Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff7c924f-9940-3ec1-883d-60faea26fbca.roa
File:                     ff7c924f-9940-3ec1-883d-60faea26fbca.roa (raw, json)
Hash identifier:          FmsArvTS5WPsom9JG52m+g+vj5q6OCCk2WinTb4OHus=
Subject key identifier:   61:0C:A2:9E:88:3D:2E:83:2F:0B:33:D4:24:28:F3:24:B2:9D:93:62
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584AA2C644718F7736C7C1F8B540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff7c924f-9940-3ec1-883d-60faea26fbca.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     200238
IP address blocks:        142.250.83.136/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:44:71:8f:77:36:c7:c1:f8:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=173a3a0e-f4c4-4ec7-a650-9dfcd25140d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:05:a6:c3:2a:45:8b:f0:a5:11:49:0f:e7:
                    d4:06:9d:62:8a:cd:bb:25:d6:81:c2:f3:e8:66:80:
                    2c:80:71:c4:66:bb:e2:20:1d:aa:09:92:19:75:c4:
                    26:9c:2e:70:81:d2:d9:45:c6:0e:ed:8a:3b:c7:5b:
                    8e:69:23:8f:cc:89:6b:ac:d2:db:c6:71:69:52:5f:
                    59:13:df:f6:47:b1:06:bb:16:2d:8e:a6:db:81:fb:
                    cc:ec:61:2a:68:c2:71:9a:ef:f3:ea:8c:e5:2d:e3:
                    65:ef:ef:4a:e0:ab:fd:46:87:01:38:20:82:0f:03:
                    e8:b1:41:66:af:f6:e9:13:bc:3c:b0:0e:13:e7:a5:
                    03:44:ac:96:9e:16:33:72:e5:10:a2:28:28:89:fe:
                    18:fa:ec:9a:8c:d0:3d:4a:2c:76:9b:12:1d:94:ff:
                    fa:0d:20:d6:ac:f9:d2:d3:24:7a:b2:63:cc:4f:03:
                    55:16:5e:d7:f2:6b:b7:fd:c8:61:70:6d:17:2c:b7:
                    13:63:b1:3b:b0:98:f2:c4:16:ac:87:82:d3:b5:96:
                    fb:25:4a:52:9f:e9:6c:63:76:78:ee:ff:9e:f1:6b:
                    2e:5b:50:07:9a:02:9f:49:a5:2f:5d:10:2b:b4:8c:
                    37:bf:2b:95:74:d4:c1:c8:c0:02:94:52:d1:2e:d6:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0C:A2:9E:88:3D:2E:83:2F:0B:33:D4:24:28:F3:24:B2:9D:93:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff7c924f-9940-3ec1-883d-60faea26fbca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.83.136/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:7d:02:5e:89:2d:92:30:f2:40:16:32:09:ab:54:a2:73:
         70:8c:d4:bd:bd:2c:0e:be:ac:28:08:0f:cd:65:0c:aa:64:a3:
         c5:9d:1b:19:a7:6d:2e:23:60:17:e2:b8:17:6b:5c:4a:49:33:
         f2:10:e1:f6:7a:f7:c1:35:2d:05:a2:1e:59:b9:0c:54:c8:85:
         50:8c:44:5b:22:90:f5:ab:24:50:2d:b3:2f:12:7e:ae:1e:62:
         af:54:2a:fe:4c:f4:b3:f5:79:42:94:22:48:44:bb:17:83:1c:
         8a:4c:44:45:2b:c7:9d:6a:a2:74:e5:ac:46:72:0c:2f:c3:60:
         9e:33:2e:3c:af:6c:2b:19:5e:f9:6d:8a:4f:bb:99:b2:ca:31:
         bd:53:93:8c:e5:4f:ec:be:82:79:a5:29:84:91:a9:d8:99:46:
         3b:b0:92:dc:38:0a:6a:dc:83:92:76:63:59:be:cc:fb:0f:11:
         54:c5:a1:0e:0f:f4:5c:96:a5:9a:99:18:c0:3f:e4:3e:90:67:
         79:c3:ff:dc:d3:b3:12:bb:4e:0b:90:b4:56:99:25:f3:0b:9b:
         4b:d4:f1:b8:60:eb:77:e7:9e:d9:69:1c:ed:f9:96:9f:39:e7:
         7e:23:bf:cd:42:1b:ef:05:99:e8:69:d7:9b:e4:95:58:c0:5c:
         ce:d9:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:18 2025 by rpki-client