Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa
File:                     75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa (raw, json)
Hash identifier:          ciEJ6mcKK8KPbnquj1hUzJyZiVUhOo+zk28rCQkbz5A=
Subject key identifier:   53:79:7C:6F:E6:E7:8C:69:96:36:71:03:D0:37:61:7B:46:3E:C7:C1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD660C667939B0856080C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.250.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:66:0c:66:79:39:b0:85:60:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8ed96d73-f690-437b-a57b-52af74cee9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:6e:16:0d:1c:15:d2:a1:2b:23:56:e5:a9:
                    b2:de:64:a7:4c:d2:25:ad:cf:ec:84:ad:8f:66:f7:
                    6d:f9:76:f5:87:1d:6e:83:31:5d:80:bc:87:52:eb:
                    04:d7:3f:2b:c2:cd:25:10:e2:cd:4a:70:1d:98:d2:
                    0a:89:85:70:b5:0a:c8:ec:66:55:25:02:93:7a:77:
                    5e:06:6b:07:48:6d:18:49:0f:7d:b2:34:fa:b0:a0:
                    14:b8:61:67:62:87:fc:29:e7:b6:70:85:c8:87:1f:
                    b7:08:73:b3:36:af:a0:03:86:7d:30:6d:26:a8:05:
                    08:ff:28:17:a1:1a:c3:a3:bc:32:89:91:6f:b8:6e:
                    40:26:20:e8:7c:0b:b4:f3:5f:42:4d:e6:54:bb:f3:
                    1e:af:16:58:65:88:fe:7a:32:83:37:0d:e6:b0:d4:
                    cf:c9:40:cc:a8:57:cc:27:a7:43:bb:2e:f5:57:5e:
                    09:15:3e:00:f6:fc:2a:c4:58:92:81:b7:65:06:0b:
                    a3:99:e1:4e:07:1b:fa:3e:f9:3a:93:c5:62:74:54:
                    7d:3f:4f:2f:74:25:99:cb:66:ab:70:96:ba:34:e8:
                    fe:d3:fa:80:9b:b6:66:e9:89:bf:d0:f9:bd:16:ca:
                    ef:12:a0:57:aa:8d:3f:7f:b1:03:90:78:39:90:55:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:79:7C:6F:E6:E7:8C:69:96:36:71:03:D0:37:61:7B:46:3E:C7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:f4:8e:60:c8:4f:e1:e2:f3:c4:47:15:35:0c:86:fa:a3:
         5c:21:bc:79:36:85:13:05:d9:ea:cc:e5:19:52:b3:6e:49:90:
         39:f4:ee:02:fe:cf:24:20:39:dc:37:18:e5:6c:ae:1a:86:0e:
         18:f6:da:fc:41:00:e6:4e:97:88:d7:6e:a7:9f:56:24:da:77:
         44:ab:47:88:cb:ff:27:27:24:39:9a:8d:24:9d:92:0d:f7:56:
         f1:39:3c:6d:5b:6f:87:34:2f:c6:29:0f:8a:e3:93:eb:d4:a0:
         65:d7:d6:40:6c:31:4e:f4:c0:5a:af:9c:4e:b3:25:c4:f7:5e:
         38:36:4c:8c:00:06:de:da:60:69:49:ab:c4:37:1c:cd:10:db:
         02:57:a1:bc:8b:2f:9b:6d:d7:15:ad:a0:69:8d:e7:ce:cc:73:
         8e:c9:b3:c6:c8:76:ee:55:4c:d5:6a:eb:29:9f:dc:45:db:30:
         ee:71:83:7f:24:c7:ad:8b:fc:fa:b7:9c:c2:46:32:48:c8:20:
         05:00:de:82:dc:6d:a4:ef:43:ac:72:a3:9e:3d:6c:48:c8:8b:
         1b:39:a1:69:51:26:6d:8e:d0:44:62:d5:98:bb:ae:d2:9a:d5:
         56:2c:a4:da:ee:c1:70:5e:35:b3:0f:93:14:b1:8b:8e:d9:dd:
         88:db:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:04 2025 by rpki-client