Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa
File:                     dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa (raw, json)
Hash identifier:          zUcLzTOL02Mm+OwcKlR2BdU7SUd8P7RbcUnzvG4THYY=
Subject key identifier:   EE:44:01:A1:6C:06:2D:E6:A8:29:C7:D7:62:04:8A:F4:1F:E4:3F:C6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841191D6BFA0D5D0570AD880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:91:d6:bf:a0:d5:d0:57:0a:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5e4b4031-366c-41d3-a0f3-e9d2dd512db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ce:d1:25:c4:0f:c1:ee:ff:0d:fe:95:d8:6c:
                    ba:d7:bc:2f:ad:be:24:b8:c5:33:a3:3f:97:d5:4e:
                    c5:a4:7f:45:21:33:d7:24:c4:a5:bd:d7:fb:bb:42:
                    53:72:5c:09:1b:24:88:e4:bf:ef:f2:cc:20:ec:c8:
                    9e:c9:93:65:58:a0:83:d2:7a:e5:22:e4:d9:b3:46:
                    c4:4e:71:61:10:0c:e2:b9:f3:63:3d:a2:b7:37:21:
                    2f:86:62:ba:53:3a:0f:ef:90:cf:05:77:25:5c:70:
                    a5:2b:e8:f4:29:03:82:49:24:12:a2:43:3d:c8:e5:
                    eb:dc:2e:4e:88:f7:92:1a:a5:7f:30:5e:83:81:ba:
                    7f:fa:5b:34:88:40:ec:03:ea:d9:1e:2a:fe:33:29:
                    24:f2:a1:d2:5c:ee:67:32:05:95:d9:ae:7a:ed:ff:
                    ef:b0:36:30:b2:18:c6:69:a2:6e:21:e6:68:78:c8:
                    7c:4f:c8:2d:62:4d:89:f4:68:15:56:3d:6f:0c:08:
                    6a:d6:50:90:b1:be:ad:a5:ef:36:94:f3:85:e5:20:
                    bb:56:51:00:1c:a6:71:f6:da:6c:65:96:3e:68:91:
                    b6:a8:9c:88:9d:72:94:07:7b:b3:73:27:f0:68:8d:
                    78:a1:e5:64:e2:13:cf:0b:52:8f:01:28:40:ec:e1:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:01:A1:6C:06:2D:E6:A8:29:C7:D7:62:04:8A:F4:1F:E4:3F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:42:22:50:2c:a1:7d:12:e1:10:b9:b8:72:e5:68:6d:b1:1e:
         d9:d1:8d:3a:4c:36:4d:ff:b7:52:12:f9:3b:21:00:5a:df:6f:
         cb:0e:ea:29:3b:a0:f1:90:39:1e:f2:41:43:0f:30:b9:3e:e0:
         01:af:34:bd:12:97:ca:4b:0c:a5:a0:a7:1a:07:51:3a:5c:d8:
         fb:96:49:03:cf:4f:7c:38:79:ca:02:e6:a9:2b:e5:f6:eb:40:
         0d:0e:65:10:73:7a:8f:52:ab:d2:72:c0:89:b5:2b:d0:22:18:
         52:b9:48:cf:98:83:f8:d8:af:bf:fd:c8:1d:58:e5:cb:33:a8:
         c7:33:90:d4:9e:92:57:bb:3b:58:5f:0f:bd:5a:9c:ce:39:cf:
         be:55:a4:7a:0e:4f:37:d5:e2:47:4c:ea:bf:70:b5:63:ba:7a:
         df:18:64:4e:22:48:10:85:55:88:9a:b2:0b:a1:a3:e0:16:9f:
         d6:42:04:fa:15:9d:97:2f:c3:c4:82:05:0a:bb:75:c7:1d:c3:
         fe:f4:c8:af:46:c1:eb:3d:31:3f:5b:a2:eb:b1:54:0e:f2:7e:
         62:41:9b:cc:c5:eb:bc:49:26:3f:22:8c:5b:a2:0e:84:0f:aa:
         89:b4:e6:2b:7f:45:41:af:7b:17:17:22:f3:b4:68:1e:ea:21:
         24:c4:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:27 2025 by rpki-client