Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa
File:                     9c0269b3-2815-3270-8720-d4f751b0b0e9.roa (raw, json)
Hash identifier:          QeHviffrj0uzNlHUZjfQtCRHV2n7oMH6bwKV+Qm+yR0=
Subject key identifier:   C5:10:BD:CC:C1:F8:BB:CE:2F:3B:6D:A8:F9:CF:88:4C:01:06:EE:D1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBD06C3CC7D0F733E92000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        64.233.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:d0:6c:3c:c7:d0:f7:33:e9:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=36ef9627-0c17-4cad-aef5-e5a7e3761068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a5:35:47:1f:03:ac:d5:8e:65:31:b9:19:08:
                    47:fc:c9:27:ca:e2:7d:ad:a7:3a:5f:8c:4e:f4:82:
                    02:d2:86:79:67:10:cc:d1:ae:c8:85:25:3c:2e:94:
                    c5:e9:0a:f8:b3:e4:ee:0c:9e:02:52:29:1b:ce:ac:
                    39:6c:70:b5:44:11:81:40:44:76:5e:b7:b8:c2:76:
                    eb:dd:af:0e:d0:be:13:6a:8d:44:87:33:82:38:62:
                    7a:29:08:bd:1f:e0:f4:83:b4:72:bb:18:24:84:e2:
                    36:bf:93:59:e2:df:26:d4:b5:84:b7:86:4a:6a:59:
                    df:38:d3:ad:eb:d6:98:ba:14:41:45:82:8c:32:3b:
                    01:fd:16:21:81:2c:54:4b:56:40:2a:f0:f9:ae:1e:
                    86:30:4d:d0:6c:19:50:67:2e:fe:26:d2:82:d7:6a:
                    71:18:e9:1e:ba:c8:c9:b7:32:9a:52:bf:17:e6:a5:
                    b6:a1:6f:0a:88:65:a4:42:a3:49:41:52:6e:7c:87:
                    71:0c:ff:87:68:5a:3c:11:88:11:b8:86:6a:37:14:
                    ff:5f:4f:5a:c6:06:61:9a:f9:d4:32:01:54:23:c0:
                    39:07:2f:74:06:aa:43:17:d1:bc:5d:89:ee:14:96:
                    ca:9e:ed:96:7b:9d:31:a5:3a:dd:2e:01:db:2c:a7:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:10:BD:CC:C1:F8:BB:CE:2F:3B:6D:A8:F9:CF:88:4C:01:06:EE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:97:9f:de:e3:c0:43:bd:f2:2d:60:2b:71:e3:8e:ae:11:
         15:2e:98:a4:be:c8:a3:a2:7d:75:45:bf:cc:e7:39:43:18:ee:
         f9:ec:ef:ce:c3:fe:fb:0c:60:e1:0e:21:17:ce:33:a7:2c:cc:
         95:86:2b:12:ac:8a:80:b6:56:d3:27:8d:1d:68:4f:37:20:6e:
         ce:47:0d:99:01:0c:c6:09:55:cf:c1:6e:aa:12:6c:bd:4c:80:
         e0:fb:ff:66:67:ec:0f:e9:45:d5:a4:d9:16:a9:af:67:a5:48:
         55:6f:85:31:2e:5c:ce:b4:81:23:e4:fe:c1:8e:c5:c0:62:89:
         ee:39:17:51:cc:88:36:52:70:b4:5c:16:93:0e:d9:8b:ea:80:
         d9:a2:a8:04:c8:3a:2e:46:42:b1:a4:01:31:f2:bf:68:a8:19:
         74:f4:46:20:14:eb:35:73:d8:16:82:19:53:1a:54:5f:64:38:
         76:d6:3e:40:f7:56:78:27:8d:c2:f3:1d:d7:54:8a:c2:36:98:
         c6:56:58:31:e5:25:8d:bd:26:85:c1:36:79:7e:09:4b:97:8b:
         42:91:f6:3f:a4:a7:84:b4:a9:f5:70:02:94:15:14:97:76:83:
         c5:2f:87:5d:03:e3:af:b3:ed:2e:37:7a:1d:13:2d:00:9b:ba:
         57:20:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:54 2025 by rpki-client