Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa
File:                     7e664fc7-0aad-3692-adff-c92f14c966da.roa (raw, json)
Hash identifier:          b1LhsBvwK3d9CYH7duSSlarGY7GfgTE6mmkn60agt6s=
Subject key identifier:   98:93:F7:71:0B:1E:0E:5F:C2:CF:BE:2E:ED:21:EE:BD:C0:AA:65:07
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84123035EFADAA2DAD967000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:30:35:ef:ad:aa:2d:ad:96:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5da2cd68-ea5f-4180-a26b-d2f5d988b76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:03:3d:01:0f:c5:2f:cd:e1:79:cf:c1:38:
                    6a:09:21:88:85:24:8a:17:d5:63:a2:9a:a0:49:3b:
                    96:48:e6:db:6b:30:f3:9f:7a:a0:fa:f0:97:bc:50:
                    a1:05:70:fe:a9:c3:f8:7e:74:b3:6f:9d:42:08:9d:
                    d4:ca:31:e5:af:b5:e5:72:2c:6a:ea:3f:2a:3a:c3:
                    ff:0e:f0:cb:e6:0d:12:98:d0:94:c7:5b:9d:41:61:
                    44:a3:71:f0:22:33:73:ea:8f:23:a7:5a:14:fb:3c:
                    59:27:e6:3e:33:3c:6a:ae:e7:be:88:50:d7:7c:af:
                    eb:29:5a:1f:a2:24:33:b6:6d:73:a9:1d:51:ca:c2:
                    c9:e5:8e:42:3a:a0:8c:35:72:7b:ca:91:be:a1:46:
                    5f:b4:f5:2a:76:b5:84:64:a8:76:72:15:e5:01:48:
                    8a:fc:2e:b0:44:de:9d:a5:7b:5b:75:cf:99:1a:ef:
                    c7:49:61:50:f8:03:2c:ad:99:06:f3:e8:b4:1b:9e:
                    63:7a:8f:0d:26:84:5a:8c:a2:f7:25:9e:6c:e7:1d:
                    ea:d9:5c:d8:38:0b:d9:26:c6:61:7e:e9:59:67:18:
                    bd:33:65:7c:0f:0e:82:12:25:9c:73:ce:ef:72:82:
                    dc:70:dc:a2:80:3e:57:e1:1c:b3:90:c7:18:b4:59:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:93:F7:71:0B:1E:0E:5F:C2:CF:BE:2E:ED:21:EE:BD:C0:AA:65:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7e664fc7-0aad-3692-adff-c92f14c966da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:12:c3:34:8a:b2:b2:7f:89:51:ba:0c:c6:f8:0e:a9:fc:
         dc:2f:89:68:2e:e4:23:45:a9:ca:d0:84:91:22:d8:9a:ba:d4:
         44:a5:a1:b3:1a:07:73:94:7f:59:b2:de:0b:c9:27:cb:12:03:
         23:f0:c3:66:42:5d:48:76:15:36:65:21:22:89:c8:bc:68:f9:
         6e:08:9c:8f:b4:92:57:0a:3a:02:10:04:9f:74:b7:fa:ef:80:
         1e:fc:c6:83:10:dd:e3:5b:6d:35:e5:65:8b:b5:ac:d6:5e:df:
         2f:3e:18:c7:5a:57:0d:b9:83:4d:90:e2:cc:9d:7b:84:3d:f6:
         a2:01:32:2b:7c:76:8d:59:0d:e7:24:83:ed:bc:29:af:c0:07:
         48:4e:85:fd:00:34:4b:b5:52:fa:f5:0b:a2:76:75:f3:31:f8:
         a5:88:d7:6d:c4:ca:e8:06:43:54:3e:61:69:b4:bd:81:91:2b:
         35:6d:18:af:e1:c3:51:fa:8f:b5:5d:94:9e:f9:b8:27:2f:27:
         a1:d3:16:e0:a2:fd:c3:0d:34:0a:66:d6:c0:01:80:62:08:75:
         5b:d5:6c:1d:0f:b9:2e:6f:77:69:22:c2:56:31:9b:05:36:87:
         3b:15:6a:07:0f:7a:53:26:c2:72:6a:83:4f:af:d7:df:6b:d8:
         74:2b:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:58 2025 by rpki-client