Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa
File:                     687f2922-1683-35d2-b282-095673dabb54.roa (raw, json)
Hash identifier:          dqDJ4F4OgyLoJKeWdCbBlZ8q8d11n67VZtfNF7wDAzA=
Subject key identifier:   78:31:7D:5D:B3:62:D9:08:ED:AC:A2:DB:4F:7C:CE:5E:C6:EC:B6:CB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841234C6B86ADE54485BC800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.250.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:34:c6:b8:6a:de:54:48:5b:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7e9b619e-befa-4ae9-8957-ae05b344c540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:58:b2:e4:e8:6f:a0:14:5e:7a:9f:87:cf:
                    22:97:09:1e:b0:44:d8:84:ac:1e:89:80:bb:22:6b:
                    e5:a0:12:64:d4:03:01:e2:7f:8a:60:10:c6:0f:46:
                    1a:7a:1c:40:ba:d4:31:ee:6b:06:dd:42:9b:66:64:
                    23:d4:98:46:b9:80:0b:6c:ca:3d:29:a2:9b:08:59:
                    56:f1:14:88:39:f1:22:c1:fe:a0:19:21:1d:7f:96:
                    98:3e:5f:7f:39:33:c0:fb:67:da:f2:03:50:50:48:
                    c3:e1:7d:f9:00:ab:1e:a7:9e:38:bf:85:00:15:ac:
                    93:5f:6d:96:4a:90:dc:05:30:1a:89:3e:c2:1e:d8:
                    6f:3f:34:17:31:76:d7:f8:66:6f:72:18:57:5b:f2:
                    54:cb:d1:f9:42:45:18:6b:77:ef:93:b3:d2:a1:99:
                    32:ba:dc:de:81:a2:ec:09:9f:af:90:a8:1d:87:bc:
                    fd:28:f2:ed:c9:6b:89:98:ad:86:ad:d9:08:da:e0:
                    49:30:65:95:de:3d:cf:4c:8b:38:bc:71:f3:17:e2:
                    f6:bd:1c:fc:30:73:09:aa:77:3b:45:bc:d9:28:f5:
                    0f:95:0b:de:29:3b:cc:a8:ea:7e:cb:69:5c:26:b4:
                    8e:9e:dc:0c:31:a5:f0:2e:87:cb:dc:0a:ac:9f:89:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:31:7D:5D:B3:62:D9:08:ED:AC:A2:DB:4F:7C:CE:5E:C6:EC:B6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:a4:c1:f4:d7:bf:68:2a:a9:e5:94:13:ca:a4:a1:fa:39:
         65:f4:ee:16:5e:57:bd:33:29:d1:2b:4a:8c:70:7d:23:5a:aa:
         b2:f4:78:04:cc:46:ae:60:ba:1e:7e:ce:e9:e3:f2:6c:bb:0d:
         d9:d0:71:66:22:99:62:66:25:5a:41:ad:75:34:59:17:98:6a:
         d4:c0:b9:15:bf:5a:13:34:80:26:e7:7d:1f:64:c3:e5:34:36:
         33:7b:cb:ed:2f:b6:72:30:7b:57:ab:3b:fc:d2:98:cf:9a:b7:
         b5:5e:d6:78:a8:3c:f8:1e:de:13:c9:b4:97:14:eb:94:f5:b8:
         e2:cb:e7:f2:9f:84:98:9a:51:19:b8:70:1c:59:6d:cf:ca:f9:
         10:03:b9:5f:06:c6:f4:36:e6:55:aa:da:2c:86:62:f3:50:c8:
         8b:12:d9:b0:e5:23:06:25:ba:d0:db:3d:a5:c5:7e:b8:d1:3f:
         e0:0c:5a:24:a6:d0:d0:76:31:8d:2e:d3:ca:45:1b:a0:61:8e:
         92:e4:00:73:4c:f9:3d:40:1c:84:a1:8a:6a:33:81:0a:44:bb:
         14:59:84:50:82:95:3e:06:b3:fb:ed:33:bb:d4:10:fb:2d:4a:
         e5:59:d3:d9:3b:26:6e:cc:14:5a:0e:4f:25:77:0b:e8:5a:85:
         fb:f9:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:16 2025 by rpki-client