Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa
File:                     8a798f55-b66e-3b5b-b89b-736276961acc.roa (raw, json)
Hash identifier:          qKbwU3oo+pjfchH5/4qkFnHl5KR4p15pBvz/iSVrzho=
Subject key identifier:   45:5F:3F:DC:7C:E6:EB:E1:CF:43:0B:22:E8:65:DA:11:3F:56:74:48
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A8412216928C71A53CE4EA3C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:21:69:28:c7:1a:53:ce:4e:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1bbf47a4-ba69-4f8b-bf65-9353c6e2d942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:95:99:78:34:5f:cb:56:53:c4:ad:73:b0:
                    a0:a9:e3:36:72:01:51:d6:1f:66:40:ca:d3:ae:6b:
                    c0:cb:a1:e1:67:fd:20:b3:f3:ab:e2:e7:fc:b9:2d:
                    00:34:13:40:92:59:4e:13:d4:28:c7:52:b5:9b:ff:
                    9f:0d:5e:ee:be:01:87:ad:24:9f:e3:9a:a0:2f:9b:
                    74:48:5f:3d:22:bb:8a:af:c3:96:d4:dc:04:4d:a6:
                    63:72:80:2a:58:1b:a7:41:5d:a0:5c:ec:e9:36:84:
                    42:74:b5:39:c1:e0:49:c9:5b:ae:cb:57:fc:c5:24:
                    a7:65:f3:38:48:18:9a:9d:00:11:fc:88:3a:4f:a5:
                    e2:3c:4a:56:00:6d:3f:95:38:84:42:6e:ba:09:d0:
                    d4:0d:00:b2:c8:b2:52:ed:97:ee:dc:2c:c6:d7:7d:
                    55:cd:38:80:61:8c:b1:f4:53:01:fd:de:aa:d8:82:
                    68:3c:c7:3e:72:0f:2a:5e:0c:a1:fc:5b:b9:7a:4b:
                    7b:57:19:af:69:87:79:12:91:6b:ae:58:18:bd:d9:
                    49:2e:e4:ff:eb:73:90:38:39:b0:c4:f1:f0:c9:9e:
                    8e:cc:74:8c:b3:4a:2f:38:9c:8c:4b:b8:91:dd:84:
                    0e:e7:fb:a9:2e:9d:d5:87:40:46:d4:14:76:08:30:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5F:3F:DC:7C:E6:EB:E1:CF:43:0B:22:E8:65:DA:11:3F:56:74:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:81:67:92:5d:9d:94:ed:aa:b1:5c:28:b7:cc:ee:ad:df:
         4d:03:db:8a:8a:32:7b:01:5b:6f:c5:90:7c:a6:7f:f5:04:17:
         87:bc:b3:88:ea:7c:e1:5d:0b:57:43:00:86:2e:c0:ee:8e:61:
         e5:6e:d7:8d:41:f6:df:93:1f:b7:c3:9a:d2:01:e7:2d:f7:a0:
         06:25:62:45:c0:4f:1e:40:46:33:9f:8c:cb:f6:be:78:c0:ba:
         1b:1b:f7:09:ff:da:64:8f:73:db:6c:a5:1c:3f:84:96:a2:13:
         9e:18:0f:ab:63:f8:c9:b1:ad:80:6d:65:97:19:a6:5d:1b:6d:
         4d:3b:61:70:17:40:da:22:5c:89:d0:9e:fd:19:58:3b:3f:09:
         98:83:ad:47:0e:7c:32:2f:73:06:68:17:e6:b6:9f:06:fa:ce:
         44:a2:55:4a:a1:ea:71:ba:73:3a:67:c2:4f:31:79:fc:ee:9a:
         d5:f7:b7:37:b8:ea:64:bd:43:40:64:03:ca:4a:d5:02:9b:69:
         09:19:af:57:a1:09:30:45:61:b5:e7:d1:a3:a3:4e:18:8a:e7:
         e7:b0:9f:6e:c7:20:9e:2b:5d:3f:63:ee:f7:59:d3:29:33:3b:
         30:5c:b1:e3:1a:77:18:2c:5e:92:50:63:c0:d9:ae:bc:65:56:
         8a:4f:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:45 2025 by rpki-client