Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa
File:                     c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa (raw, json)
Hash identifier:          JHcJsJkZmhBpJq7/ZHzN/pgZGKyFw5ckhkET8Nhj/rA=
Subject key identifier:   CB:0F:54:85:11:CA:77:52:DA:61:F1:1A:86:6D:EF:4C:4A:C4:72:32
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858486D90550B4723223D21F77EA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     15169
IP address blocks:        142.251.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:55:0b:47:23:22:3d:21:f7:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=68b1cacf-85d5-4c25-876f-5d4226bf8fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:d8:d1:06:a0:51:4b:bb:5a:ea:29:72:af:
                    66:06:42:c3:91:84:6b:84:dc:95:ca:f8:15:68:f3:
                    d8:50:13:90:1f:4c:4d:5f:e7:19:ec:0d:db:8f:95:
                    a9:4a:6f:0f:6f:33:57:1e:c1:e4:73:06:c2:88:de:
                    a3:29:4a:d9:69:e2:42:69:1f:cf:ab:67:a7:b8:de:
                    b7:82:d5:18:1a:86:83:89:b0:08:87:6d:78:a2:e1:
                    33:d0:a3:2b:97:21:af:c2:3d:33:7b:48:72:79:71:
                    4e:92:1f:2e:d5:ad:cb:99:72:42:23:ce:2d:f8:70:
                    b0:56:32:4d:ca:1c:7d:cc:23:4a:77:bf:e2:4a:dd:
                    70:22:30:a9:4d:c5:27:69:c7:02:3e:8c:72:62:04:
                    02:d4:82:bd:31:44:d5:c9:7a:bd:71:d5:72:c4:1d:
                    dc:20:4b:0f:23:36:ca:83:af:7d:2d:a7:91:34:42:
                    cf:f9:7b:71:53:49:2e:54:cc:fe:e7:28:24:96:a7:
                    a1:7d:ef:bf:c5:6c:0e:de:50:bf:40:f1:1c:24:f1:
                    a5:2c:3b:d2:d4:8a:68:5c:2d:3c:61:1b:72:80:71:
                    e2:8c:f7:40:b2:52:27:d8:67:86:cb:c7:bf:43:4f:
                    50:99:8f:49:88:0c:38:b1:c3:62:2f:2d:03:5d:23:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0F:54:85:11:CA:77:52:DA:61:F1:1A:86:6D:EF:4C:4A:C4:72:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6d:83:f3:23:bd:fc:2c:9c:44:bf:26:2c:c2:53:46:a9:ac:
         c6:94:5a:90:e5:03:75:51:07:86:c2:47:8b:a9:b5:84:ce:94:
         78:a6:cf:a2:b6:ed:f6:f1:35:ec:2e:fb:28:ca:b1:94:9e:e7:
         7d:8c:86:ef:4d:9b:21:9c:f4:29:18:5e:bc:4f:d8:72:d2:ff:
         e2:bb:7b:24:c8:6f:05:15:c1:2a:c9:dc:23:d1:2d:f9:29:c1:
         11:88:f4:6e:a7:51:55:4b:53:58:20:a3:a4:e6:55:ea:74:d0:
         64:43:2e:d0:aa:ee:8d:c5:1b:77:27:a9:5e:90:a3:a3:df:f9:
         86:b3:80:91:30:be:99:46:51:22:db:c6:68:4b:91:93:15:5b:
         98:e0:d3:04:49:9e:19:83:35:e7:bd:ff:20:ee:16:99:43:42:
         2c:c8:fe:fd:da:6a:af:62:93:05:41:e0:93:4a:da:b3:2a:f5:
         d4:f8:60:99:b7:4c:e4:a7:f2:ff:89:0f:90:b7:cb:45:12:d1:
         d2:af:2d:7e:bf:d9:e6:4c:57:91:98:6a:61:9f:15:72:ac:8b:
         a2:26:ec:01:9a:3f:e6:da:9c:c2:70:e5:3a:47:0c:64:db:28:
         26:2c:c2:48:f4:96:c2:2e:86:c1:c4:b2:8c:76:ea:61:be:c5:
         cf:3e:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:15:16 2025 by rpki-client