Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/62f1ae9c-e917-322b-97b2-cf19463f358b.roa
File:                     62f1ae9c-e917-322b-97b2-cf19463f358b.roa (raw, json)
Hash identifier:          ARv4SXoJamNyI1AjPu3+wV4/DsOTKFEHZfyi9oa+FRc=
Subject key identifier:   26:8F:B6:63:31:2B:1F:BC:0B:B9:D5:6C:27:9A:D1:E0:9C:05:51:2E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5817B069715D4DF25B6E880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/62f1ae9c-e917-322b-97b2-cf19463f358b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.250.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7b:06:97:15:d4:df:25:b6:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a128da50-1c27-48ca-84aa-28dbbd562adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:5a:ba:c1:9b:89:1e:fe:a7:7e:39:79:38:
                    bb:2d:b1:12:f2:ad:0f:25:ab:ff:ed:3e:56:63:2f:
                    48:c6:43:0e:cb:7b:28:6a:64:93:23:d1:88:95:14:
                    8a:f1:31:a3:b4:30:a3:ac:97:b6:43:24:04:2b:e7:
                    ad:f0:2a:7e:65:9b:e2:d4:5d:70:8b:53:fd:6d:73:
                    3b:71:16:bf:fd:56:c3:96:de:a0:8e:79:d8:83:23:
                    cf:55:3d:b7:1f:53:89:55:b1:d2:42:35:7d:e1:a1:
                    37:67:a3:14:1e:e3:7a:28:0f:bf:ba:20:f8:da:84:
                    29:bd:d5:cf:43:64:4b:51:35:df:bb:f8:b3:70:96:
                    2d:44:d5:8c:c8:80:53:4f:ac:64:df:87:db:87:8b:
                    05:f5:0e:db:56:13:91:5d:df:41:d5:e7:c4:7e:e5:
                    6a:84:07:56:dc:8d:58:b7:af:6f:4f:e2:07:c4:0d:
                    3a:0e:2f:0c:1c:98:02:ca:c3:25:1f:c9:95:1e:4f:
                    2d:b4:9f:c9:12:16:ec:5d:68:95:ed:08:80:ec:a8:
                    79:0c:01:7d:9c:c1:17:0f:39:e3:68:35:2d:9d:f0:
                    96:6a:7f:67:bc:81:59:48:db:65:c7:54:f8:2b:cd:
                    ba:d5:4c:37:97:09:6a:85:17:ec:c3:8f:5e:1e:ef:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8F:B6:63:31:2B:1F:BC:0B:B9:D5:6C:27:9A:D1:E0:9C:05:51:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/62f1ae9c-e917-322b-97b2-cf19463f358b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:cc:fd:ec:4c:35:36:fd:1f:ac:08:4d:46:47:92:31:e7:
         75:d3:f6:18:d2:76:43:f3:3a:2b:0c:7a:cd:34:7d:3e:20:b6:
         76:30:dc:43:b9:f1:45:a6:da:73:8e:f4:65:2e:05:99:c5:d2:
         ac:0e:81:ed:d3:d2:07:24:5a:4c:6c:3f:c2:57:a4:38:31:cd:
         a8:cf:7c:ce:d4:8c:27:10:76:e2:96:d8:09:20:60:55:2c:a4:
         72:71:d6:b2:27:7d:ec:24:26:65:4d:60:ea:8d:53:bb:7a:7f:
         0e:39:13:9a:d0:f1:e5:6c:1f:bb:fc:dd:97:1e:85:7a:30:e8:
         fd:3b:61:1e:ab:0c:b5:88:43:71:de:50:9f:dc:ae:1c:ff:d5:
         92:57:dd:86:d9:03:ca:a2:9c:8a:71:15:01:9f:22:ea:27:92:
         ab:8b:bd:5c:71:32:ea:a7:c1:ae:0f:fd:38:d1:9b:af:49:8f:
         9f:08:87:34:14:3c:fa:d2:f1:6a:9e:9c:b6:85:27:8d:46:1a:
         74:e9:b1:d6:3b:4f:b4:64:f9:d2:c1:a2:75:cf:91:f7:c7:a6:
         0e:63:53:bc:6e:1c:28:d4:f0:60:a1:f9:56:71:ef:57:f5:ea:
         c9:f4:db:c1:0f:1d:88:8d:46:ba:8d:6e:ba:56:de:9a:59:bb:
         26:cb:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:27:18 2025 by rpki-client