33:91:c7:b9:27:87:f0:95:2d:8b:bc:68:
                    4c:71:dc:ac:92:f0:ee:84:61:92:f5:e9:20:80:96:
                    7d:bd:86:11:43:c6:e6:b8:9f:e7:b9:6d:b5:46:ce:
                    3c:3d:12:b0:00:71:ba:27:0a:02:b4:12:42:76:ad:
                    a2:5b:1b:d1:33:8b:44:0b:08:7d:1a:fa:dd:d2:96:
                    f7:f2:fd:4f:68:79:3a:f4:8d:b7:29:bc:dd:ee:37:
                    a6:38:86:43:8f:48:1d:f1:9d:ed:d8:c4:41:a2:03:
                    9c:fd:1c:5c:4c:37:09:e5:a9:47:1c:92:7d:25:83:
                    0b:11:60:8c:e0:42:ca:1f:95:fd:da:2d:e5:a3:c8:
                    5b:9b:11:b3:e3:6d:e7:84:5f:18:19:63:26:d9:79:
                    a0:65:08:96:6f:8f:6b:86:02:35:f7:2e:f1:7b:0c:
                    c7:8e:0b:d9:32:db:17:f7:af:f9:b3:40:3d:ff:87:
                    19:ae:25:67:4b:73:04:dc:07:83:de:62:80:2b:86:
                    43:f1:ad:83:e5:79:0c:ba:22:ce:2a:de:d8:46:79:
                    2e:50:bc:92:96:a6:20:9d:cb:12:59:5c:3b:32:4f:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:9A:94:D1:E9:15:5B:37:58:9B:2D:AB:38:0E:67:83:92:2B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:e1:c3:b5:df:f6:54:20:10:23:9c:e7:f0:72:8e:cf:96:
         f2:6f:fe:71:a7:9c:b1:fa:30:e1:d4:d2:be:38:34:68:68:d6:
         33:17:c9:f9:c6:83:5e:fe:ea:7c:74:d5:22:84:23:60:1f:9f:
         4e:0a:df:7e:85:81:8d:e2:65:be:c3:13:51:b9:d9:3b:a6:8a:
         97:ea:1f:bc:6c:86:3c:3a:89:5e:7b:c8:7d:5b:37:e0:7d:27:
         ed:f7:33:b9:be:58:e2:43:47:41:d8:0c:5a:20:e1:62:7b:1e:
         b5:44:65:6d:75:7d:d1:fa:62:84:03:ee:2b:d1:64:fc:aa:e0:
         dd:45:68:20:d5:d1:fb:c6:c5:7a:26:7f:04:8f:57:6e:ad:6e:
         aa:06:aa:29:c4:36:ec:5e:0b:de:b2:74:96:88:fd:fb:34:08:
         91:86:46:fe:de:cf:32:c9:97:65:2d:0b:9d:69:bf:31:84:35:
         fd:fc:87:df:a5:6a:e1:ec:02:ef:dc:94:17:26:dd:0b:f5:59:
         0e:22:80:d8:48:4a:b4:11:48:32:b2:cf:a4:14:18:a8:1a:d1:
         90:f8:6f:d7:49:ce:b8:3d:32:8a:e4:9e:1b:e9:81:f5:03:55:
         7d:ec:ab:ad:24:8c:ec:5a:31:d6:65:ea:bc:55:a2:be:77:e2:
         23:ef:f4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:26 2025 by rpki-client