Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa
File:                     24fc593f-28c5-33af-af65-2fe568cc470f.roa (raw, json)
Hash identifier:          +vewUlDs7NWzzLhvzDXiL5RkuEXRC+tPQr0Xt5tZsM8=
Subject key identifier:   55:17:4A:63:46:65:10:F8:02:1C:8A:39:2E:20:8A:1C:7D:5B:20:0F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B69DF623D7EEA3BE999F13340
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa
Signing time:             Sat 04 Oct 2025 20:37:40 +0000
ROA not before:           Sat 04 Oct 2025 20:37:40 +0000
ROA not after:            Fri 02 Jan 2026 21:37:40 +0000
asID:                     15169
IP address blocks:        142.250.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:69:df:62:3d:7e:ea:3b:e9:99:f1:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 20:37:40 2025 GMT
            Not After : Jan  2 21:37:40 2026 GMT
        Subject: CN=b175f969-a39f-4891-868a-183bb19b166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:66:5e:a2:d6:85:0c:07:4d:5d:9e:02:60:
                    e6:8e:2f:07:08:63:e9:91:61:09:55:0f:f2:67:31:
                    fa:45:e5:07:92:80:47:b6:e1:f5:3f:86:68:c1:94:
                    4b:9a:89:8f:80:96:af:d4:9e:d4:91:8d:d1:59:68:
                    1f:a9:ad:8e:74:ea:6e:93:78:41:2c:87:cf:50:c4:
                    1b:68:53:2b:1b:43:a9:3f:e4:94:94:ce:4b:4c:78:
                    bc:4d:c8:9f:c4:ca:62:56:58:23:ef:82:a1:fb:20:
                    7b:b9:e6:fa:16:25:97:63:44:e8:3a:8e:81:75:31:
                    92:2c:f8:fa:ce:eb:1b:1b:b2:c8:d7:99:c9:a2:8f:
                    16:b9:28:b1:19:91:d3:4d:a3:7d:fb:52:ed:d9:07:
                    2a:a1:94:df:c2:ba:36:ec:49:d6:71:34:80:d4:90:
                    6a:9f:6c:fb:1d:40:b2:97:1e:c8:f1:db:d5:5c:f1:
                    1e:5d:36:a3:ab:e7:d5:da:a5:ca:e6:10:3b:b8:a8:
                    e4:11:64:7a:ef:a9:82:7e:a3:ba:f9:16:6a:15:9b:
                    1a:55:16:9e:51:25:82:20:bd:2a:11:3c:d1:4d:79:
                    b1:73:bd:2e:64:71:8e:63:5a:10:a1:17:6b:3f:c2:
                    11:a9:38:cb:b7:39:f7:47:15:b8:08:86:24:7a:32:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:4A:63:46:65:10:F8:02:1C:8A:39:2E:20:8A:1C:7D:5B:20:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:f1:8f:85:f5:29:c3:23:2d:70:10:4d:2c:b1:6e:f5:c6:
         05:d7:17:dd:1d:48:a2:d3:0e:af:d0:9a:f1:cc:d5:d8:53:64:
         27:45:d7:41:07:57:af:06:e2:31:a2:c3:48:ac:ec:6e:06:73:
         91:7b:f8:0a:f2:15:0b:82:69:a1:c7:2e:d4:7f:a6:40:d5:aa:
         a9:a9:a4:35:1b:a4:ff:08:e9:4f:7c:7c:34:2a:2c:4e:87:19:
         7c:bc:f9:b3:0a:99:01:ee:97:14:80:4f:3b:b7:7a:97:43:96:
         93:fa:02:5d:d2:32:75:6d:98:42:d1:8a:56:7c:b4:70:a1:eb:
         96:00:95:23:d6:5c:21:7b:16:54:2b:dc:d0:47:a6:eb:c2:7f:
         2b:f8:04:f5:55:d0:28:6c:5a:1e:d6:b8:57:a0:7f:db:1d:f6:
         30:4d:ce:d7:d5:e2:a2:cc:32:6e:14:82:80:31:1e:d1:f7:08:
         bb:fc:45:37:d5:46:3c:24:4f:46:df:53:bc:11:f0:a1:93:eb:
         89:99:f3:b0:db:54:52:bf:0f:86:3f:d5:e8:d8:0c:61:ff:0b:
         0f:20:42:25:1a:9a:85:d1:f9:10:1f:90:4b:97:e5:65:36:7a:
         07:c1:fa:da:82:d2:cb:0a:ae:0d:52:29:f3:88:f5:99:d4:8a:
         78:28:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:39:50 2025 by rpki-client