Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa
File:                     bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa (raw, json)
Hash identifier:          2voNLYlHClQ5xzeIeOX4+2+y2uebOZHb0tJDjyAFdYc=
Subject key identifier:   79:D1:37:EC:BC:1D:DC:FD:E2:EE:58:6F:01:4E:EB:38:98:DD:13:AA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848E2E49C461147A5DF8C00D280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa
Signing time:             Sat 15 Feb 2025 02:40:12 +0000
ROA not before:           Sat 15 Feb 2025 02:40:12 +0000
ROA not after:            Fri 16 May 2025 01:40:12 +0000
asID:                     202045
IP address blocks:        142.250.83.144/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:e4:9c:46:11:47:a5:df:8c:00:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 15 02:40:12 2025 GMT
            Not After : May 16 01:40:12 2025 GMT
        Subject: CN=25011f81-3e98-4d58-894f-eabee6d866c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:88:63:1f:6a:99:8f:61:b5:19:9a:a0:aa:
                    2c:0a:63:68:50:15:21:34:4a:a0:2f:d8:99:5d:f0:
                    0e:72:44:3f:b3:f4:55:8b:40:ef:5b:4a:d1:e1:50:
                    e9:4a:0d:2b:cd:56:bb:50:a4:18:a5:2a:72:a1:c4:
                    04:b9:b1:25:80:45:3c:a5:83:cf:15:a8:68:a1:d7:
                    53:0b:44:97:a3:44:60:49:0f:b9:74:6d:7d:e3:3d:
                    3d:76:8d:ef:53:91:b9:03:1e:ee:d7:fd:9c:45:c7:
                    d6:76:59:cd:cb:19:07:12:82:33:94:a8:38:43:b9:
                    91:ac:64:7d:63:0a:44:bc:ba:e7:71:fe:84:56:d5:
                    2f:b5:12:74:2b:dc:c1:1c:0d:6a:8e:36:bf:a8:42:
                    f0:fb:36:89:17:4b:6f:cd:2e:a1:33:1d:06:15:6b:
                    96:f5:c3:73:0e:07:72:b1:d1:e3:62:30:67:e7:ef:
                    d2:e3:a6:c8:21:bc:5f:ea:21:9f:e2:43:d4:61:09:
                    5c:d4:ae:8c:59:6a:8a:cc:2f:88:ed:9f:57:bb:59:
                    79:d0:84:f8:24:4b:f7:ca:09:e1:46:9c:f9:98:c6:
                    ad:77:b9:1a:a4:09:11:24:cd:0a:96:fd:56:f1:cd:
                    a6:9e:6e:be:a3:55:ed:a8:dd:93:b9:e4:27:bf:54:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D1:37:EC:BC:1D:DC:FD:E2:EE:58:6F:01:4E:EB:38:98:DD:13:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bb8a375f-c98e-3206-9287-87f52cf0f1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.83.144/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:ca:8a:74:b6:d8:9f:f6:1e:91:6a:b5:79:f5:1d:03:e4:
         87:7a:b1:dd:52:91:a4:0e:fc:f0:41:b6:d8:40:97:0f:45:8a:
         50:44:40:a3:50:22:53:eb:39:c9:af:8f:6a:27:f1:d4:0b:3a:
         74:5c:5f:f0:d9:6f:2a:a9:de:1b:49:cc:a5:96:7a:72:d4:63:
         4e:ff:56:4a:0f:4e:71:cf:e7:af:89:df:d3:a3:df:6e:e9:82:
         af:26:8f:7c:bb:86:d9:1d:2f:cc:16:69:a0:33:12:38:74:3a:
         66:9d:ac:fe:59:52:a3:60:c2:c3:a2:2d:25:6b:c1:bc:ab:89:
         cd:8e:50:17:cd:95:7c:72:2f:12:e2:49:7b:1f:33:19:86:49:
         92:4b:f9:e6:64:c0:04:75:2e:9a:47:57:46:34:a1:df:6b:90:
         e1:f1:f3:df:df:7c:a8:33:b8:bd:7a:35:07:8b:60:52:e6:0b:
         76:50:bb:62:37:7c:da:5b:29:8c:a2:20:28:ef:a7:e0:ef:49:
         71:6a:32:f7:5b:53:e5:a4:84:f6:a6:db:cf:25:e1:53:2b:9c:
         7c:ce:2f:13:4c:2f:10:17:6a:14:2b:98:ea:de:7f:ed:28:cc:
         66:b8:41:26:47:22:78:20:4b:60:64:10:43:fa:bc:45:c5:e2:
         7e:14:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:06:03 2025 by rpki-client