Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ceef04dc-670a-3c20-9687-c8f48105509c.roa
File:                     ceef04dc-670a-3c20-9687-c8f48105509c.roa (raw, json)
Hash identifier:          BHcz40jE8w5F5gukIcCj137o+LXniLTHomazziGVj3o=
Subject key identifier:   46:95:E7:00:20:6A:83:A6:26:C8:34:7E:1A:19:5E:F8:8C:46:11:61
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B69E11CD4F3FB6948DF314380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ceef04dc-670a-3c20-9687-c8f48105509c.roa
Signing time:             Sat 04 Oct 2025 20:41:09 +0000
ROA not before:           Sat 04 Oct 2025 20:41:09 +0000
ROA not after:            Fri 02 Jan 2026 21:41:09 +0000
asID:                     15169
IP address blocks:        142.250.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:69:e1:1c:d4:f3:fb:69:48:df:31:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 20:41:09 2025 GMT
            Not After : Jan  2 21:41:09 2026 GMT
        Subject: CN=3591615d-3775-4347-8906-3dc9b22afba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:a4:27:e1:c5:c6:27:ef:24:2c:d9:ff:24:
                    28:62:91:51:86:62:a8:b9:dd:03:49:ed:86:20:c7:
                    65:b5:3b:95:76:13:ce:da:04:10:1f:a8:a6:8a:83:
                    43:e8:c0:97:c3:74:81:10:1d:44:93:0b:d0:f1:70:
                    65:8a:e2:8f:f2:8b:aa:aa:1e:35:3f:fb:d0:e8:16:
                    59:21:da:aa:08:5f:58:17:2d:44:65:eb:b9:ce:9b:
                    b1:49:85:a1:90:93:bc:51:25:93:9f:2e:f1:2b:bb:
                    c7:e3:10:46:91:97:e5:3c:9f:c8:f4:53:ec:8d:d1:
                    48:77:b9:57:0a:fd:f2:15:89:52:da:dc:59:5c:98:
                    12:01:f3:5a:3f:92:58:87:97:40:e6:d6:ba:ad:64:
                    65:1c:97:27:c2:c6:9c:f5:11:67:09:18:b5:69:2c:
                    03:08:ea:a6:bb:99:2c:b8:e9:0a:14:0b:1a:17:49:
                    90:f6:2e:cc:5a:92:05:06:fb:c2:13:4e:ed:67:4c:
                    66:84:f2:4a:f8:15:d9:b2:51:f9:8b:42:c6:20:80:
                    6a:d2:e8:63:e9:82:46:d9:6a:ac:2f:7d:e1:34:9f:
                    cb:73:c1:c8:46:40:cd:aa:fe:7a:de:4f:a9:8c:da:
                    74:2c:68:f2:bf:53:00:75:77:60:51:fc:71:64:fc:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:95:E7:00:20:6A:83:A6:26:C8:34:7E:1A:19:5E:F8:8C:46:11:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ceef04dc-670a-3c20-9687-c8f48105509c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:da:a7:84:e6:e8:18:87:18:ec:cf:f8:65:c5:c5:87:fd:26:
         61:c6:e4:7d:ea:bf:69:7a:52:89:df:f9:36:ff:9f:1d:d9:a4:
         f9:a2:3c:76:ae:f7:59:49:61:50:8a:01:5b:bd:aa:07:b2:c1:
         52:a6:97:0e:3f:d9:a8:2c:4a:4b:81:9b:70:83:db:65:18:65:
         55:18:2c:19:c6:62:7d:8c:9f:8a:8e:fc:90:d7:be:a6:6d:79:
         cc:ee:b6:5e:3c:73:1f:7f:32:13:fb:98:5a:a0:40:89:60:1c:
         9c:e8:2b:ae:3f:65:dc:1b:d6:1d:b5:3f:10:f8:ce:64:c4:51:
         94:c0:2f:85:62:32:8f:e6:2d:46:44:8f:33:2c:c0:6c:ae:93:
         f0:ab:bf:ce:8d:2f:91:34:07:58:c3:2d:c6:71:1c:e8:7a:6e:
         bd:5c:cf:e1:f3:91:f5:bd:ab:52:0a:03:0b:fd:f6:98:da:24:
         f9:8c:10:21:26:af:9b:ed:6a:c9:63:ed:12:7c:14:22:c0:b6:
         c5:6e:67:9c:36:00:c3:4f:27:b4:e9:df:34:f7:50:a6:89:79:
         b2:f5:ca:a8:a7:bf:0d:e5:a2:9d:e8:74:0c:c4:65:9e:5a:bf:
         28:35:35:e2:56:16:fc:ca:49:92:59:cf:ff:61:4a:64:17:6a:
         6c:b0:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:39:55 2025 by rpki-client