Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa
File:                     411f3d4b-7409-3c60-9628-71e475898228.roa (raw, json)
Hash identifier:          Fb0Q5sMP2VFsmeuBu/rHa3rArBUZybWIgJfK1isutjI=
Subject key identifier:   60:35:59:37:67:6B:6D:BA:89:E4:6C:BA:F4:85:94:63:C5:8D:2E:EE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE29DC7E8454BEBC381080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.251.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:29:dc:7e:84:54:be:bc:38:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7c2b7549-ceb6-42ff-9c54-45b83d958513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:49:66:a1:6d:8d:65:92:95:4a:44:67:71:
                    d4:d5:79:4e:3b:3c:44:35:66:f0:a6:63:2f:38:7c:
                    9d:4f:a7:e7:ea:a3:e6:f8:6f:26:05:e6:67:33:c2:
                    b7:71:a8:cb:e4:18:ee:22:34:a5:88:5e:eb:4a:7e:
                    b6:1f:5c:c6:6f:fe:ea:3a:15:71:3b:b0:11:a3:77:
                    8b:d8:78:98:a3:7d:4a:3a:77:84:16:f6:aa:8d:8b:
                    9f:c2:46:59:30:69:32:8f:3b:7e:6d:ef:a4:89:2b:
                    9f:74:64:9b:ef:e8:d2:19:f0:ac:77:98:f5:e5:4f:
                    58:6c:b4:30:a0:50:15:78:f9:a8:2c:e0:ab:83:14:
                    e1:76:b8:3e:dd:08:fd:6e:4a:64:e7:1d:53:30:25:
                    6e:26:2c:40:24:e4:b4:e6:56:f7:da:0e:0f:d0:e2:
                    55:ff:e4:f5:bc:48:c6:03:d3:62:8f:29:a6:f0:b3:
                    52:9b:de:98:a4:58:8c:da:d9:11:d5:5c:0f:58:76:
                    58:e2:e5:d1:39:b2:be:37:4e:9e:57:b4:58:70:af:
                    53:b1:7a:06:ea:f5:7b:f2:16:6b:a6:f5:1f:44:62:
                    34:ac:e7:06:be:94:44:ed:b4:ce:53:fd:f1:b6:c9:
                    f6:da:87:c9:ce:c9:dd:9d:8e:f9:24:13:6d:19:ee:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:59:37:67:6B:6D:BA:89:E4:6C:BA:F4:85:94:63:C5:8D:2E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:17:c7:53:34:b3:b1:4a:72:69:7b:3e:bb:a1:ae:87:fe:
         91:72:43:65:79:d7:ac:f8:ad:a7:f8:47:ac:5f:a7:3c:b5:ce:
         cc:f5:c1:65:8b:52:97:99:dc:13:89:91:af:13:0e:f3:b7:15:
         a5:4e:b2:d3:c0:07:12:d1:08:d4:c0:f3:d2:2d:05:31:ec:d6:
         07:1c:83:92:4c:ff:ed:c0:67:68:31:ba:22:36:92:72:9d:06:
         51:67:c2:91:e5:25:a7:72:32:12:f1:a4:7b:86:fd:d2:de:d5:
         0c:eb:3e:5f:39:22:6f:26:07:08:4c:74:64:0e:3e:08:62:60:
         76:76:b5:42:51:af:e0:7b:b9:bc:9b:0a:5b:54:43:ff:26:6f:
         17:08:f6:6b:e5:16:51:01:bc:3c:26:f3:18:7e:6d:98:8e:dd:
         ff:cf:96:3e:88:c2:5b:dc:a6:72:57:7b:3d:ac:8b:4d:05:83:
         a1:53:52:d3:a1:72:b4:69:42:0e:58:ca:d1:1c:c2:f1:c4:dd:
         e5:93:ad:90:a7:ac:28:89:30:e1:72:1b:a8:12:da:af:49:05:
         0a:39:fe:53:26:a5:36:05:08:56:cb:ce:0c:07:95:47:45:2b:
         0b:54:9f:a6:62:36:33:a1:09:13:2e:56:21:71:95:57:ea:6a:
         78:63:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:45:01 2025 by rpki-client