Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa
File:                     9dbeb59f-5757-3035-b091-70de9d1fb12f.roa (raw, json)
Hash identifier:          xj1nG4BE+Sx3H6iSokPQYcOQeI0TNhWkUwKUlQQz81g=
Subject key identifier:   E6:0C:83:E5:92:03:D9:A3:CD:AA:2B:99:73:3A:F6:DF:F3:FF:70:0F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB60101CB40C866C4C6A20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:60:10:1c:b4:0c:86:6c:4c:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=feaae6aa-c37f-4195-9ec8-21ca64f73b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:6b:76:32:ac:d5:93:1d:1a:d1:70:d9:85:
                    74:ca:a4:df:76:9a:bd:20:52:29:a5:91:da:8d:23:
                    96:2e:3d:4a:1f:40:24:fc:82:73:71:81:1c:f5:ec:
                    64:9c:12:6d:d0:51:85:f3:3b:bd:a8:56:39:49:6c:
                    e4:bb:65:b9:a4:a0:48:1e:6d:a6:f6:99:58:45:a5:
                    14:66:47:9c:60:b5:da:d4:d0:4a:ac:e7:c8:d4:16:
                    47:ed:43:3f:d4:df:51:46:e9:58:43:cf:56:93:35:
                    7c:c8:01:05:41:9c:2a:c3:90:c0:7a:89:38:02:4f:
                    a8:4a:38:c9:28:6b:61:39:09:b2:d3:3a:f1:cc:5a:
                    8a:61:ad:f7:47:c4:3d:4e:bd:17:40:2c:19:87:5d:
                    ba:39:0b:4f:ff:e6:19:84:80:79:fb:c7:90:f2:f9:
                    74:4f:48:7d:42:8a:44:1d:8e:99:39:4b:36:cf:a6:
                    38:05:df:53:6d:f3:f2:7f:7e:31:e6:2f:be:09:f0:
                    bc:2d:8f:9f:5a:e7:8d:4d:38:aa:5a:b6:f3:c2:f6:
                    c2:97:85:7f:fb:3e:cf:b5:ff:c9:73:74:41:43:7d:
                    cb:10:2e:c5:a9:45:e8:6c:ea:2c:48:9f:a6:6f:8b:
                    f9:1b:11:d2:51:4d:13:ba:7e:ec:e2:59:5f:bc:e0:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0C:83:E5:92:03:D9:A3:CD:AA:2B:99:73:3A:F6:DF:F3:FF:70:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:62:73:4a:58:e0:13:cf:2b:9e:d9:ab:24:89:19:d7:be:91:
         a4:b2:7b:be:be:7c:10:2c:21:dd:78:a0:4a:1d:f9:a2:6a:7c:
         89:c0:56:c2:55:4b:c1:61:16:ab:21:e9:26:b9:59:ab:07:2a:
         04:74:88:47:7d:78:62:ac:45:50:66:72:b5:ea:29:b7:30:4f:
         15:61:68:fc:bc:d7:81:4a:b7:06:fc:db:6f:47:a0:0a:64:c3:
         45:df:ef:20:f8:a2:79:8d:64:af:34:26:71:e4:4f:53:9b:85:
         ea:83:d6:f1:93:68:26:7e:f4:a2:31:66:3a:e9:22:be:f0:8c:
         cc:7d:6f:23:b2:db:a0:75:56:6e:dc:d8:4a:7c:46:e4:3a:b7:
         1f:81:60:52:cc:d9:17:48:67:fd:46:1b:9c:a9:11:43:38:3f:
         9c:5f:d5:5a:6f:ae:b8:42:b5:b8:03:7e:ee:1c:1c:13:0e:95:
         75:4f:b8:66:bf:7f:6d:c4:13:a0:29:aa:b7:8e:08:bc:be:7f:
         c0:8b:b5:6c:71:fe:49:16:79:35:47:79:75:53:ef:01:3d:85:
         05:51:58:df:4f:5b:b3:79:d1:7a:49:7f:fa:56:e9:7f:d3:da:
         62:0b:f3:8b:4e:11:9c:3e:5b:ea:bd:3d:d2:dc:79:7d:e4:58:
         10:36:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:55:09 2025 by rpki-client