Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa
File:                     5a720a5a-25e3-3747-9676-70856a8a9f69.roa (raw, json)
Hash identifier:          jiI+N42tR+gG0Gg0PVqK6nom7WcWi7dP4jZip1IGbG0=
Subject key identifier:   46:80:29:76:90:80:EA:4C:8C:28:07:3F:13:4D:99:09:E1:60:90:3E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE0F1B0CFA448903B5AC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.251.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0f:1b:0c:fa:44:89:03:b5:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6c53547f-35ae-4330-bff2-a9d6ec3718ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:68:de:0f:88:f1:e8:8d:cc:57:9d:39:fd:
                    30:78:26:45:f7:b1:50:4b:cd:e3:09:43:e8:6b:a7:
                    76:f7:7f:4b:99:75:c0:0b:19:e0:3c:13:07:2b:d7:
                    76:28:ec:67:3c:46:d0:cf:3a:23:8c:23:32:b9:91:
                    e5:14:d2:88:1a:22:16:d3:45:a8:3b:d5:c5:a7:32:
                    c2:10:7a:29:77:98:88:d4:e6:d3:19:f9:52:fb:a2:
                    cd:9d:27:bd:17:54:41:fa:20:1e:29:16:0c:d3:a2:
                    3c:e5:cf:00:10:69:97:6e:8b:c6:04:71:64:9d:13:
                    29:67:0c:0c:04:7e:44:ba:1a:26:df:f8:84:c3:82:
                    74:22:60:f6:73:82:b0:ed:2a:52:69:38:9b:5c:76:
                    01:17:0a:0b:e5:d0:40:05:5f:4c:be:ad:4e:e9:29:
                    6f:31:c0:a7:52:69:6e:4c:a8:22:0b:20:6d:48:33:
                    14:69:2b:47:ad:03:03:35:44:d7:1e:ca:18:e2:36:
                    2b:a7:a2:95:eb:0a:5b:24:7c:a4:f7:a6:30:ef:18:
                    82:44:88:4d:16:e3:05:55:69:fb:01:7b:a7:c8:a7:
                    dc:ca:e8:05:52:64:11:b2:97:cc:2c:7c:43:11:6a:
                    7e:9a:88:be:73:c9:60:8c:75:75:fe:f3:a7:d7:5d:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:29:76:90:80:EA:4C:8C:28:07:3F:13:4D:99:09:E1:60:90:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:bf:41:2c:ff:9c:a9:99:fd:11:ec:f4:45:31:c9:c9:f0:
         17:64:c9:a7:5a:f6:ff:e1:40:0c:4a:5c:aa:c4:bd:4f:54:71:
         d3:9d:2f:5e:4c:94:55:21:7a:4b:c5:93:9f:d0:7a:80:a8:9a:
         13:9e:2a:42:67:24:e9:9d:28:95:51:3d:6a:85:42:0f:3c:95:
         36:d3:0a:72:01:e0:53:ed:46:07:87:9a:89:f5:53:02:3b:9c:
         f0:d0:af:90:8a:e9:b3:98:b2:11:8d:31:e2:27:10:ce:eb:84:
         20:3d:47:ee:54:84:66:41:26:55:ac:0e:76:5e:89:ce:b6:9e:
         86:b5:8b:3b:3a:1e:45:86:c1:62:83:f3:88:49:26:57:1e:09:
         9d:36:35:11:0a:55:e2:f6:ad:30:51:76:06:d2:66:8c:b7:de:
         47:76:63:64:72:fd:8f:cf:a6:a8:2c:87:99:83:69:22:50:b2:
         26:73:98:8f:5a:c2:0f:37:8f:9b:dd:d1:b1:6d:94:de:bc:0c:
         49:f4:02:17:31:9e:46:58:ea:3e:9f:e4:cc:ee:19:de:f1:f7:
         01:af:d9:9c:f9:69:dd:92:f7:7e:04:92:ff:d6:7b:6e:4b:da:
         c7:0c:fc:83:f2:3a:21:90:f3:e2:c2:8c:b3:c6:49:a8:8f:41:
         33:92:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:46:13 2025 by rpki-client