Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/700a06c5-ff0c-3626-bed5-e396186c9469.roa
File:                     700a06c5-ff0c-3626-bed5-e396186c9469.roa (raw, json)
Hash identifier:          uy0r36TRHUV+w+1wcuBj9LSy0Lysn1qBv32v5bIuRDQ=
Subject key identifier:   C5:AC:5A:DB:05:C9:9C:35:C8:D8:AC:C9:8F:2E:D7:67:46:DF:4B:92
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B2331927F731DCB1E01066D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/700a06c5-ff0c-3626-bed5-e396186c9469.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        192.178.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:92:7f:73:1d:cb:1e:01:06:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=4f2b69f0-3463-4eed-8eaa-61a9bb6b3529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:e2:ab:6a:d1:87:d4:c3:d5:34:32:52:40:
                    84:3d:e8:e6:f3:c7:e9:0f:58:0d:39:2c:5c:3c:84:
                    a2:bd:27:fa:83:54:06:bf:3d:27:ac:fe:7e:90:a8:
                    25:ef:27:bf:66:d7:a9:ad:ae:c3:95:fb:88:09:8e:
                    04:8b:0a:c4:e0:f0:9a:c2:09:3a:d7:52:bd:36:39:
                    f2:1d:26:41:4a:c0:06:33:f2:39:37:bc:81:1a:da:
                    cf:e2:f7:e3:03:17:cb:07:91:9e:af:9c:cf:1f:0a:
                    24:7b:cc:35:7c:47:8e:b1:14:05:c9:d2:52:66:d6:
                    12:06:ec:92:60:3a:ba:f8:19:aa:a2:01:2d:90:79:
                    fd:6d:23:1d:4f:a0:3d:63:b5:d3:28:bb:7c:9d:0e:
                    99:68:79:ad:44:3f:65:5f:de:f3:a5:a7:05:18:9a:
                    c9:c9:5b:e9:d7:b0:80:12:24:b0:f0:45:e8:8a:bc:
                    d1:d3:47:28:ae:f8:fd:f9:f2:eb:1f:c2:9f:c6:e2:
                    eb:ff:5f:72:f2:6d:28:e8:5b:bf:5e:21:32:1c:00:
                    66:ec:e8:44:45:59:e4:ee:8a:b6:22:03:62:fd:9e:
                    99:64:65:18:82:17:2f:c4:0d:89:45:0d:4a:11:73:
                    03:50:cc:eb:ee:b4:b8:56:c4:0b:10:bf:95:b9:8a:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:5A:DB:05:C9:9C:35:C8:D8:AC:C9:8F:2E:D7:67:46:DF:4B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/700a06c5-ff0c-3626-bed5-e396186c9469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:40:e8:17:44:95:d5:ac:42:54:b3:11:ce:72:77:de:77:25:
         8c:11:59:71:e6:a7:d3:24:d1:88:97:89:3a:2f:9b:a0:2c:55:
         22:ca:52:bf:8e:f5:11:03:1e:83:49:25:32:a1:ad:e3:d2:1e:
         01:fc:a2:19:fb:6c:f7:8a:7e:a1:f8:d9:66:15:1f:06:0b:0b:
         f3:32:a5:35:8e:55:f8:0d:55:4d:b5:19:a4:20:2a:67:1b:26:
         3d:d2:35:98:44:9d:ba:70:69:34:ec:a9:4b:be:0a:ce:0f:fe:
         85:bf:db:2f:6b:56:bf:ad:ba:ec:fa:15:1f:e2:dc:35:eb:a1:
         b4:d6:71:b0:e9:cf:a2:da:3f:38:42:ff:9f:be:39:e1:f0:dc:
         39:95:b1:c9:ac:9a:f1:a9:15:af:26:c4:85:b0:f8:c4:eb:63:
         87:22:54:3f:e8:7f:63:17:d5:bd:e2:1d:5e:f9:c7:45:d4:88:
         c4:1a:f7:71:3b:67:02:17:60:b6:71:34:00:1e:96:82:c0:cd:
         75:2a:2f:89:0b:57:29:83:08:6c:64:e1:fe:d5:31:2b:bc:2c:
         28:93:a9:fc:1b:19:08:9f:88:f1:c2:e6:85:3a:c8:41:67:38:
         f7:7f:5b:51:5f:68:5b:59:7d:b8:30:e2:27:93:f7:ce:d4:a2:
         be:e6:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:44:58 2025 by rpki-client