Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ab39a32-1f83-35fe-927b-221a8ed7c397.roa
File:                     7ab39a32-1f83-35fe-927b-221a8ed7c397.roa (raw, json)
Hash identifier:          6CBWu27rjb+mMEeAHqQxr0OXuEJFhUcFYY/vrfYesno=
Subject key identifier:   0E:FB:9C:23:50:B4:30:18:2D:97:F4:2A:DA:DE:01:16:C1:A5:C9:FA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE2978B6CE0DB4E93FCA85
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ab39a32-1f83-35fe-927b-221a8ed7c397.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.251.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:29:78:b6:ce:0d:b4:e9:3f:ca:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c4d72e42-de9f-4dda-9276-0ae7c64c0138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:42:4b:a9:10:27:72:6d:69:ec:f7:39:a9:
                    1a:a3:9c:9c:bd:b4:d3:76:57:57:af:3e:b5:56:a3:
                    a1:28:3d:53:68:40:74:b9:8a:fd:af:02:7a:f4:dc:
                    03:81:6a:7a:e8:1c:79:d9:86:4b:16:d7:3a:42:0d:
                    1e:77:fb:b2:a1:cb:fd:ae:46:6a:8d:14:08:0b:e6:
                    8a:45:f8:5b:56:99:5c:d4:6a:b8:af:58:e6:cf:1b:
                    73:a1:2d:96:3a:df:82:81:31:a6:db:4d:0a:7a:48:
                    a5:79:25:f5:71:c4:bd:4e:04:34:1b:da:59:65:4d:
                    91:60:bc:f5:5d:f3:26:38:ac:d9:b0:96:5a:62:b0:
                    14:a1:6d:de:87:f6:d8:db:ef:11:f6:5b:44:71:ae:
                    6a:eb:da:14:d3:76:e7:04:08:0e:f8:cf:be:b4:34:
                    93:e9:ca:55:c3:af:e9:3e:f3:6b:84:1e:e7:e0:9b:
                    d6:db:bc:1d:dd:91:1a:c7:8b:95:ad:ae:83:9b:22:
                    35:a9:d0:72:be:7d:cb:1d:d2:7b:74:4e:2a:4d:d4:
                    0b:49:62:eb:38:0d:e3:3f:cf:2d:f7:0c:31:04:0e:
                    ba:7b:d3:f8:ae:a6:66:52:6e:f8:03:11:42:9b:28:
                    62:2f:61:ba:7d:1c:e6:eb:72:46:aa:d7:12:0b:32:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FB:9C:23:50:B4:30:18:2D:97:F4:2A:DA:DE:01:16:C1:A5:C9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ab39a32-1f83-35fe-927b-221a8ed7c397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0b:e5:49:e9:82:15:d0:0b:0a:59:92:e5:80:f3:aa:3d:55:
         6b:6a:f0:1d:0d:df:7f:58:ad:5a:b1:75:0d:48:a1:9b:84:a3:
         5a:89:75:4a:35:54:71:d7:13:91:37:cd:74:8b:d0:a1:a9:8b:
         00:92:1a:d7:68:d9:89:55:5a:11:cc:5d:9e:a7:71:a7:72:53:
         c0:14:1d:4d:66:d5:08:40:5a:2c:25:5a:62:f6:fd:db:8b:79:
         0e:e9:cf:71:2b:6c:eb:de:5a:63:e5:d6:b7:bc:11:97:09:c0:
         f0:52:6b:7e:3f:07:8f:b3:00:dc:6b:7a:2a:cb:ea:fe:04:16:
         f4:33:4d:6e:62:82:6a:8e:7e:04:b1:65:12:29:50:82:42:5e:
         5b:81:4a:a5:c4:ce:26:6e:0d:4f:97:77:ac:bc:45:43:c7:ed:
         4d:dd:ff:ee:f2:f0:40:b4:57:71:1b:2c:4b:1b:18:f0:d5:18:
         df:c1:19:84:61:9e:4f:6a:a0:b0:b6:68:92:8c:db:a5:9b:e1:
         8f:15:8c:f3:40:16:0a:de:dc:ca:9f:cb:87:67:55:82:4b:b3:
         0c:5c:f1:01:1e:ca:a4:8d:18:1c:05:f7:f2:f5:b3:0e:cb:6a:
         d9:14:bb:d9:44:b4:91:3c:da:91:09:b6:74:8e:b9:5b:c9:47:
         dc:d5:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:45:02 2025 by rpki-client