Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c660ea7-6803-32aa-a422-62f6eb75c999.roa
File:                     0c660ea7-6803-32aa-a422-62f6eb75c999.roa (raw, json)
Hash identifier:          2V+EFtxbnxywS/aSIyIXr+BZCd1TpIMy9Gfz/ttsHNA=
Subject key identifier:   F0:A5:94:3B:37:F4:3D:32:51:43:A8:46:0D:F1:62:54:8F:8D:94:D3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5820D500115455857926200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c660ea7-6803-32aa-a422-62f6eb75c999.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.250.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:0d:50:01:15:45:58:57:92:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=822ffee3-3c32-4d4f-9cc9-fbe0f75c902e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:cc:e2:22:f0:54:17:29:da:12:47:1e:61:
                    52:dc:be:2c:64:c4:1e:7c:31:ba:d0:04:47:73:40:
                    17:1f:e3:59:cf:a0:d2:c9:99:41:c6:6b:cc:a8:24:
                    d2:4d:80:15:4e:d2:df:e2:5d:db:7d:07:9b:42:18:
                    b6:76:e3:9a:65:ee:ae:53:5e:33:c2:22:24:cb:a1:
                    f9:24:13:0c:f5:52:e2:4d:40:93:21:d9:d6:4c:e3:
                    b7:05:dc:42:45:17:1b:a4:6f:f6:c4:43:ed:7d:b3:
                    60:ca:92:d8:ef:87:32:41:c5:f2:61:39:77:69:7e:
                    34:29:3f:86:f0:f8:23:aa:00:cc:4c:41:95:c7:db:
                    ee:32:d7:54:69:9f:e2:9b:9b:a6:10:a3:50:48:75:
                    34:b4:89:9b:a5:6b:e6:04:50:97:22:8e:96:21:37:
                    db:d7:29:ac:b3:e7:c5:66:43:e3:d9:7c:19:29:21:
                    af:4f:78:7c:5f:ae:cc:43:43:fa:33:ff:c1:02:e4:
                    dd:f9:7b:88:4e:c1:39:ee:37:38:fa:32:91:40:a2:
                    1a:3d:4a:5b:dd:b9:a2:45:a9:39:48:7d:9d:28:b2:
                    62:52:6a:61:aa:e6:a2:24:42:7f:86:7f:e5:9f:31:
                    a0:aa:5b:52:6f:77:b9:7f:cb:0d:bf:af:1b:94:48:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:94:3B:37:F4:3D:32:51:43:A8:46:0D:F1:62:54:8F:8D:94:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c660ea7-6803-32aa-a422-62f6eb75c999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:54:53:52:11:07:f1:d6:e8:7b:66:af:cb:b7:6c:5d:2c:
         4c:c7:15:d3:27:4e:95:0a:e5:7e:0c:1f:b8:2b:27:e8:2c:f2:
         9b:ed:d2:89:21:9a:ea:f9:f6:e0:c2:7c:d8:a8:9f:a1:00:37:
         db:3c:21:fc:b8:6e:3d:29:a1:e5:a7:bd:80:14:27:cd:5c:2a:
         f4:a7:a8:e6:b6:bf:c4:64:d0:24:fb:40:ed:38:75:d0:0e:a7:
         77:24:8f:7b:e5:1b:92:cf:04:26:75:73:47:8f:1f:ea:39:2c:
         93:40:4c:57:9c:44:56:cc:d7:0d:b5:27:64:a4:4e:2d:0f:b2:
         a3:18:60:95:7e:30:cb:0c:d8:31:63:e3:5f:e3:28:4f:c0:ec:
         8e:aa:e9:4f:e7:b6:f5:5c:80:af:61:ed:df:ed:ea:83:11:fa:
         58:d8:84:e6:1f:81:21:56:f0:6d:6e:32:09:b5:b4:aa:9f:cf:
         f2:41:d1:ac:64:98:dc:ee:db:2e:0e:cf:a8:28:d1:1e:d0:0d:
         2d:ee:fa:4d:71:87:85:77:41:2a:4b:5b:4f:51:d6:eb:68:0c:
         a4:4e:62:77:14:1c:e8:3c:dd:c3:fc:e7:d6:df:f0:8a:11:cd:
         75:ae:be:09:9f:91:86:a0:1c:3a:7b:bc:e2:2a:06:c9:65:d2:
         cd:9f:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:37:33 2025 by rpki-client