Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa
File:                     f340479d-992c-3020-9b89-7b2c0474b6f0.roa (raw, json)
Hash identifier:          e+38zgLBUFQYpPfh6d+EPirFAX30VXlus7bZpcgJj8k=
Subject key identifier:   55:AB:77:63:8F:43:F8:2A:2E:EC:60:2F:FB:AF:FE:AE:AD:BD:14:FA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BDDA2EAF19E8F72632AF2880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.251.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2e:af:19:e8:f7:26:32:af:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=0037f20a-a1d2-48e3-ae10-dd181671f905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:08:ae:22:d7:e6:e0:ac:1f:d3:38:b9:79:
                    2b:31:14:82:a8:3d:fc:77:ae:84:e6:8d:19:6c:d1:
                    97:05:8d:1e:9a:33:35:51:bb:fc:4f:2a:2f:d4:83:
                    31:59:0b:52:b7:f6:bc:8a:24:74:3f:44:a3:07:e4:
                    fe:25:38:16:83:57:fc:bb:bf:f9:e0:46:1b:86:86:
                    ff:68:7a:85:2a:33:42:2c:65:70:6a:54:90:40:86:
                    d5:f4:d1:74:95:6e:a0:c9:bc:ce:db:9b:34:ba:d0:
                    20:e2:68:7a:82:02:53:c7:f4:6f:9c:a5:7f:6a:00:
                    74:03:4e:18:6c:d2:86:e9:e0:45:a1:75:f3:39:97:
                    df:aa:f5:cd:07:48:1c:1b:5e:4d:ab:df:3a:8a:74:
                    05:1d:f1:eb:fa:4f:3e:7a:c0:67:48:02:d1:2b:c2:
                    37:db:18:30:07:c7:a7:28:6d:8e:da:5a:42:19:86:
                    85:62:69:ca:22:b9:d0:b5:3a:39:ed:a7:5c:8c:21:
                    cc:60:6f:4f:14:6f:f3:bd:3f:e4:bb:9a:76:ee:d8:
                    ea:c2:57:86:fa:74:02:71:eb:2c:de:96:5f:fc:d6:
                    7a:6c:52:e7:53:9b:81:0f:3f:53:fb:e2:15:52:7d:
                    39:1d:93:9f:b0:1a:09:a5:c8:d3:92:47:30:26:96:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:77:63:8F:43:F8:2A:2E:EC:60:2F:FB:AF:FE:AE:AD:BD:14:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:3b:fc:aa:2c:8f:75:46:09:16:2f:7b:da:d3:60:e6:ba:
         89:0c:79:02:70:b1:b6:87:07:7e:42:21:d5:ff:d5:92:32:7e:
         e8:45:80:1d:d7:48:23:1a:08:64:05:2e:b1:d5:3d:c6:58:e0:
         eb:4d:93:e7:ad:ef:5c:59:52:c5:94:31:47:6a:e0:48:4d:4a:
         61:16:fb:01:9a:5e:20:0f:ca:d4:30:40:a7:1d:5b:6d:8b:e8:
         8b:dc:99:39:d6:d5:94:18:1c:fe:1a:d5:35:d0:90:9b:ce:8a:
         8b:7b:7a:59:1f:84:17:86:70:6b:63:68:36:12:7f:f6:86:28:
         71:c4:06:5e:8f:f7:18:64:26:a3:ed:14:cf:c9:97:1c:00:2e:
         13:c7:b9:91:23:80:cb:5b:68:ae:25:12:8a:83:ca:52:16:95:
         39:f1:15:3b:7a:0a:25:03:76:43:d2:8a:7c:b6:9f:40:2f:6d:
         e9:bb:6c:e1:ab:6e:bf:69:5d:e8:a1:ff:b0:f2:9e:3b:f4:fe:
         75:fd:b0:58:b1:25:b0:e2:98:45:41:09:44:75:ba:bf:b2:83:
         b6:f0:53:2b:9e:09:c6:60:67:79:bb:62:dc:67:3a:ab:07:09:
         1f:21:cd:03:72:21:d0:28:63:7b:7e:49:75:ca:1c:52:50:03:
         c2:ae:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:14:29 2025 by rpki-client