Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa
File:                     21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa (raw, json)
Hash identifier:          25bbwkTQ+zqiFtNiKy7Sy5IIzudNDd2C8WRCsKh1TTs=
Subject key identifier:   ED:99:56:59:01:48:EA:D0:44:3C:30:35:56:71:47:5F:6E:15:51:3B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE1ACB74C417364DD34B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.250.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1a:cb:74:c4:17:36:4d:d3:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=579703fb-1718-4da3-bb74-adf9ee0a9d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:2c:3a:35:f7:89:c9:35:e3:82:cb:80:6c:
                    5c:53:4f:c0:6f:3c:d8:38:2c:e5:a3:84:70:e6:3d:
                    e7:68:16:7f:e9:7b:bc:21:e9:3b:72:ce:b9:8a:75:
                    cb:9f:06:64:9a:2e:25:b6:98:14:2f:4e:0e:db:d8:
                    6c:7a:31:00:3f:1b:b8:c6:9b:60:69:9d:4a:a8:07:
                    f4:ff:a9:63:63:bf:6a:68:34:f5:8d:2d:83:99:38:
                    0b:fe:fe:1f:c8:6c:70:ff:2f:22:27:eb:40:bd:5a:
                    ef:20:49:3c:e7:05:74:cd:da:e0:ff:30:4f:6d:9d:
                    f0:d6:cb:67:f7:c8:c2:00:dd:ab:cc:6a:d1:95:66:
                    f7:36:a7:af:5b:06:2f:f3:79:1c:08:1b:4f:3f:f5:
                    0c:f4:e7:bc:d8:f2:42:c0:fd:90:81:7a:59:72:9a:
                    53:f5:85:c5:28:8e:13:64:5f:8f:e9:b0:65:56:7c:
                    65:53:d9:11:ea:4a:fe:2c:5b:52:60:46:48:90:8a:
                    38:12:de:70:87:d1:f0:00:dd:df:36:c7:53:e9:20:
                    bf:30:d2:5b:76:09:0c:43:36:6e:f0:7c:86:9b:e8:
                    35:fb:67:f4:e3:41:1d:1e:f2:c7:cf:5e:d9:55:e7:
                    da:51:9a:b0:eb:ac:76:e0:53:04:27:4a:d1:93:f2:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:56:59:01:48:EA:D0:44:3C:30:35:56:71:47:5F:6E:15:51:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21fb089b-7a3f-3833-9fd1-3e05fc9ebe04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:9e:5b:79:10:c6:ab:d3:f8:f1:90:65:b1:35:10:81:63:45:
         a3:ca:da:a0:e2:83:ad:3b:74:23:10:22:54:7d:6d:7a:55:37:
         53:18:a3:f2:3f:e8:47:39:9f:ab:e3:85:24:19:60:90:7f:d2:
         04:a7:f9:d3:9d:34:dd:1b:a3:da:28:55:c4:5d:ae:f2:31:81:
         07:4e:f7:c0:e1:90:39:59:84:f5:47:bc:41:bd:67:b8:21:9f:
         87:51:23:6b:75:c9:26:03:a6:30:25:32:13:8c:8a:cc:69:c4:
         22:52:3e:db:52:f3:2d:37:1a:f6:da:3f:18:92:ba:3d:ec:f9:
         73:fb:aa:cb:0e:cb:b9:6a:f7:93:17:67:7e:74:cb:c2:8b:ba:
         92:80:09:d8:a7:3e:a4:32:e1:bd:05:95:c2:75:12:86:97:a5:
         77:67:aa:ad:81:b3:9e:e7:62:c1:09:3c:28:cd:46:59:70:9f:
         bd:57:df:47:b9:26:4c:24:c6:6e:37:ec:5f:09:e8:8d:d8:88:
         74:ae:45:39:1a:67:83:f0:35:70:23:07:df:cd:d6:75:29:00:
         e9:82:3f:4c:03:02:36:cb:6f:03:12:91:c2:c8:f5:bd:e7:41:
         83:1f:16:85:99:46:7e:27:66:0b:46:59:7c:f7:5c:8b:9a:de:
         35:41:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:47:46 2025 by rpki-client