Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa
File:                     a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa (raw, json)
Hash identifier:          ELr54kcV03cjK/Cc5wzs0yG2OQDkQhK2GZql5H0bASI=
Subject key identifier:   8E:DC:A9:3C:25:22:84:F9:28:CA:98:D1:D3:0D:1E:14:55:44:80:B5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA2E12F5BA47B2B02165C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.251.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2e:12:f5:ba:47:b2:b0:21:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=a8c899a9-4dda-463e-926e-3072fc06dd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c3:11:32:47:28:56:f4:f2:ed:86:42:e3:e8:
                    21:73:05:49:40:ba:5b:11:71:d3:04:55:17:1b:9d:
                    e9:9d:f8:dd:12:90:93:01:6c:24:fb:47:59:7a:86:
                    f7:dd:df:6a:2a:3d:80:6e:e7:85:cb:da:73:88:5e:
                    ab:73:67:0b:f8:4e:f9:a3:80:30:3c:04:74:7c:b7:
                    62:27:72:b9:ea:69:85:c7:8d:8e:79:b9:4d:57:cd:
                    13:2c:8e:ef:9c:b1:70:51:f8:f5:71:5f:14:a9:87:
                    c1:aa:6a:6e:ed:71:25:c6:2c:57:08:7b:22:24:3f:
                    1b:46:f9:ec:ee:5d:e1:00:87:cd:a0:39:3f:f5:99:
                    92:9b:3c:7e:7a:5f:58:d6:1c:e6:9c:00:46:b2:ae:
                    a9:7c:1b:c0:9f:eb:9f:3d:cb:16:d1:fa:cf:7a:29:
                    51:5a:9b:dc:b6:f4:7b:c3:69:88:c0:7a:7e:8c:fe:
                    66:f2:ac:4b:6f:91:f2:6b:01:31:a8:c2:3d:6d:fa:
                    b2:b4:1e:36:c5:14:b9:35:bb:af:5a:5f:a6:c5:df:
                    a0:23:9e:f9:db:54:70:f2:96:65:47:ca:15:97:af:
                    e5:85:14:06:36:21:df:73:07:da:55:96:de:a8:66:
                    e8:51:dc:86:93:9e:f1:eb:15:bf:e4:63:c7:ac:cb:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DC:A9:3C:25:22:84:F9:28:CA:98:D1:D3:0D:1E:14:55:44:80:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:08:98:f0:b0:02:af:b9:40:dd:cc:14:19:d7:11:2a:25:e5:
         8a:a7:e4:ac:94:03:23:48:f6:2b:ad:fc:fd:18:ec:1c:fd:9a:
         96:26:37:16:fd:07:a2:8e:ec:86:e2:cd:02:77:44:9a:90:75:
         36:91:9e:ce:9c:4a:70:97:66:42:19:8b:80:94:15:50:b4:10:
         54:c9:aa:e5:95:6c:47:e9:6c:c5:59:d0:37:ad:41:07:59:33:
         a6:85:ec:aa:11:a8:f1:4d:01:a5:0d:67:6f:9d:65:fb:fa:3f:
         fe:1f:22:19:46:ba:49:2a:34:15:fd:0f:1e:62:01:e0:8a:9e:
         3a:7b:36:af:e9:2c:cc:5b:a7:2b:b2:1d:78:15:17:26:9b:b2:
         5e:f3:3d:0c:24:ff:da:95:4f:5e:b0:89:97:26:da:94:e2:8a:
         f3:25:0e:17:ab:3a:7a:f0:f7:44:60:61:ef:cd:f1:b2:eb:e5:
         83:65:e4:84:62:81:b1:5e:47:ab:de:68:74:4c:0f:31:24:cf:
         ff:7d:d2:bb:fa:23:f5:f8:2d:26:3d:36:ca:37:63:bb:8d:93:
         22:a0:22:fa:2c:77:2e:aa:23:6e:19:c3:5f:7f:6c:98:07:cf:
         d7:38:b3:35:9c:fd:6f:13:83:d2:cf:05:5f:1d:e1:23:44:4b:
         12:01:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:06 2025 by rpki-client