Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa
File:                     6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa (raw, json)
Hash identifier:          L3i4buS6sPC/lM23Kt7CloTmDgG/JAGjhY9lhSdYld0=
Subject key identifier:   D1:D5:42:7E:59:0E:F8:F7:16:DC:AA:C8:8A:E9:ED:B3:77:2A:86:C6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A9D30F1909A5F66C26076D6EC
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        142.250.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:f1:90:9a:5f:66:c2:60:76:d6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=89a31b03-ec4a-430b-a7a0-0f00e6ac2e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:2b:c5:ca:e6:7f:3f:88:47:f8:ca:2d:80:
                    7a:a6:ef:dd:2d:74:3f:0c:0c:b9:a5:3b:be:a7:46:
                    3e:a4:77:71:8d:62:6e:4f:7a:4e:e9:38:12:f1:34:
                    8c:51:e6:cc:5b:d2:ca:45:83:f8:98:a0:77:38:2e:
                    fe:ae:d2:c5:15:7e:c5:55:1c:35:5b:5b:7e:f1:e1:
                    8d:9f:72:a3:27:28:cd:e6:b7:a5:71:43:5b:d2:3e:
                    82:80:93:54:dd:24:fa:ba:7d:1f:ce:75:ed:49:2f:
                    1a:1a:06:47:65:78:37:8f:b9:73:1d:f2:36:83:7b:
                    45:48:e9:76:c1:39:e0:b9:05:5d:76:de:40:31:92:
                    d4:9c:85:11:12:1f:49:de:a3:95:57:b2:7d:01:c2:
                    53:99:9f:4c:2d:e6:10:ba:a0:62:99:ff:25:84:ea:
                    01:bb:6f:a0:82:40:09:5b:bb:7e:78:da:a4:11:dc:
                    06:84:0c:c7:1e:e2:f6:c4:54:b7:bf:5c:33:cb:5b:
                    ec:42:35:7b:a0:e1:f1:71:44:a4:73:e8:43:c8:5e:
                    ff:ec:a2:28:6b:60:9d:b9:29:69:63:3e:f9:7a:c2:
                    b6:02:33:d5:a2:f3:df:db:b0:fb:9f:9e:b1:6d:1d:
                    95:83:44:9f:d0:81:b6:84:31:78:13:e9:37:70:f9:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D5:42:7E:59:0E:F8:F7:16:DC:AA:C8:8A:E9:ED:B3:77:2A:86:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:3a:76:8b:20:52:eb:84:14:86:5d:38:3d:cc:a7:49:29:57:
         45:d7:fd:bd:4e:7a:e6:01:df:3c:8a:cb:b1:ea:42:a6:07:36:
         91:d9:d2:08:40:07:da:e4:04:51:e4:10:d0:e6:8d:bf:04:a9:
         27:5f:4f:e4:30:67:65:07:c6:1a:41:ce:91:26:34:94:b2:e5:
         e6:21:64:21:bb:2f:51:41:37:22:6b:76:0d:e0:41:e7:7c:24:
         1f:f4:77:7d:47:30:92:d3:15:18:f9:fb:57:fe:27:a2:0b:9b:
         ca:c6:66:6f:84:6f:da:50:9e:c1:95:0e:1b:14:61:49:05:0c:
         0f:a2:c8:cf:bf:09:7c:56:c8:fe:1b:77:f7:e7:6c:47:a9:24:
         20:48:e4:b6:1e:a7:80:be:2f:4d:6a:fc:e9:2b:ed:5d:8f:06:
         10:4d:52:f6:9b:c1:a1:b7:84:b4:a1:4c:a8:33:87:26:17:87:
         66:36:9d:16:d7:ea:d6:bd:e0:3a:07:38:2e:dd:b7:91:66:2e:
         e0:4e:45:9c:04:72:8e:2a:cd:73:1c:1e:ae:42:42:cc:52:60:
         bf:1a:35:eb:1c:94:95:96:d8:4d:48:43:e8:f2:38:dc:0c:92:
         18:a1:09:27:62:b5:1b:eb:01:d2:f4:29:f6:b2:e7:81:d1:1f:
         f8:66:ca:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPGQml9mwmB21uwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
ODlhMzFiMDMtZWM0YS00MzBiLWE3YTAtMGYwMGU2YWMyZTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Urxcrmfz+IR/jKLYB6pu/dLXQ/DAy5pTu+
p0Y+pHdxjWJuT3pO6TgS8TSMUebMW9LKRYP4mKB3OC7+rtLFFX7FVRw1W1t+8eGN
n3KjJyjN5relcUNb0j6CgJNU3ST6un0fznXtSS8aGgZHZXg3j7lzHfI2g3tFSOl2
wTnguQVddt5AMZLUnIUREh9J3qOVV7J9AcJTmZ9MLeYQuqBimf8lhOoBu2+ggkAJ
W7t+eNqkEdwGhAzHHuL2xFS3v1wzy1vsQjV7oOHxcUSkc+hDyF7/7KIoa2CduSlp
Yz75esK2AjPVovPf27D7n56xbR2Vg0Sf0IG2hDF4E+k3cPmR6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHVQn5ZDvj3FtyqyIrp7bN3KobGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmQ3YjgwNTQtYmIxMy0z
ZWQyLThhMmMtYWI4NWVkOTVjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQ6dosgUuuEFIZdOD3Mp0kpV0XX/b1OeuYB3zyKy7HqQqYHNpHZ0ghA
B9rkBFHkENDmjb8EqSdfT+QwZ2UHxhpBzpEmNJSy5eYhZCG7L1FBNyJrdg3gQed8
JB/0d31HMJLTFRj5+1f+J6ILm8rGZm+Eb9pQnsGVDhsUYUkFDA+iyM+/CXxWyP4b
d/fnbEepJCBI5LYep4C+L01q/Okr7V2PBhBNUvabwaG3hLShTKgzhyYXh2Y2nRbX
6ta94DoHOC7dt5FmLuBORZwEco4qzXMcHq5CQsxSYL8aNesclJWW2E1IQ+jyONwM
khihCSditRvrAdL0Kfay54HRH/hmyqU=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:08 2025 by rpki-client