Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4503b973-02ac-3370-969a-b74014316ef8.roa
File:                     4503b973-02ac-3370-969a-b74014316ef8.roa (raw, json)
Hash identifier:          Nl+jeQfve5XOVZrz5R+m7GzY8aeKl94MaGsT7iuvpdk=
Subject key identifier:   B6:E0:0F:E0:72:6D:DC:60:D9:A7:B2:36:15:53:58:5F:B4:14:53:F2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C58181C2737A46A5769A7720
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4503b973-02ac-3370-969a-b74014316ef8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.251.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:81:c2:73:7a:46:a5:76:9a:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=72c20e9a-176d-464b-b2ab-a7eb9783a390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:58:b0:a3:dd:23:25:84:f6:cf:a6:45:ca:
                    57:ce:9c:f3:4b:64:ac:11:62:62:97:03:a6:c4:5b:
                    de:52:14:2f:52:64:70:c6:79:fd:75:e9:79:0c:24:
                    aa:a3:e7:1c:9b:25:ed:60:99:77:d3:85:d4:6b:06:
                    1e:2d:fc:98:8d:b9:1b:ed:7b:c4:bb:cc:35:64:4a:
                    20:69:6d:0e:3d:39:82:a6:c9:3d:15:53:72:ea:b9:
                    24:8a:fe:50:73:e4:1a:e6:9a:78:75:a6:05:60:2f:
                    0b:05:d0:f9:56:df:69:98:d2:45:4c:76:98:ab:70:
                    25:4a:99:59:31:e4:d1:f8:76:92:86:9c:5d:fa:6c:
                    5a:cb:fb:1b:e7:21:40:58:1e:5e:a4:09:ac:09:5b:
                    b6:ee:b4:6e:bf:55:08:fe:67:ad:74:0c:0d:da:db:
                    de:69:e5:6f:8a:95:ab:3a:87:fe:3a:8b:36:c6:ac:
                    37:84:95:bc:ae:70:ff:0e:12:45:26:59:c8:7d:68:
                    e6:90:54:cb:59:55:19:1c:45:0d:fe:c9:79:8f:c4:
                    13:84:85:5a:44:71:d2:7e:3f:9d:9d:f1:61:d7:2c:
                    0c:83:8d:99:c4:a7:17:1c:04:2c:09:b5:41:ee:ca:
                    61:c7:b0:cf:d8:5a:dc:9f:3f:26:09:d9:f3:e8:9f:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:0F:E0:72:6D:DC:60:D9:A7:B2:36:15:53:58:5F:B4:14:53:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4503b973-02ac-3370-969a-b74014316ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:af:b9:59:ee:d0:ff:aa:5d:f8:5d:dd:ec:31:d0:b4:97:
         25:33:62:85:4b:df:ba:b1:30:d7:92:85:74:b7:4d:c5:e6:b5:
         16:70:d7:21:c5:b2:e3:14:60:3a:a4:d5:67:3c:e3:93:18:3a:
         0c:4f:75:73:7e:c6:ec:e1:f7:dd:5a:e8:ca:e3:38:32:73:63:
         32:fc:3f:f0:0c:c4:62:cd:61:81:bb:d8:17:c4:0d:fb:c5:3b:
         28:86:c8:96:58:69:d1:77:a0:a1:3c:cd:40:f0:33:7d:18:73:
         e4:5b:95:b0:0e:85:73:e9:10:ff:d7:52:87:68:d0:18:df:80:
         9a:64:cc:dd:dd:ed:1a:d1:a9:f6:43:c7:16:82:83:cf:cd:ca:
         21:6e:8b:9a:2c:58:30:95:75:39:7c:96:2f:82:8f:34:ab:9a:
         f2:b0:f7:13:c1:e5:09:eb:b2:a1:21:66:dc:98:e5:f7:b5:3a:
         40:d0:be:57:19:15:c6:38:b6:60:33:8b:e1:a1:bc:cf:a6:da:
         9a:d4:5f:d0:fb:8b:cd:bd:cd:68:8c:b1:05:21:37:fa:c8:5f:
         f2:18:a5:ff:5e:f0:b9:8f:f4:1e:f4:7a:2c:fe:5b:11:c6:13:
         1b:8a:7f:70:ea:07:68:f8:2c:e3:c7:8d:fd:11:5f:f6:d0:b2:
         e9:b1:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:58 2025 by rpki-client