Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa
File:                     9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa (raw, json)
Hash identifier:          ka/9rUB5usO42Wc0dctSlj/q+u8l7nPuyBUdVVyBTkw=
Subject key identifier:   60:46:D2:7A:7E:62:38:8F:89:B4:E3:11:B9:03:12:6C:35:30:78:FE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE1B1F784EE178E8422480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.250.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1b:1f:78:4e:e1:78:e8:42:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b497821f-34d7-4720-bfbe-4cc073a6e9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:1d:de:a4:3b:f1:1f:2a:a3:2b:da:9b:02:
                    65:eb:df:04:dd:4e:8a:04:b6:5b:3f:9e:de:61:9d:
                    ac:20:e2:de:34:dc:ae:d4:59:b2:1c:46:34:fd:b4:
                    21:68:1a:b2:c0:91:e7:9f:2c:34:e8:f1:db:9e:b4:
                    2d:16:41:7d:54:2a:f6:0c:5b:60:b5:28:fe:c3:bf:
                    87:98:f5:a3:01:5c:65:3d:94:ee:68:2f:85:82:83:
                    f4:75:0b:a1:9e:63:0e:aa:d3:f7:56:b4:17:90:08:
                    1a:50:29:0e:4d:8d:34:96:a3:1e:8a:03:f3:a0:20:
                    d5:a4:f4:dc:b0:be:8a:f6:a0:f0:d8:8d:8e:ea:71:
                    54:3c:7a:93:55:51:70:99:cc:02:c6:00:fd:81:bd:
                    48:f3:70:9f:9e:c7:dc:56:10:00:8a:28:9b:81:b6:
                    4e:94:77:ea:94:fb:ea:01:31:24:41:84:ef:2e:aa:
                    db:ef:09:da:01:8e:3b:ae:c9:70:e1:e6:2d:8c:76:
                    73:67:f6:84:2f:96:5e:de:35:3d:02:2d:e5:c2:f9:
                    a2:57:66:e4:02:65:f3:00:8b:ae:6b:12:25:e9:e4:
                    50:7f:fa:98:54:a0:92:90:61:8d:10:5c:aa:37:75:
                    01:86:26:f7:0b:b5:87:3f:54:4e:2a:01:4b:56:02:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:D2:7A:7E:62:38:8F:89:B4:E3:11:B9:03:12:6C:35:30:78:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2e5854-2d01-3b7e-982c-35c6a6bdb327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:12:bd:dc:ac:ad:bf:13:2c:09:69:59:04:c2:86:dc:57:0d:
         be:b2:6a:69:aa:b4:1e:9f:b9:8e:01:c2:87:a4:ea:87:7d:3f:
         91:13:c6:db:47:22:40:5e:86:55:a0:00:23:a9:91:59:a3:3b:
         af:b4:dd:a3:c0:11:1e:ac:ca:54:1a:4f:77:0d:ee:fc:28:63:
         f0:1a:20:3c:66:9a:7e:6f:c9:d4:8c:5f:93:6a:ed:62:28:99:
         ff:ab:27:55:67:a4:7a:de:f0:c2:9f:2e:f5:fb:f5:87:7f:6f:
         95:4d:5c:4b:f2:92:e8:18:8b:c4:16:37:18:d5:e5:40:99:57:
         6a:31:51:68:69:14:b5:8a:55:1a:f1:a4:35:de:a3:bf:d0:0f:
         f8:cf:d2:25:24:14:5a:c0:1b:28:97:74:59:89:be:d0:fb:6f:
         e9:22:8d:0e:dd:9e:96:50:fe:a5:46:a9:1a:eb:e8:fe:7a:cc:
         a8:c2:2e:da:30:a9:02:19:06:20:4c:09:b8:a2:42:df:f6:c9:
         49:8e:6b:52:0b:0d:25:cb:35:62:fc:c7:4c:bc:c7:2a:4b:34:
         de:2c:c8:4e:76:1c:35:b5:06:df:57:82:cc:e7:6f:59:68:bd:
         89:9f:c0:73:bb:c4:71:94:85:11:c3:3c:4e:d4:c9:85:50:02:
         1b:e8:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:47:36 2025 by rpki-client