Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa
File:                     b71ba4ca-d2d8-3416-a045-386b341764bf.roa (raw, json)
Hash identifier:          ydjVwyv+1m+RDvITwJgMBCMhF7dIvb3WvXesA86Ko8E=
Subject key identifier:   D4:C0:F3:03:D1:4E:6A:EA:DA:B7:BD:21:F6:D0:E0:CB:05:6D:25:8F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841232F36CE37B21BAEB8480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:32:f3:6c:e3:7b:21:ba:eb:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a95a33a2-4521-4985-aa97-8ed03f3d8102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:1c:7c:79:b3:d2:26:46:7e:c2:1e:62:14:
                    9e:09:20:e2:dc:54:2e:b9:4b:d4:a8:4b:c7:89:36:
                    a2:50:ce:f2:e8:e8:57:ea:57:3a:93:2b:79:aa:88:
                    53:4b:54:84:6b:e0:16:fd:dd:cf:e5:ac:b4:21:3c:
                    bb:cd:4a:44:e7:67:4c:ed:99:8e:73:fd:f9:72:c0:
                    dc:6e:10:50:d2:ff:48:08:99:40:da:3a:69:4b:47:
                    66:02:4f:41:4d:7c:58:12:c0:99:ce:7c:0f:4b:95:
                    18:e8:78:78:7d:00:07:b1:24:68:0e:e5:ea:a1:09:
                    f0:ff:95:49:db:34:34:bc:a4:c0:16:d3:0d:14:7d:
                    aa:b9:5a:16:be:df:e8:3d:aa:96:07:62:9b:c4:91:
                    14:42:dc:a6:44:5c:6c:a2:9d:03:86:38:14:1b:6f:
                    d5:4a:a0:92:b6:bd:df:b7:1d:eb:02:30:81:b2:9e:
                    21:dd:d0:b5:64:0e:c1:99:eb:0e:72:ae:60:e3:ed:
                    f4:2a:a3:2f:16:ee:25:d6:56:e4:46:32:d8:df:4e:
                    3e:f1:14:dd:6d:12:9a:f9:22:0d:65:5f:91:7c:16:
                    b1:61:e0:da:dc:47:f3:64:b8:27:dd:ec:8c:0a:9a:
                    b4:4f:66:51:da:a9:11:55:68:7f:fd:4f:7d:7d:3c:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C0:F3:03:D1:4E:6A:EA:DA:B7:BD:21:F6:D0:E0:CB:05:6D:25:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b5:e7:69:02:6b:0c:87:74:7b:a0:38:31:0e:d7:c8:aa:39:
         c4:5a:40:b3:0f:0e:1a:17:d0:87:32:fa:0d:e7:21:a7:f9:17:
         f6:60:9a:de:8c:ac:1a:22:33:6a:83:7a:de:23:a0:1c:92:b3:
         46:46:38:1b:73:b8:de:f0:2f:8a:b0:11:27:da:5d:93:11:61:
         1a:2f:1b:b9:d6:47:c7:e9:0d:7e:7b:d0:6a:95:5b:aa:e9:fc:
         7e:ca:95:e0:fa:88:2f:5e:ff:ad:e0:51:fa:f9:3c:27:53:de:
         35:8d:5d:7a:68:a7:14:7f:46:d6:b3:e2:21:25:8c:27:f4:37:
         77:81:6c:36:a7:45:5e:cc:1f:7b:e3:2b:c3:d7:b7:b3:19:26:
         50:51:32:f0:ee:fa:05:f8:3d:49:c8:b3:9d:33:e4:3d:eb:25:
         40:47:65:db:0a:6f:d4:7b:a5:84:5f:5c:37:ac:48:b6:7b:38:
         5f:6f:a4:7a:9f:ff:96:5a:7c:98:61:4e:b1:8b:ed:77:2d:9b:
         93:71:0f:8f:89:bf:c7:0c:92:a1:ba:5b:9a:20:ed:bb:49:56:
         5a:6f:66:42:45:97:7b:cd:e0:b8:2e:8c:4e:bd:29:65:59:5e:
         a7:61:81:20:0d:cc:f6:c7:58:11:57:32:2a:4a:e1:aa:39:40:
         e3:38:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:19 2025 by rpki-client