Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64693a2f-fb36-3dce-bdbc-7c7243fb108b.roa
File:                     64693a2f-fb36-3dce-bdbc-7c7243fb108b.roa (raw, json)
Hash identifier:          BTKsDWmCvAh1Cul/rai63LCddM58CsfxJ1CSV/XJ2R8=
Subject key identifier:   41:61:63:0C:CA:A0:AC:F3:0D:36:FB:63:61:92:B6:44:EE:1E:B9:2C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841190D1FAA2CCC5016FF580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64693a2f-fb36-3dce-bdbc-7c7243fb108b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.250.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:90:d1:fa:a2:cc:c5:01:6f:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2dff6f36-fcc8-40ed-8c57-8c526cc17c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:91:f9:b0:96:b9:04:07:e9:49:1c:55:64:
                    57:1f:84:cd:e3:55:ba:ec:28:31:99:7f:20:ba:21:
                    1e:f9:58:97:c5:bf:e9:21:9d:bd:29:5a:75:6b:ba:
                    82:d4:8e:fc:8d:4f:a9:a2:64:a3:f6:5a:e0:69:32:
                    5a:14:53:be:ef:66:53:85:7a:b6:c6:e7:45:2b:fc:
                    af:47:f2:c3:71:0d:17:81:4d:84:6a:a0:59:b3:5a:
                    25:95:12:e9:f9:b4:91:34:89:8b:8f:22:60:98:f4:
                    13:b8:ca:04:ae:fe:da:0a:6e:14:32:f7:f2:b2:57:
                    9e:13:9c:e7:9f:cd:e9:5e:e9:f6:43:8a:b0:70:47:
                    76:d1:5f:59:49:da:65:87:91:76:3c:be:a6:0c:ec:
                    b8:38:c5:0d:24:33:be:f8:56:8a:a0:cc:fc:77:09:
                    40:1e:2a:6c:98:70:52:ff:00:94:db:86:d0:68:78:
                    63:f1:1a:06:46:c7:5b:06:28:83:72:72:aa:da:e0:
                    55:63:fd:00:46:6a:3c:4b:cc:4a:82:67:97:5f:b3:
                    bd:0a:b0:d9:9f:61:84:cd:67:7e:a6:66:88:eb:e5:
                    32:43:d4:9a:d4:f9:d6:86:f3:8a:b1:de:6d:4e:5e:
                    5a:1a:48:57:d2:62:07:79:53:94:36:47:df:14:62:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:63:0C:CA:A0:AC:F3:0D:36:FB:63:61:92:B6:44:EE:1E:B9:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64693a2f-fb36-3dce-bdbc-7c7243fb108b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:e1:60:5a:bd:c1:59:07:df:3e:8e:11:2c:5d:ad:18:49:
         14:af:ab:10:46:50:ee:f3:24:c2:77:2c:d8:1f:d2:c2:67:56:
         55:3e:60:e8:ee:f2:39:ac:a9:5e:79:3f:19:fc:09:32:d2:eb:
         8e:a5:e7:2b:3d:b3:29:d7:83:bf:ef:06:c9:99:8e:f7:ec:e3:
         b2:d3:21:bb:93:d2:cb:cd:c8:d4:00:8c:ce:35:72:06:bd:f9:
         d5:d6:a9:d1:62:5e:0d:94:33:b4:e7:8b:b9:b5:14:5f:0d:fa:
         b0:e9:d3:5b:88:90:02:0b:05:2a:6d:2c:51:04:fc:f0:8c:09:
         6c:44:3e:b6:41:f6:42:13:e3:4f:b8:a2:02:d9:06:89:e7:62:
         a2:8a:9f:80:de:77:d9:3b:34:b2:51:59:9d:52:5d:dd:bc:5d:
         15:7c:5b:26:40:89:a0:05:c5:0d:25:9b:6e:d4:bd:ee:72:c5:
         b2:0f:3a:b3:6f:61:28:f4:3a:e8:9b:3e:95:d4:54:66:ea:97:
         0f:86:ef:0c:17:a4:1d:9b:93:a8:f2:64:eb:a2:aa:0a:2b:08:
         63:cf:03:89:11:55:ce:cc:fd:6c:c7:72:cb:ae:05:ff:97:42:
         56:cf:59:23:ff:15:82:af:b2:5d:5c:56:d3:fa:31:76:cd:bd:
         63:6c:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:45 2025 by rpki-client