Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa
File:                     733964c1-767b-3dda-a3eb-57e0e756377d.roa (raw, json)
Hash identifier:          wM674lQVgcw6mFxA0xWLo/w3PhCxlPWiEh3qpFyi92Q=
Subject key identifier:   04:09:69:C6:3A:7D:AF:57:5A:B9:00:78:2A:D0:60:38:E3:76:6C:AB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841178CF1D970FD3A7936700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        172.253.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:78:cf:1d:97:0f:d3:a7:93:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2a9e2989-ac42-4ada-b65b-f3341c559de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:2a:56:2d:14:f7:cb:d3:7a:ae:70:22:4a:
                    d5:1c:53:ef:93:3b:a0:87:cd:1e:9f:4c:84:01:03:
                    4a:11:c0:82:92:9d:f2:78:19:16:7c:1c:75:d3:33:
                    f9:e7:04:f9:a6:54:f9:d0:ec:ca:63:26:3d:77:7c:
                    6b:06:bd:ac:26:cc:fb:81:98:ae:56:af:4d:d5:38:
                    92:81:fe:41:38:97:db:68:cb:57:4b:fa:28:a9:b0:
                    2f:40:18:06:e2:a9:74:4e:96:00:e4:74:d8:00:62:
                    2d:f8:d8:d6:8a:1e:ac:92:c1:07:0b:03:bc:81:2a:
                    b2:94:7e:69:3d:28:55:77:19:20:48:cf:e3:6d:d2:
                    27:3e:20:21:43:62:f1:09:78:f8:e4:f0:15:04:29:
                    4c:fe:94:b7:35:95:af:88:d2:68:3d:4b:fc:c5:e9:
                    76:f5:3a:0e:8b:77:46:38:c2:21:50:ce:31:2d:9f:
                    2f:00:bc:e7:5f:20:a5:22:01:63:10:ca:29:fd:29:
                    bd:7c:70:da:23:6f:4c:08:63:40:1c:cc:1a:48:17:
                    12:65:15:4a:fc:6f:36:cb:29:30:0a:d0:53:20:04:
                    78:98:7f:0c:79:82:d8:0b:ad:2c:ce:ca:80:0f:cb:
                    64:8e:09:ef:3d:8e:ef:a5:cc:fd:ca:df:a1:4c:03:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:69:C6:3A:7D:AF:57:5A:B9:00:78:2A:D0:60:38:E3:76:6C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:26:6a:f8:1b:ce:ea:39:91:af:b5:d2:67:f5:ef:8d:d3:
         d1:8f:f3:86:95:54:da:4f:05:e0:57:1a:63:9d:b4:1d:f2:75:
         b6:4b:4f:24:74:71:db:05:37:e5:85:08:4f:40:6e:75:6b:bc:
         b7:e5:14:e8:dc:70:7f:c6:99:df:7c:55:0b:b3:73:4d:b1:1e:
         e3:ca:3a:11:cd:b7:f4:17:02:46:70:9a:fe:d7:68:18:fa:b1:
         56:5d:0d:19:ef:d9:70:55:4c:10:7f:b8:e0:b7:11:15:28:cc:
         8f:ed:2e:37:9a:2e:ef:a4:af:d5:29:37:53:a7:80:c4:90:18:
         a9:ee:a8:79:ff:fe:c8:d9:2d:ba:24:03:8d:c2:50:9e:f2:bf:
         19:33:3d:91:eb:66:66:30:0c:a2:bd:d7:4a:12:03:7e:93:cf:
         ea:1e:04:22:d5:3d:e9:ca:02:88:f3:c6:d9:42:a6:8b:9f:6f:
         c5:6f:51:e7:6c:73:11:13:e2:90:37:03:66:e8:07:83:d2:bf:
         e9:74:81:92:82:ea:bf:8e:44:31:2b:7f:92:aa:cb:9c:2b:d2:
         51:fd:38:df:3f:48:5a:b7:14:46:03:61:07:4c:6e:0e:fe:47:
         71:ae:2d:b1:c7:47:57:8b:13:75:61:f4:c5:12:25:63:ef:aa:
         7b:c4:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:38 2025 by rpki-client