Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa
File:                     ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa (raw, json)
Hash identifier:          yOjcKkcPm8+cf9woro954LygsHWYIZWJr9+V1EyWRKE=
Subject key identifier:   90:54:CC:08:44:F3:AB:F7:72:E6:90:44:5F:D6:30:C5:40:8D:F3:AB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841231576AC5891093DA9100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:31:57:6a:c5:89:10:93:da:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aff86b7f-d5d4-49a2-9131-42c553b02d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:bf:c9:9b:75:ba:86:fc:10:2c:3f:55:f0:
                    18:7f:98:23:a4:37:7a:96:8d:08:8e:f2:7b:53:e1:
                    ef:a1:22:63:b7:8b:78:87:44:90:9d:f5:50:5d:8d:
                    49:e8:53:6d:e8:66:c7:f2:22:a4:dc:39:2a:f2:a6:
                    92:21:90:9a:38:9b:b2:a9:1e:96:e4:0f:e0:08:cd:
                    37:30:fc:de:7f:0d:65:17:c0:5f:51:9f:f1:04:f1:
                    3a:2b:26:86:e0:e5:c3:da:b7:fd:37:45:03:97:fa:
                    1f:6e:22:12:d1:de:ea:3f:6f:87:b5:4b:9f:03:74:
                    fa:fb:41:62:63:45:66:ff:19:91:dc:bb:c7:95:03:
                    5f:7f:5d:8c:77:b7:a7:a7:91:f7:a7:6a:e8:88:ed:
                    29:ee:1c:0e:33:b1:e3:dc:10:0b:2a:d7:83:fb:03:
                    fc:fd:e0:b6:62:65:97:ca:ae:22:d2:28:ab:71:6c:
                    69:07:18:6a:f3:f6:5b:ee:e7:b1:0d:ff:2e:7a:4a:
                    ed:29:f7:70:dc:1f:44:08:d6:d8:d4:5d:fc:05:9d:
                    b8:3a:00:d1:e1:a6:0b:98:37:71:41:c0:8d:30:1d:
                    51:e8:7f:d2:b3:6a:a6:24:2c:dd:f2:6a:af:66:19:
                    36:3b:34:56:1e:7b:12:1e:01:cb:20:fb:a4:a1:dd:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:54:CC:08:44:F3:AB:F7:72:E6:90:44:5F:D6:30:C5:40:8D:F3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:4a:fd:d7:bf:42:fb:15:00:79:a3:52:94:13:b5:d3:7f:
         0e:e4:2d:2d:09:d0:44:c5:98:68:9b:f7:7b:79:b9:81:db:74:
         aa:51:d5:5f:fa:8c:63:6a:6b:9d:86:67:9a:0b:79:cb:b7:04:
         d5:95:3b:4a:2d:85:67:2e:5f:d1:01:97:37:0b:17:b9:28:70:
         1f:71:d2:3c:04:63:d4:81:93:74:86:62:38:cc:93:1a:21:0b:
         d3:a9:0e:73:58:51:4e:08:1a:d0:13:d5:ad:b0:e7:34:17:11:
         f9:48:11:19:60:e4:0a:f0:b4:aa:fc:c1:16:a0:36:cf:a0:96:
         7b:a8:59:cc:66:9c:b5:e7:78:fb:88:84:d8:78:5a:8a:ae:44:
         ed:8d:72:a4:50:49:48:fb:57:a4:b6:f3:83:92:ff:cc:ce:cd:
         71:b6:4a:c0:85:30:20:3e:10:91:db:cd:6e:3f:71:1e:ed:67:
         d8:e0:2a:0b:a1:c3:64:41:77:9e:5d:66:e1:05:b6:5d:4d:d0:
         94:67:6b:ea:fa:2f:52:4d:6a:a3:a2:94:a3:39:5e:bb:79:f0:
         f5:1e:b9:01:21:ec:b2:1a:2f:18:b5:70:2f:e9:02:f9:5b:0e:
         84:db:4e:72:ad:d7:27:87:c2:db:a4:72:43:1d:18:b0:d0:62:
         b5:a1:54:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjFXasWJEJPakQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YWZmODZiN2YtZDVkNC00OWEyLTkxMzEtNDJjNTUzYjAyZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIe/yZt1uob8ECw/VfAYf5gjpDd6lo0IjvJ7
U+HvoSJjt4t4h0SQnfVQXY1J6FNt6GbH8iKk3Dkq8qaSIZCaOJuyqR6W5A/gCM03
MPzefw1lF8BfUZ/xBPE6KyaG4OXD2rf9N0UDl/ofbiIS0d7qP2+HtUufA3T6+0Fi
Y0Vm/xmR3LvHlQNff12Md7enp5H3p2roiO0p7hwOM7Hj3BALKteD+wP8/eC2YmWX
yq4i0iircWxpBxhq8/Zb7uexDf8uekrtKfdw3B9ECNbY1F38BZ24OgDR4aYLmDdx
QcCNMB1R6H/Ss2qmJCzd8mqvZhk2OzRWHnsSHgHLIPukod14uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBUzAhE86v3cuaQRF/WMMVAjfOrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2U0ODI4N2YtZTVhYS0z
NDNhLWFkOWQtODQ0NWE4ZjY0N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpDSv3Xv0L7FQB5o1KUE7XTfw7kLS0J0ETFmGib93t5uYHbdKpR1V/6
jGNqa52GZ5oLecu3BNWVO0othWcuX9EBlzcLF7kocB9x0jwEY9SBk3SGYjjMkxoh
C9OpDnNYUU4IGtAT1a2w5zQXEflIERlg5ArwtKr8wRagNs+glnuoWcxmnLXnePuI
hNh4WoquRO2NcqRQSUj7V6S284OS/8zOzXG2SsCFMCA+EJHbzW4/cR7tZ9jgKguh
w2RBd55dZuEFtl1N0JRna+r6L1JNaqOilKM5Xrt58PUeuQEh7LIaLxi1cC/pAvlb
DoTbTnKt1yeHwtukckMdGLDQYrWhVA8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:34 2025 by rpki-client