Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91aa005b-97cc-355d-91b1-2abe0b1359f4.roa
File:                     91aa005b-97cc-355d-91b1-2abe0b1359f4.roa (raw, json)
Hash identifier:          WISFB+ZwIAzXsY4u9uUoULO5EIDYVRM0wqn5vFZ/pFw=
Subject key identifier:   4F:B3:01:BF:60:18:1F:BF:BF:C5:52:BB:94:55:B2:17:F0:91:49:07
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBCA65FDE3BBB04129C200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91aa005b-97cc-355d-91b1-2abe0b1359f4.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        74.125.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ca:65:fd:e3:bb:b0:41:29:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=eeb18c30-d6b1-42e0-b6fb-05ffc9a62f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:bb:e4:78:99:12:9a:68:7a:75:5d:b9:c0:
                    af:26:d6:d7:bd:3f:23:7e:b8:fa:1e:29:d9:de:bc:
                    6c:37:dd:be:2f:05:10:0f:a0:68:e8:c9:ed:9b:82:
                    cf:d1:f2:76:bf:f3:b2:1a:40:1e:a7:92:54:c3:6e:
                    67:e8:d7:5c:0b:13:67:50:62:cb:aa:7a:f6:e6:26:
                    a6:4c:f4:64:8c:70:9c:8d:18:1b:67:eb:73:06:ab:
                    6c:1d:ae:23:69:04:bb:a9:35:a8:b8:89:a0:28:5b:
                    85:d8:29:7e:41:e3:55:a9:d7:4e:b2:eb:bd:9b:18:
                    ea:e5:2f:8e:14:11:f9:ec:a6:fc:3d:fa:9a:7a:65:
                    5a:11:b6:02:c0:07:94:d7:f3:52:af:a5:08:64:5d:
                    86:41:d7:1e:e2:dd:54:e1:f8:fa:51:e4:16:2f:e6:
                    c7:b6:32:82:ec:fd:71:32:4e:be:56:4a:4b:28:38:
                    ed:bc:bf:71:78:77:4d:f0:ed:2b:c3:a1:f8:55:d2:
                    bc:a1:0b:47:be:64:70:9f:46:35:7c:01:ed:66:c7:
                    13:0e:9c:0d:fa:24:68:73:74:6c:3f:1c:56:bb:aa:
                    57:ea:8e:d6:f7:8e:a0:70:7d:ac:62:09:8d:08:12:
                    9c:c5:2a:d6:e6:63:d3:9e:b9:de:bf:0a:12:6c:23:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B3:01:BF:60:18:1F:BF:BF:C5:52:BB:94:55:B2:17:F0:91:49:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91aa005b-97cc-355d-91b1-2abe0b1359f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:af:10:f3:4f:4b:72:cb:d6:8b:e4:0f:f6:a0:a5:7c:07:
         95:19:5a:f5:7d:d3:6e:1e:9e:a6:f1:aa:a7:41:0b:5b:50:17:
         f4:f2:62:77:1f:22:97:4d:d1:95:a8:32:48:64:1a:dc:4c:6e:
         86:ca:2e:9e:49:a2:e0:45:01:c8:4e:d4:72:7b:f0:30:8a:38:
         4d:9f:b6:f7:6e:bc:78:8a:90:45:67:6b:3d:28:85:09:58:61:
         f6:2d:8d:14:44:cf:2c:b7:20:be:9f:f3:5f:cf:08:f3:f0:e7:
         7b:a1:0f:5d:9f:9c:03:af:eb:ec:30:e1:3d:ea:93:5f:29:02:
         82:6a:d3:50:e9:aa:15:df:bb:14:74:5a:55:56:31:65:e9:95:
         9b:ce:a6:8b:ae:13:bc:d0:ed:19:fb:d0:78:4b:90:57:1e:3b:
         74:0f:c1:56:f9:e4:96:a9:22:da:6e:cf:56:56:e1:c1:ab:c5:
         3b:3f:ff:1e:4f:0d:db:d0:1d:86:02:92:1a:82:4c:35:77:3f:
         b6:60:95:a9:f7:52:7c:53:f9:3d:5a:69:a4:2f:f2:f3:3d:7d:
         80:22:79:00:f0:9e:86:c2:51:64:ca:36:78:ab:b1:72:e6:f5:
         4e:ec:12:e3:1f:39:23:d4:e2:e7:9e:90:6a:c6:85:af:ae:c5:
         37:85:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:03 2025 by rpki-client