Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac19a71a-232e-35c1-808c-7efad58fe8a5.roa
File:                     ac19a71a-232e-35c1-808c-7efad58fe8a5.roa (raw, json)
Hash identifier:          hdNEgP3+Iljl0QTF9ZyChiOwcyRY3abYhFoBnjtrscI=
Subject key identifier:   9E:DB:BE:7D:47:49:C4:2A:8F:5B:B9:DF:E9:08:C4:99:66:A8:23:2A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE2FF5BC81157F26230AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac19a71a-232e-35c1-808c-7efad58fe8a5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.250.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2f:f5:bc:81:15:7f:26:23:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=28ef5886-94a0-4b45-968b-68156ac47178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:9b:78:8b:d3:23:32:86:c7:70:d2:65:af:
                    a7:56:7a:8e:81:fa:5c:68:f2:32:37:0d:a8:96:78:
                    97:89:82:94:68:2e:d2:96:1c:17:3f:61:dd:b8:1d:
                    e4:f9:c6:a9:58:df:78:69:35:8f:09:26:06:85:02:
                    e7:88:e7:a8:a2:a2:ea:d9:59:0e:95:0e:8d:ad:53:
                    2c:30:92:72:d0:b4:5c:04:ae:ac:de:ba:b7:86:39:
                    3f:b6:8f:66:6f:e6:3e:c6:e5:b8:74:be:65:d2:c0:
                    a1:9d:39:9d:b9:f7:5c:bb:46:48:2b:68:08:7c:6d:
                    8c:c4:74:f2:81:a5:21:49:3d:43:78:f6:2a:61:4a:
                    e2:09:f1:c5:bf:db:25:af:87:6b:9d:59:0f:3a:2f:
                    3b:01:9e:0d:95:58:a5:e3:8a:e0:aa:e7:33:bb:79:
                    83:98:5d:ec:d9:f4:36:f1:e3:f9:f2:04:c6:60:c1:
                    28:a5:ed:75:b5:ae:4b:d0:9c:24:a7:35:93:73:93:
                    ee:60:72:05:c1:35:4f:e6:11:f2:1e:6f:34:29:ca:
                    9c:8f:27:6a:09:17:be:63:a2:ee:3f:6e:12:1a:09:
                    a3:5b:e8:13:47:b4:dc:9b:10:ea:c5:44:ee:f0:e8:
                    dd:5a:14:95:b1:8c:e1:eb:78:4b:7c:35:72:ad:22:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:BE:7D:47:49:C4:2A:8F:5B:B9:DF:E9:08:C4:99:66:A8:23:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac19a71a-232e-35c1-808c-7efad58fe8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:0d:64:a3:e6:cc:ee:61:25:6e:ee:cd:2b:16:b2:84:f2:
         62:04:31:dc:95:6a:8c:42:fe:a3:28:0c:25:21:b2:96:56:7f:
         a4:cf:75:9b:27:8a:8e:62:70:cf:1c:dc:2b:b9:33:c6:06:3c:
         46:1c:1a:85:fe:dd:fe:15:11:a6:09:5e:5f:06:0d:99:d4:7d:
         21:46:4f:5a:1b:45:0f:81:7e:e2:d6:7a:db:2a:96:66:9d:1a:
         43:e4:91:cb:3f:28:10:56:6d:3f:e7:b7:72:24:33:6f:4d:7e:
         bb:72:dc:15:0a:05:03:af:31:33:ac:51:3f:6c:3c:3c:e5:f5:
         41:cc:2b:15:0f:54:44:af:5c:ec:a5:46:f7:5e:4d:1a:40:88:
         76:e7:57:0d:8e:d4:8f:f0:40:6b:10:bd:36:51:ec:33:ee:e9:
         9c:ae:0d:80:11:47:7a:61:ef:cd:f9:f0:b7:e5:4f:5b:5e:39:
         47:43:cc:9e:8e:20:aa:c8:74:0b:58:32:69:3b:1e:e2:2d:d1:
         5c:b0:a0:1b:ae:30:6b:fa:e0:35:cf:96:56:d8:90:c3:62:9d:
         3a:37:86:f7:e3:22:5a:e4:76:6f:38:23:41:70:2e:11:b9:71:
         bc:36:03:d8:4d:b5:fd:55:70:ba:80:7a:bc:da:0c:0d:1b:e3:
         78:3b:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:30 2025 by rpki-client