Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa
File:                     96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa (raw, json)
Hash identifier:          Cqn0vfDmavBhrtifcELDGb2O2LmaAuX1rjMerHyc9xE=
Subject key identifier:   27:92:72:B2:B9:16:2B:62:D4:08:CC:B5:65:1D:4F:6E:D6:89:8E:27
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5822FBB55D581F7E4D46F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.251.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2f:bb:55:d5:81:f7:e4:d4:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=40cd4d99-4858-43da-936b-bef4c73ccca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:46:49:dc:0d:6f:e4:b4:71:9a:5e:97:cb:
                    e3:8d:86:ce:2a:0e:f9:cc:3f:9a:38:6f:ef:2b:c6:
                    95:7b:3c:1b:f0:ff:64:ac:5a:cd:99:d6:d6:5b:67:
                    f2:05:34:42:e9:f3:88:6d:26:b3:ee:a4:80:eb:59:
                    f4:bc:43:c7:fc:a7:d5:70:c8:03:d3:ca:fd:50:67:
                    af:b7:64:8f:5e:30:56:19:8d:5f:c3:68:bd:a2:60:
                    8b:25:6c:3e:6f:57:44:23:98:f4:87:ea:be:07:f6:
                    50:b6:c7:f4:6e:d7:e9:ce:30:b3:5b:6e:28:26:67:
                    34:94:a3:ef:b6:71:c1:b9:18:38:01:d1:52:20:19:
                    a5:37:78:82:5f:5c:6d:4f:59:cc:db:25:d2:2f:e4:
                    f0:f4:65:f1:49:f0:38:5c:4f:77:ac:2c:b8:7d:47:
                    c0:d9:86:5e:ae:59:d5:e2:d0:2d:1c:0a:3b:a2:3c:
                    50:89:e5:1e:a7:02:de:c7:b2:64:3d:13:45:a6:5f:
                    2e:6b:77:e2:e8:f5:11:cf:9c:c8:c6:3c:eb:e4:ff:
                    cd:bd:22:da:2c:ed:fe:f7:5c:11:10:1f:a7:c1:4c:
                    1d:e5:c8:14:f7:e6:62:d9:63:13:5a:d7:c8:14:67:
                    e0:50:90:69:cb:76:ee:35:cc:0c:e5:9b:5e:4d:db:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:92:72:B2:B9:16:2B:62:D4:08:CC:B5:65:1D:4F:6E:D6:89:8E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:dd:c3:a0:48:d9:5c:9b:71:e7:d5:17:5b:59:93:c1:dd:2b:
         c7:2a:04:5f:d4:4d:b5:df:02:46:e0:b9:20:d0:c2:0b:1b:e0:
         1c:bc:6e:ad:53:cf:24:ea:37:d6:70:78:e4:59:c1:81:9a:ee:
         69:7a:9c:73:4d:c0:35:c6:5a:e0:af:17:95:3e:96:b0:9f:83:
         4b:b4:87:7d:7a:65:b2:67:85:5c:04:ad:09:2f:a5:3e:22:9e:
         df:69:9c:57:05:bc:f3:46:39:88:41:eb:b6:ea:1d:03:e9:00:
         9a:99:99:fb:fd:ee:cb:c6:bc:dc:23:9e:af:a7:51:eb:77:38:
         47:2b:a4:36:be:6c:df:f6:10:4e:83:bc:c4:f0:e8:12:77:d2:
         bf:24:f3:ad:c2:6a:0c:d4:bf:f1:55:d9:7a:dd:02:d2:71:be:
         6e:a4:ab:85:9e:ce:73:4b:2e:27:74:3a:24:d9:11:cf:b7:ea:
         ee:52:68:58:2e:c7:6e:ad:9c:7f:be:60:b2:83:f1:db:59:10:
         61:12:17:27:fc:33:63:35:2d:ff:65:64:30:aa:01:1a:5f:2a:
         ab:aa:90:19:e8:3b:76:0d:f5:14:25:5a:b2:99:79:f1:ab:e4:
         b6:ba:42:74:e9:40:7d:7d:ce:44:58:c1:61:2a:1e:5a:95:4c:
         d0:bb:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:54:33 2025 by rpki-client