Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa
File:                     f957cfeb-5830-39ef-9099-bec5d5f55221.roa (raw, json)
Hash identifier:          ryVtH5maC0i070c9Nwi0XwxsPF0eHjW1G/qukndWyUs=
Subject key identifier:   CD:88:7E:65:86:62:2C:91:44:A2:84:52:E0:00:80:95:79:91:0D:D9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB6463209E3416E404B080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.251.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:64:63:20:9e:34:16:e4:04:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a1df3a6c-5ebd-40e1-a879-29645995092f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:0d:28:cf:45:71:fa:b1:83:06:45:ff:4f:
                    41:e4:39:8b:3e:f0:46:25:de:30:e0:51:24:e9:57:
                    e9:c4:a7:27:9d:a7:a1:89:8b:25:ef:a0:ae:03:e0:
                    f9:5e:81:1f:fb:44:e3:b2:bd:16:be:83:e1:b4:b9:
                    d6:67:fc:0b:95:d4:c6:98:2a:39:59:c7:fa:27:3b:
                    d7:d6:18:be:24:e3:c6:a3:d9:3c:e0:3d:63:b5:8c:
                    44:fa:02:91:65:7c:37:84:bb:94:c8:85:8d:05:52:
                    7b:67:b8:15:13:65:c8:4b:94:36:96:7d:f2:99:79:
                    e7:36:aa:b9:9a:b0:9d:f8:f7:06:43:c4:eb:2c:1a:
                    50:21:aa:64:f7:4a:26:df:a7:4f:8f:bb:32:2c:3b:
                    3e:fb:c2:f7:cd:33:8d:64:a2:79:18:6c:86:f2:e0:
                    43:fc:fe:02:98:1f:df:28:b4:c6:90:57:4d:2b:f2:
                    33:f7:ab:b9:2d:0d:0c:31:fd:b5:94:ea:4c:8b:98:
                    8e:0c:5d:86:a0:f3:61:67:f8:d6:62:84:af:de:45:
                    a3:96:a4:37:ea:9b:00:86:5c:3e:85:7c:73:94:46:
                    94:84:e7:4b:8d:ae:4a:99:12:16:46:c8:d3:1b:9e:
                    41:ce:79:e4:e3:bf:75:2c:0e:1c:7c:6b:de:fe:79:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:88:7E:65:86:62:2C:91:44:A2:84:52:E0:00:80:95:79:91:0D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:71:55:97:f4:0b:b1:82:fa:ab:b3:2d:85:51:4c:e1:ca:e6:
         3d:56:02:00:85:4f:8b:7a:e7:a8:55:5b:92:d1:46:40:f3:e9:
         b9:27:17:d7:8a:d7:3a:39:fe:1b:c3:d9:e1:42:c2:5f:27:69:
         a2:46:2e:2a:9a:58:ea:52:eb:9e:55:69:b9:e1:15:5c:6a:96:
         fe:fa:ed:ed:60:c5:1d:59:2c:58:af:f4:bf:2c:a5:81:ca:38:
         d6:c8:cb:84:6f:8b:46:dd:19:47:99:d3:61:9c:28:4a:6b:cb:
         64:20:28:32:52:2b:e9:89:b7:97:51:f4:85:91:7b:72:6d:b9:
         40:ae:b3:bc:7f:96:24:ae:ed:a8:80:bf:18:80:9a:1b:9d:a3:
         69:14:bf:ff:da:ac:2a:03:d7:88:37:25:56:7c:0f:52:7b:f4:
         36:3f:fc:f0:f8:60:d6:39:21:25:c0:6b:d2:2f:18:7b:11:cf:
         25:f0:1e:64:a8:8d:e0:f1:60:71:6b:c4:78:c3:ca:47:3e:ee:
         61:d7:91:f3:af:01:10:03:13:d0:0a:ac:76:d1:74:58:97:34:
         70:5c:8f:e6:0a:ab:06:00:f7:ce:82:49:da:96:e0:4f:b6:1a:
         35:50:57:1a:73:5d:ff:c5:2f:ce:14:b5:6d:80:b8:bf:36:c8:
         4d:7c:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:43 2025 by rpki-client