Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa
File:                     de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa (raw, json)
Hash identifier:          Mk57abT2n7RvopUuuiSgu5kN5VfH6gfOMR6QLhBD4q0=
Subject key identifier:   F2:C5:22:D0:E0:1C:91:0F:D6:C7:93:2A:B1:3C:5E:03:78:D0:63:80
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA31624941E00862CFAD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:31:62:49:41:e0:08:62:cf:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=80265cc1-5956-47cc-bea2-337c18b9c6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:32:66:79:7f:48:cd:90:fe:7b:bc:a9:1a:
                    6c:7c:97:89:88:da:a5:c3:72:1b:ab:49:6f:88:44:
                    75:eb:ce:ab:e1:7e:70:8c:22:b3:ca:91:37:69:7c:
                    8b:ca:c5:f7:b4:44:0a:d2:5b:6a:b7:8f:13:09:79:
                    ac:74:b9:a2:a6:ba:ee:5b:23:1b:cc:20:0f:d2:0f:
                    13:ac:7e:80:1f:84:34:e0:ca:dc:24:62:35:2e:db:
                    7b:41:cc:1a:c4:e5:95:4e:b8:5f:5b:5d:e7:f6:77:
                    61:f7:56:10:ee:15:55:e4:53:6d:76:81:89:ce:87:
                    6c:0f:3a:89:3d:e6:e3:f6:13:8c:51:83:f1:43:26:
                    de:ce:91:e8:19:cd:30:97:9a:53:cb:08:fa:c9:bd:
                    e2:7a:52:a9:a2:c2:2c:88:96:f4:15:7d:af:fc:5e:
                    2b:47:03:90:ea:1a:eb:e1:9f:46:8c:3f:97:22:61:
                    5f:40:38:79:e3:2b:36:41:72:7b:9e:22:f9:10:3c:
                    e8:db:c7:d1:13:6e:73:57:b7:f4:f3:56:7e:ed:e5:
                    dd:ba:6c:bd:e8:93:e3:c4:9d:74:68:19:85:55:a2:
                    37:48:de:38:bc:f8:14:78:18:52:85:54:5b:91:df:
                    fb:26:7b:21:69:ca:0a:46:5f:72:23:b9:b4:ed:e5:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C5:22:D0:E0:1C:91:0F:D6:C7:93:2A:B1:3C:5E:03:78:D0:63:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:84:b4:5e:57:11:94:00:dd:08:5b:24:90:1e:44:98:19:4c:
         43:46:56:59:52:d3:f8:fc:e0:92:e7:64:4d:b5:e0:79:e2:a3:
         c0:ca:e1:20:fd:f7:3b:b0:8c:80:02:45:27:c0:43:f0:b1:8f:
         06:78:28:10:84:ef:ef:3d:c0:ed:47:33:09:92:15:f4:bd:a1:
         80:e5:cd:34:ce:74:3d:9c:12:e3:13:7a:bb:f9:71:a5:78:6d:
         49:56:e1:b0:db:ae:af:1b:b0:31:bb:14:ce:7c:21:5b:8b:0f:
         86:e5:5c:49:8a:16:fe:3b:c9:4b:56:10:d8:df:68:a6:99:34:
         b1:b1:89:5d:a5:7e:3e:b8:5c:b8:86:f7:14:e9:e0:a8:67:53:
         9f:9c:00:aa:c9:21:a4:04:82:13:01:49:71:1c:f6:87:5b:bc:
         9e:c4:e4:58:62:f7:e8:a6:5b:e8:db:8c:d9:20:44:cf:03:b1:
         73:a6:71:f5:b5:e5:7c:02:5e:20:3c:9a:b4:6c:e6:ad:59:3d:
         07:75:f7:0f:f1:6a:57:e3:79:39:df:00:1d:20:bb:03:35:e3:
         90:e9:ed:29:9a:92:2c:fc:e4:5c:cd:2a:7d:2a:da:f7:12:fa:
         c1:f9:30:99:04:37:4c:ab:86:2c:2a:af:fe:de:c5:be:bc:92:
         6c:cd:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:46 2025 by rpki-client