Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f2ddab73-c351-30fd-adc2-efce6c33149f.roa
File:                     f2ddab73-c351-30fd-adc2-efce6c33149f.roa (raw, json)
Hash identifier:          9SQc4Plsk9pK/k1V5DOLiOt8H5F3uvEmh10JmClwiw0=
Subject key identifier:   37:44:C1:D0:B0:0B:A8:CE:8A:83:03:E5:7D:53:84:29:B9:03:62:B0
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A2ABADC93AE716F6670765880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f2ddab73-c351-30fd-adc2-efce6c33149f.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     15169
IP address blocks:        142.251.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:dc:93:ae:71:6f:66:70:76:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ee723ac8-c89b-4037-9f47-a0f43b4d1d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:4a:6b:b0:6e:3a:cf:5b:40:de:8f:f8:41:
                    78:7e:85:f4:59:c9:8f:4e:3a:df:a2:52:e1:d9:3f:
                    ce:c8:5e:07:1d:c6:69:3d:bc:3a:81:2a:57:b1:cb:
                    d1:ee:ea:3d:df:7e:fa:59:44:80:19:29:41:89:8c:
                    5f:ef:19:5c:d0:7c:ec:f0:a5:a7:5e:92:03:0d:ed:
                    2b:75:3b:1f:62:94:49:bd:97:68:82:8d:18:3e:56:
                    15:13:8d:73:ef:b0:88:12:6a:ab:96:87:1e:1f:dd:
                    f3:f9:4d:ec:bb:ab:e1:93:e3:f6:46:95:64:c1:8b:
                    b2:7c:c4:55:7b:f3:ae:0b:6b:0b:26:fc:a9:24:93:
                    6d:41:bc:f7:48:f1:82:83:12:a5:d8:a4:b9:e6:0c:
                    c4:ec:ef:80:1d:e5:58:59:47:8a:7e:45:3d:a5:f3:
                    ef:19:8b:db:68:7b:d4:28:b0:4e:67:85:cd:96:42:
                    a6:90:7a:00:79:fd:91:4d:1c:1e:1f:af:44:a6:63:
                    47:6e:b7:11:41:f9:37:77:30:6b:9c:ae:bf:94:48:
                    8c:1e:3a:91:14:29:f4:3b:4d:21:c0:b5:5d:a8:32:
                    44:83:2c:83:cb:17:eb:24:15:cb:35:2f:9d:c3:0d:
                    07:c5:dc:92:3f:cd:42:a7:5e:26:2b:31:d7:3b:08:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:C1:D0:B0:0B:A8:CE:8A:83:03:E5:7D:53:84:29:B9:03:62:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f2ddab73-c351-30fd-adc2-efce6c33149f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:a4:ef:d4:c6:4c:ee:90:11:ba:c1:25:49:46:2d:b5:f5:
         0b:53:bc:73:06:34:46:74:ef:06:ad:f6:85:fe:09:f0:56:db:
         0b:fe:86:bd:41:2d:b2:f3:ab:dc:b4:d3:aa:94:2c:72:05:fe:
         ad:82:a4:b8:26:e6:8b:cf:e6:0e:5b:7e:1e:5e:13:b3:5d:f0:
         c5:dc:7d:b7:5c:1d:3c:21:77:45:90:3b:c8:80:de:f6:09:b9:
         97:0f:8c:f8:c4:86:c3:0b:03:48:29:25:e3:2b:b3:ff:0c:82:
         97:92:90:ce:cf:da:f4:4f:67:0d:4c:c0:e8:03:ab:13:84:96:
         8b:75:6e:98:af:b4:11:7d:98:bb:2e:c1:52:30:d5:6e:2a:92:
         18:8f:d4:0e:d7:ad:dd:fc:45:aa:e2:f7:3a:04:c2:28:af:ed:
         3b:97:a8:65:e3:3b:d4:37:1d:b7:a7:77:4b:6e:bb:7a:2f:30:
         25:b5:c5:6c:ea:86:74:48:6e:2d:1d:1c:84:c4:98:70:20:01:
         5d:89:24:f0:1d:38:9f:ce:16:5c:1b:de:44:3a:40:56:56:3d:
         a9:06:cf:54:6a:2b:f6:a7:ea:be:1d:06:3f:46:2e:d2:34:44:
         aa:b5:89:1e:31:9b:34:74:d4:4e:09:7d:d1:4e:5b:0e:0f:09:
         7c:c5:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:04 2025 by rpki-client