Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa
File:                     8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa (raw, json)
Hash identifier:          zUOdOVbtgupYuJGJOkqiuJWNXk6pR+EX6Ly4BqKGBjs=
Subject key identifier:   27:C1:7D:1B:8D:C8:06:AE:D7:AC:CC:B4:E7:57:C0:57:8C:0D:F2:F5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858490E16D0815E7B1674FC3EB800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.251.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:d0:81:5e:7b:16:74:fc:3e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=675f6615-1b59-4a94-a940-d27118c16d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:94:f8:1c:49:1b:7f:7f:41:77:81:d7:de:
                    f0:43:56:5a:e0:e7:42:45:18:bf:d8:d4:ab:63:6b:
                    8f:b3:f3:0c:21:4b:b9:ac:2f:cd:31:2a:fb:ef:c1:
                    15:51:d4:bf:62:8b:e2:90:6c:09:80:02:fb:4a:2b:
                    51:c3:7d:7a:ad:a1:d2:eb:3e:97:2d:10:03:93:7b:
                    57:4b:41:74:8b:9b:47:e4:a6:d6:bf:47:7a:0c:4e:
                    50:4a:8e:6d:43:44:6f:43:30:f3:00:f3:0d:88:88:
                    b9:b2:2f:59:4b:29:da:35:af:12:6b:93:3c:51:0a:
                    40:14:76:51:9a:40:93:4b:cb:30:bc:80:44:51:a6:
                    cc:00:bd:1d:16:74:7c:d6:f2:ed:20:3f:8b:e4:04:
                    f3:99:db:6b:36:32:93:86:b0:73:2b:cd:c4:1c:9e:
                    d3:d6:f9:2e:7c:f1:b6:90:9d:78:b2:e4:4d:3c:6a:
                    30:0c:df:c0:b8:da:e8:e8:09:1b:2b:1c:56:84:6c:
                    2b:8e:4d:38:01:4c:f6:f0:53:4b:a4:26:3b:63:f9:
                    3f:92:2b:ef:57:5d:23:37:a3:e1:63:27:65:7d:65:
                    b5:a9:0f:85:3d:a1:ad:7b:db:f2:4a:14:3c:0e:c7:
                    e9:56:31:62:35:83:24:e0:4d:87:6a:3a:5f:b9:22:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:7D:1B:8D:C8:06:AE:D7:AC:CC:B4:E7:57:C0:57:8C:0D:F2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:3c:54:4a:19:34:b1:d5:fe:41:5c:40:a5:c9:0f:df:fc:
         22:20:7e:ce:8f:72:6b:c8:1f:b4:99:63:49:51:a7:60:59:a2:
         48:6e:c3:02:b0:4d:53:fc:38:72:ce:be:13:b2:c0:1f:82:a1:
         bb:49:18:b2:bd:58:1c:19:63:c4:86:ef:f6:d5:04:2d:df:85:
         37:39:a8:86:c4:79:7f:06:86:d5:30:75:29:af:86:e1:37:59:
         97:cd:9e:ca:28:cc:23:ba:0b:35:66:28:81:eb:58:95:18:44:
         6d:9d:2d:7d:81:39:c8:de:f2:8b:62:fc:18:22:db:05:c7:50:
         79:60:5c:08:ab:32:0b:a6:e3:63:c9:a9:a1:0d:81:d8:c8:48:
         4b:1a:ff:d4:d4:99:af:f7:d7:a1:72:35:6e:c8:b9:b5:fb:49:
         06:5e:ea:ef:53:6c:3d:73:b1:b6:41:0c:07:64:be:ed:60:12:
         36:a7:0c:15:fe:d0:b9:2b:0d:2a:6b:f5:48:d2:e7:cc:b3:ce:
         a2:b1:6b:64:38:2c:73:31:80:0f:3f:dc:74:fd:28:47:65:ae:
         e5:8c:ea:5c:44:77:ee:73:09:74:cf:0b:fd:42:d8:01:ee:25:
         45:0f:36:51:b4:50:e6:7e:05:40:2f:a7:c2:1b:9b:57:16:ba:
         82:e2:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:50 2025 by rpki-client