Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e483f624-27a3-345a-8953-1b65d8211a9f.roa
File:                     e483f624-27a3-345a-8953-1b65d8211a9f.roa (raw, json)
Hash identifier:          wGioxunT0RG3UJSSBYDcp9KQmueERbmTHqp4L4OWqdY=
Subject key identifier:   B7:C5:C1:95:26:4E:4E:31:C6:5F:03:B7:DA:67:57:FE:46:1D:53:4B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA36D0C705E7D217D70F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e483f624-27a3-345a-8953-1b65d8211a9f.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.251.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:36:d0:c7:05:e7:d2:17:d7:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=09bb96cf-8b54-4ca4-b8fe-95b93563a453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:17:2b:68:b2:ca:8f:2e:17:15:32:cd:ce:
                    44:fc:01:65:f4:95:de:97:b1:13:16:7c:ec:cf:7b:
                    8a:54:55:fd:99:79:92:cc:3b:66:3d:d2:90:cc:fb:
                    12:6a:4b:ef:69:ab:ab:bc:1b:c0:53:c9:5b:f4:3e:
                    b2:7c:3f:a8:56:ee:5a:82:4b:e6:57:b6:06:80:33:
                    01:ac:2b:49:06:56:0c:bc:20:cb:5a:1b:d8:d9:95:
                    d4:e0:90:fb:53:e2:19:01:47:9f:c9:5a:90:b5:b5:
                    86:83:1e:8b:f4:e5:61:5d:88:89:ad:96:97:45:99:
                    3c:80:a0:f9:a7:f0:a8:b6:57:65:e8:7e:37:c3:60:
                    94:44:41:56:29:61:e8:47:ec:32:d7:53:ba:9b:1e:
                    a0:60:d9:5e:e8:62:d9:60:2b:88:40:fb:5c:75:bf:
                    a1:e7:ee:96:ae:88:17:93:d1:39:57:5d:02:23:98:
                    87:02:0f:1a:e8:0d:10:99:0d:1d:dc:75:10:c5:a1:
                    ee:43:55:b3:b5:79:de:2e:f0:0b:8e:9d:db:f1:a3:
                    ff:c5:ae:d3:43:94:97:b6:8c:93:1f:55:66:fa:26:
                    06:75:d4:d5:00:89:37:37:8a:c2:3b:9e:5e:b0:35:
                    4f:62:f7:e3:47:d6:df:ee:2f:97:6a:d0:0f:58:55:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C5:C1:95:26:4E:4E:31:C6:5F:03:B7:DA:67:57:FE:46:1D:53:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e483f624-27a3-345a-8953-1b65d8211a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e6:25:b0:96:20:2d:73:16:57:a9:5b:c6:c0:05:0a:4b:97:
         76:94:cb:e8:f0:9e:87:f0:b3:8c:1a:5c:82:8f:98:73:30:05:
         3c:34:53:b4:79:1f:60:76:9a:13:e9:a2:38:da:78:24:05:97:
         71:fd:8a:6d:96:9c:11:aa:82:1f:e3:2b:d2:33:fd:e1:a5:68:
         ee:46:7d:87:88:c5:74:73:bd:bb:e1:de:4e:45:0c:bb:b2:4f:
         e9:60:b9:bb:e4:31:ff:e6:f8:de:da:79:60:23:ac:60:31:09:
         5f:73:bd:be:f5:57:bd:2d:10:58:28:94:20:fb:95:4e:7a:ff:
         ee:4c:6d:d5:13:82:be:f6:9c:ac:83:ed:e5:00:fe:dc:1f:29:
         ff:3c:ce:32:e5:61:fa:13:ae:60:f6:a2:24:06:14:e3:f7:5c:
         02:e9:9b:48:c7:c7:96:2b:15:f4:52:75:09:4d:94:a2:5a:8a:
         40:3b:5d:a6:2d:a6:24:2a:3f:19:d4:7c:d4:b8:14:0e:4e:eb:
         80:5e:d6:0e:cc:cb:09:4d:0e:eb:80:ea:b0:a7:cb:e3:b7:73:
         0a:01:cc:8d:10:d6:e5:29:c3:53:d2:46:dc:d8:2e:f0:20:ea:
         c2:ab:4b:9e:46:e5:ea:2b:13:aa:1f:64:6b:aa:4f:b5:15:fe:
         8e:a9:48:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:53 2025 by rpki-client