Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa
File:                     c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa (raw, json)
Hash identifier:          UmCFAsZqPuVJjIW8NWsXk7Gy/XSKlBZnRcVeufS4S3M=
Subject key identifier:   F8:4E:40:22:27:98:3B:C6:F2:44:6D:59:6B:4B:C2:72:16:90:DC:CF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A2C201C01E4D9FF185CD5DC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     15169
IP address blocks:        142.251.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1c:01:e4:d9:ff:18:5c:d5:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=2efd6638-ad57-4c75-b05b-73b8aba29064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:82:10:60:74:47:6a:f0:7a:ea:fe:7e:5d:
                    6e:f7:2c:bd:ec:ee:0b:0d:92:aa:fa:7a:68:d2:ad:
                    5b:da:03:9a:af:b7:4e:fc:e6:d5:73:14:58:75:77:
                    b2:5b:b5:17:77:32:85:c1:4f:9f:59:a8:a5:51:4e:
                    6e:67:78:3c:21:76:3a:d6:07:ea:b0:99:0c:be:b7:
                    3e:04:0c:53:d6:77:4c:80:59:2c:36:fd:84:04:dc:
                    b0:d8:ff:f6:68:3d:83:51:82:9a:e0:f6:62:98:a3:
                    73:3e:60:65:9e:ab:fc:48:c1:16:2e:54:33:2f:c9:
                    2b:15:80:6f:05:de:f1:3d:8d:94:5a:9c:4f:0e:81:
                    09:65:2d:41:7e:34:27:cc:26:94:f3:c2:51:51:8d:
                    7e:a2:df:e3:de:34:fa:8b:35:b7:c2:8c:3b:30:39:
                    84:3e:44:5d:a0:2f:2a:a5:a5:ef:3a:de:9a:e7:be:
                    a6:12:e5:85:c9:33:7d:b3:f9:39:51:e0:bf:5b:68:
                    59:bf:69:84:09:80:c2:0d:7c:fc:26:6d:05:4a:ec:
                    b6:70:58:91:1d:8d:86:70:b2:18:31:9a:72:cf:9a:
                    f6:13:31:c8:dc:b6:97:62:a5:e0:54:ac:f6:90:1c:
                    61:1c:a5:54:a3:f9:f9:4d:82:ae:67:01:df:52:a0:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4E:40:22:27:98:3B:C6:F2:44:6D:59:6B:4B:C2:72:16:90:DC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:cf:ea:43:0b:16:22:cb:ee:19:ed:ba:a1:98:41:07:33:
         e0:f4:75:0a:34:e2:b5:96:1f:e6:a3:7a:5e:cb:5a:43:61:96:
         e2:87:8c:ad:8a:ee:d2:c3:44:e0:ab:71:23:f8:0b:0d:52:94:
         e3:43:d9:4c:5c:8a:ba:f7:47:b0:81:1e:45:89:26:78:9f:b6:
         29:7d:1a:eb:a0:f7:4f:40:73:fa:94:bc:fd:9c:4e:17:48:75:
         7c:e1:37:78:d9:af:5d:d5:12:4d:2e:dc:12:5a:f5:2f:64:28:
         21:8a:4f:62:43:f2:4c:a0:45:18:a0:78:22:07:4b:ec:34:5a:
         02:16:1d:51:4e:62:7d:de:7c:7c:3e:c8:3b:71:33:2e:ce:72:
         57:80:1f:65:28:ee:33:a7:ff:f0:26:17:52:bf:00:d1:85:29:
         ef:e2:0f:b2:3a:48:1a:3f:e2:e3:ba:5c:88:19:86:77:8b:ee:
         b7:22:03:b3:e2:c5:81:35:f5:e7:b7:ac:fb:48:36:4c:ea:c0:
         67:a0:60:bc:a6:5c:c9:75:28:17:5b:38:33:4b:a5:e1:48:97:
         43:5b:2c:d0:5e:40:99:f9:31:5d:d7:bb:de:83:3d:de:94:d5:
         65:2c:40:30:66:7b:c0:80:05:58:9b:79:1d:ee:b7:80:35:4b:
         39:95:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:39 2025 by rpki-client