Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa
File:                     73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa (raw, json)
Hash identifier:          hoeTVotPWohQzU01bJDNywjG0X28c6cf11WKCdiNnkM=
Subject key identifier:   EF:D1:63:6F:09:9A:D4:CF:CD:A1:B0:91:36:B8:5C:84:F8:7B:AA:1E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A8412312AEF81B2C2830E7F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        172.253.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:31:2a:ef:81:b2:c2:83:0e:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e7dffebe-7128-444d-a6df-206d78e35a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:47:fe:84:f6:94:10:2b:47:25:c6:ca:e0:
                    92:d2:c0:8d:64:55:30:b8:44:3c:8c:00:27:f9:aa:
                    f5:bb:67:1d:8b:94:45:d6:5f:eb:3d:71:9c:d3:87:
                    56:70:2c:86:89:b5:82:3d:35:84:6d:fa:b0:88:d3:
                    db:89:92:88:4f:fa:42:78:e3:b9:fb:7e:10:1a:8b:
                    7e:5d:f6:f4:19:c3:d5:80:76:bb:14:2c:ce:bc:3e:
                    30:56:c4:9c:36:2b:1a:4c:28:02:35:d6:8f:7c:eb:
                    24:cd:ab:2f:e1:5f:9b:79:d2:9c:cd:af:b7:93:6f:
                    e3:11:56:58:03:61:5f:24:35:ba:e0:6c:7d:6d:fa:
                    83:fb:a9:05:24:3f:d0:5d:6b:d0:ce:29:e9:90:9d:
                    9c:3f:18:fc:ce:18:cc:f7:2f:fe:1f:42:d9:51:c9:
                    2f:03:67:f8:71:3f:b8:3a:cd:02:89:a7:a3:9e:b2:
                    e8:67:f4:01:a3:40:e1:23:7c:70:35:2c:05:11:d1:
                    b3:5f:14:4d:e0:91:a4:3a:51:6f:02:f3:be:11:15:
                    6c:29:fd:dd:94:3f:cb:48:fd:04:2f:e5:ff:8c:10:
                    26:c5:b4:10:f3:8e:f8:81:e2:8f:50:c0:18:19:c2:
                    f1:06:43:f3:d8:5b:9c:7e:a8:ca:f5:6e:3c:fc:4d:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D1:63:6F:09:9A:D4:CF:CD:A1:B0:91:36:B8:5C:84:F8:7B:AA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73e78dee-1b93-3b5c-bcc1-19341e1f2135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:37:55:15:2b:fe:59:5a:84:33:dd:98:44:30:32:69:60:cc:
         dc:b2:d0:e1:bc:17:4d:cb:64:01:e0:eb:e9:db:5e:99:94:94:
         c9:97:3e:f2:26:48:c9:8d:f3:80:07:d8:eb:dd:f3:98:69:c8:
         d3:2b:b1:e4:8f:5c:5c:fc:9a:0d:33:30:59:f7:1d:a7:bb:af:
         83:65:9f:e6:a7:57:b8:5f:65:7a:a2:f0:4a:c9:6c:a0:99:45:
         b7:9b:53:26:ab:ad:48:c1:11:f1:d8:90:9e:80:3d:22:fc:47:
         e0:3d:b7:32:df:8b:71:0f:f3:20:e9:24:0e:d9:41:a2:46:8a:
         7a:74:c9:de:b2:54:c8:4c:90:2f:9f:e2:08:7c:f9:fe:cb:bc:
         1d:e7:4a:61:6a:a7:5d:6b:6d:9b:c9:a0:b5:19:15:af:3e:56:
         ca:f0:5b:71:19:e7:a0:0c:76:59:f3:85:04:39:d7:31:fc:29:
         4f:c7:76:91:1f:d1:7d:f0:17:c7:ff:9d:6e:b3:84:aa:15:c2:
         cc:24:cf:1e:1e:dc:f6:ac:3b:e7:e2:fc:f4:4f:9d:d9:41:df:
         b6:c1:16:b7:7a:86:59:3a:04:1a:f4:8e:e0:f0:ac:92:15:86:
         73:ff:a2:19:93:91:7c:76:e7:da:2c:27:7a:41:fc:d2:4d:3e:
         3d:2f:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:43:44 2025 by rpki-client