Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa
File:                     833caff5-026e-36d2-a677-3eee63b7b415.roa (raw, json)
Hash identifier:          K/sea7EgAN30tSl8UF5hSUgkhtwA7YTpjGwaB/6or64=
Subject key identifier:   9F:20:57:6F:9D:1A:FB:74:03:6E:2B:55:20:B6:EC:8C:D9:B3:E6:C5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C58231C32F80A452059726E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        173.194.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:31:c3:2f:80:a4:52:05:97:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=62b80257-8076-4d8c-afd8-6773d1947e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:c4:d8:01:6c:c7:50:4a:d6:ad:50:79:4a:
                    53:1c:05:84:d7:f6:3d:74:be:f2:ee:22:19:fe:cd:
                    0d:e5:f5:be:18:b8:5f:c6:1c:93:02:62:cb:d0:95:
                    18:47:2d:d9:7b:95:ca:ad:2f:02:2b:68:7d:12:e5:
                    98:8a:00:45:8f:a8:fb:58:d5:4a:2e:31:cd:89:ab:
                    de:53:47:ba:d9:72:fa:04:c4:4e:9d:a7:a5:c5:4b:
                    4b:a9:9e:56:b6:b4:cf:14:9c:df:7e:79:e8:15:b2:
                    2d:48:b5:aa:80:45:ce:d6:84:b3:31:cf:58:8d:ec:
                    48:1e:83:54:cd:62:fb:c7:58:79:72:36:3b:0f:c0:
                    04:b4:c3:cc:58:4a:71:6b:e6:b0:14:e0:ec:18:97:
                    07:98:d9:c8:c9:99:dc:95:ba:28:cc:68:7a:47:d9:
                    61:06:53:70:bb:d3:09:ee:f8:aa:e0:e8:f3:18:30:
                    0f:78:f4:50:80:4f:3e:1e:3a:ab:10:3a:f7:12:60:
                    47:3e:68:32:1d:3e:40:f7:4f:3f:6a:dd:b6:d3:16:
                    4c:56:0d:6a:8b:8d:2b:39:0b:40:84:63:e2:23:86:
                    6f:82:5c:2f:81:6e:2e:4d:58:f9:37:ab:2e:ed:3b:
                    91:cc:39:af:a7:2f:f3:b3:70:ca:16:e0:e9:5a:01:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:20:57:6F:9D:1A:FB:74:03:6E:2B:55:20:B6:EC:8C:D9:B3:E6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:c4:d1:72:50:f6:2e:a3:42:4d:8b:64:80:7e:7f:41:60:
         d0:ad:d2:19:cb:15:69:e0:a1:f3:dd:1a:90:8c:cf:15:46:a2:
         1a:65:63:c0:54:45:56:e8:df:da:38:c7:2d:63:0b:c9:20:58:
         37:a6:ef:8b:42:48:fb:44:75:b3:0a:07:b6:cf:9c:14:76:85:
         7f:69:bf:8b:51:cb:3a:1a:5c:a3:fb:0b:41:81:5c:a3:cd:2a:
         2f:f8:80:bd:97:22:b2:61:81:da:c5:a1:91:e6:f8:63:d3:b3:
         03:72:36:11:d1:68:08:2a:cc:ba:0c:96:6e:0a:6e:8b:3b:69:
         84:a2:d1:8c:d4:1a:8f:16:ad:b4:79:2b:ec:bb:25:5d:3a:ad:
         8d:b1:17:5a:a0:f0:6d:3f:dd:45:13:cc:c7:e0:81:a3:58:c0:
         47:02:59:04:bb:c0:66:ac:67:48:7d:69:3c:d4:ab:f3:69:f1:
         c8:88:65:7a:09:5b:24:96:97:be:20:f1:59:5c:c6:c6:f9:a6:
         b6:84:32:be:a3:15:38:d9:dd:16:49:de:18:66:2c:01:bf:88:
         aa:4b:eb:16:a3:07:81:2b:a9:7f:53:e7:7e:6e:d6:7f:c6:2e:
         7b:a3:ab:a5:1b:32:7d:49:76:b0:b1:c5:16:48:00:66:4d:4b:
         43:1f:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:23 2025 by rpki-client