Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6be49704-d507-30fe-a27e-35d8489d47e1.roa
File:                     6be49704-d507-30fe-a27e-35d8489d47e1.roa (raw, json)
Hash identifier:          gwrgbkl3tD9kJCS+ylvLvh6FvDO8kWeCkFj2ToWEuNo=
Subject key identifier:   D0:E5:26:18:B3:62:34:F9:74:DF:DC:B3:F0:E9:BF:EC:7D:C0:2C:3F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84118531DBF69531FD349000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6be49704-d507-30fe-a27e-35d8489d47e1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:85:31:db:f6:95:31:fd:34:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e002a521-5bf8-47a5-8335-5f76d4adf41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:da:04:d9:9e:c9:17:ce:2e:a8:97:fd:ec:
                    60:b6:6e:1d:22:be:00:64:cb:23:76:32:73:44:8c:
                    24:3c:f9:6c:91:a3:f0:51:3f:ff:9c:f9:4d:95:78:
                    92:af:eb:55:80:9b:16:f5:48:8f:6e:da:4e:75:cb:
                    76:ec:af:04:70:cd:fb:81:38:14:e7:c2:40:da:94:
                    51:4f:f3:d4:3d:01:2c:64:dd:fa:fb:88:63:d9:0d:
                    9a:5b:e4:3c:59:47:d4:7e:a4:b7:ad:25:bc:1a:a1:
                    f2:51:e2:a9:34:b7:37:9e:d1:42:cc:4e:c2:64:4e:
                    81:44:ed:05:30:20:54:2e:6e:a7:8f:95:81:f7:1a:
                    cf:8b:51:1c:bc:9d:0b:24:2c:72:5c:26:08:56:f2:
                    77:d0:03:03:07:3b:c5:f0:f3:e2:bb:0c:58:95:7b:
                    01:f8:9c:e2:75:99:06:c4:5c:1b:43:a0:7b:a3:47:
                    59:84:44:ad:82:19:25:cf:a5:9f:49:c6:d3:68:9b:
                    cd:d2:7b:a7:04:16:14:b5:2b:38:d9:de:73:84:3a:
                    32:d1:ed:59:16:1f:19:7a:2e:b9:65:78:78:26:b2:
                    42:f9:16:64:94:f4:8f:d3:f1:87:14:9b:ae:2f:e3:
                    f1:bd:ff:bc:4a:ed:81:50:85:90:13:73:8d:9a:d8:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E5:26:18:B3:62:34:F9:74:DF:DC:B3:F0:E9:BF:EC:7D:C0:2C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6be49704-d507-30fe-a27e-35d8489d47e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:48:15:3b:ba:b7:14:c2:ae:e8:f7:77:39:10:46:a4:68:
         e5:8d:25:9c:3d:01:0a:5b:3b:38:90:7a:b9:3c:1c:72:ca:3f:
         32:a4:40:39:65:47:39:c6:62:c1:04:95:f2:44:27:50:a2:f9:
         1b:a1:80:f6:00:4f:57:7a:44:b1:0b:3b:ce:bc:41:25:af:be:
         52:cf:a1:c3:29:9f:a1:e3:54:ec:d7:db:73:6b:1d:78:72:fa:
         5b:8c:47:85:80:e9:65:eb:0e:3b:5a:cb:84:a0:fc:59:26:83:
         2d:0d:59:95:3b:0e:6a:ab:bd:18:28:79:c9:30:d0:d6:74:f1:
         d8:f0:fb:04:3b:aa:a7:d4:30:3f:3e:71:42:f7:88:43:82:fd:
         85:7d:c2:ab:e6:0a:ad:a3:56:3b:76:07:dc:05:db:2e:7f:cd:
         30:f9:76:24:58:41:0a:f0:f9:90:8a:49:a0:56:07:63:7e:f7:
         a4:86:69:3b:a6:6b:cc:5d:69:63:86:9b:37:1e:18:f7:e1:1d:
         58:79:0f:1d:c3:45:d6:35:9a:69:46:47:68:4f:de:cf:0a:27:
         9c:1c:d1:53:c8:bd:8d:47:b6:7b:24:5c:ad:8e:2b:a3:e4:fe:
         2f:02:11:67:7f:37:5d:39:1c:e0:63:9f:20:93:e1:b3:17:ec:
         ec:53:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:18 2025 by rpki-client