Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72ab5f63-96ee-37dd-9115-b697ca33fbca.roa
File:                     72ab5f63-96ee-37dd-9115-b697ca33fbca.roa (raw, json)
Hash identifier:          vm4qBTr7w1/wFtsWAx0jEHgHHVRuN9a5vqjhk60FxnI=
Subject key identifier:   B5:16:BC:7D:6F:09:21:1B:EC:A8:FF:26:24:56:C2:D6:F1:E2:BB:FF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A8411787A88DDCA4313BF0B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72ab5f63-96ee-37dd-9115-b697ca33fbca.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:78:7a:88:dd:ca:43:13:bf:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=44cf6655-75bf-4b8e-8325-02abbce6e470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a4:53:6d:18:b8:7d:a1:e9:ee:a1:ed:6c:45:
                    d0:04:72:37:05:df:df:95:56:60:59:f3:65:bb:67:
                    e9:1d:59:64:45:18:9a:c3:df:8e:4a:a9:6f:89:ba:
                    42:22:37:ae:08:4f:4f:31:06:56:08:00:ac:85:c1:
                    bf:de:7a:e1:de:e9:97:50:02:c3:09:ca:a1:06:95:
                    0b:99:fb:d5:aa:42:00:24:5f:4f:80:04:0f:ee:0d:
                    f0:87:33:6d:ba:90:d3:65:ea:ea:2a:78:7a:0a:f0:
                    1f:95:39:e5:02:10:2f:27:fb:fd:10:5b:7a:d4:40:
                    16:e3:6f:0c:80:1b:55:f0:0e:67:cc:98:70:6f:44:
                    2e:09:b0:e0:e5:cf:06:c0:41:49:41:93:26:5f:f2:
                    c8:fd:db:78:b9:98:9d:e2:b8:53:b0:1c:8d:a3:16:
                    cd:96:9a:a6:3d:bd:0c:6d:a0:83:fe:67:c7:fe:a9:
                    88:49:b3:d1:db:bd:01:c9:31:c5:12:77:f8:33:8a:
                    41:5d:db:56:6b:9b:69:31:86:52:e1:88:ff:e3:fe:
                    57:e1:1f:67:93:5e:7a:13:37:a1:6c:19:af:a7:ac:
                    af:60:14:29:1e:22:61:ac:3d:10:bc:e3:88:93:c9:
                    6b:00:10:7d:74:42:a8:18:ad:5c:f9:50:18:5b:1d:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:BC:7D:6F:09:21:1B:EC:A8:FF:26:24:56:C2:D6:F1:E2:BB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72ab5f63-96ee-37dd-9115-b697ca33fbca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:56:b3:c7:03:55:c6:e7:d3:85:9b:77:2e:2e:c5:56:dd:03:
         b0:40:0a:24:76:27:05:52:bb:14:08:00:3f:b8:a8:41:55:58:
         7a:77:3f:71:fb:6b:5f:7b:fb:0c:65:37:01:8e:db:e2:39:c5:
         1c:90:e8:6c:a1:46:61:43:0a:b1:db:e2:7e:26:e4:e2:d3:82:
         29:c9:c7:d3:1b:08:9c:ff:40:32:f6:ac:90:e5:a9:a3:5c:cb:
         0d:b6:10:df:6e:b5:98:19:77:22:af:10:fe:84:3d:93:a5:a2:
         ae:6c:f3:39:9b:a6:63:fc:98:ce:de:ea:6b:0d:b6:a2:1f:30:
         31:3a:f1:b5:aa:af:55:29:e7:45:4a:0d:a5:ae:15:e0:f1:70:
         1d:53:00:e5:2d:6b:ae:c8:7b:ca:fb:9c:da:83:2e:62:11:a4:
         c2:ed:39:73:28:41:bf:d2:26:40:61:fa:ec:e2:19:33:19:36:
         10:c7:b9:b7:b8:6f:35:23:a1:e0:9c:02:33:42:f4:51:9a:fd:
         6c:9f:13:e2:05:7f:04:f1:b2:04:44:b0:28:02:9a:3c:e3:f6:
         e4:b7:54:b3:93:12:de:1a:e5:17:72:73:48:2d:99:52:35:89:
         91:f7:af:39:4c:b4:64:c2:32:48:f1:b7:1d:66:bd:7e:a0:1e:
         aa:ea:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:44 2025 by rpki-client