Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa
File:                     f9dff4f6-56ef-3886-ada4-55552d4c1936.roa (raw, json)
Hash identifier:          nWg0gFA8wxZknNcr0U9duYBtNAIw6z5vHpPXamy6cCM=
Subject key identifier:   E0:D3:6A:4F:BB:10:3C:31:53:75:2E:F5:12:95:7B:29:F0:07:EC:6B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848DEA13111A0AEC1071FC99D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     15169
IP address blocks:        173.194.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:31:11:a0:ae:c1:07:1f:c9:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=8ef5303b-7da1-4112-ba2c-4e4e69908580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:a0:34:8d:2b:47:bb:73:54:93:ed:63:ae:
                    f3:ef:cc:dc:6b:fc:b9:44:7a:7e:b6:fa:22:fe:20:
                    3d:eb:ec:db:3d:5e:c1:74:67:4b:e9:13:49:b1:d5:
                    7d:1b:fc:ce:e3:85:73:12:35:22:6b:4c:bd:09:f1:
                    20:4f:5a:3d:ba:d3:06:bb:f7:ac:44:25:1a:bf:7e:
                    f9:17:b3:92:4e:c7:cf:af:5e:bb:c9:f9:dd:d3:cb:
                    76:f7:8e:f6:b4:1e:19:de:b0:ef:03:16:4a:d4:ca:
                    a0:f4:63:c0:0c:3a:35:f1:24:da:e6:e0:1e:7e:43:
                    a4:67:b1:4b:a4:73:01:62:f7:84:69:65:74:8e:b0:
                    c3:a3:37:a6:a7:20:51:b5:17:05:b2:8a:60:ae:49:
                    fc:55:82:ec:ec:2d:ad:e0:e7:34:47:3a:63:af:06:
                    ec:3d:48:cb:bb:1b:17:a2:cf:5f:f0:51:fd:b3:ff:
                    a7:d0:73:1d:e6:26:4e:9f:c9:5d:3a:93:cf:9d:cc:
                    12:d4:0f:04:87:9b:b4:bf:35:ee:fb:1e:72:27:65:
                    b9:5c:f8:ff:f8:5f:77:dc:54:47:ce:6b:5c:e3:50:
                    39:47:6c:6e:08:b4:f2:bc:26:86:aa:3e:c7:21:a4:
                    6c:93:72:a9:12:a7:ef:41:5b:30:00:a4:b2:c5:fb:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:6A:4F:BB:10:3C:31:53:75:2E:F5:12:95:7B:29:F0:07:EC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f9dff4f6-56ef-3886-ada4-55552d4c1936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:cc:be:1e:99:b1:5f:00:af:18:df:ac:0a:58:b7:cb:c3:
         12:6f:b6:30:3d:99:b4:2f:7a:81:a5:f4:a9:8a:4d:5c:e6:2d:
         30:fb:b6:36:c5:6a:de:00:86:ee:fa:04:7f:e6:c3:2a:ad:83:
         a8:1b:0e:2d:22:f4:d0:5a:6b:a1:89:29:36:42:31:c6:14:34:
         c8:66:10:21:a3:53:f0:47:25:b3:1a:b9:1a:3c:d9:46:f3:fa:
         e5:6b:73:c1:66:ad:fc:ec:0b:84:40:4e:ee:a6:32:af:39:e5:
         a5:73:a3:23:73:63:46:ec:82:1e:06:26:60:b8:c4:78:42:14:
         d0:c5:28:5f:91:20:f6:2e:ea:35:fa:69:3f:c1:de:af:71:5a:
         df:e5:be:97:84:ca:9d:cd:14:87:25:20:22:d7:89:f0:42:b6:
         6f:bc:e8:24:24:e4:2b:ee:c6:81:c8:ba:f0:07:25:bb:78:18:
         f8:a1:9f:38:31:5a:38:7f:21:81:03:9c:7b:62:72:cc:0d:3a:
         31:a3:16:b3:96:e2:cb:02:46:d2:ba:f7:41:de:66:ac:86:44:
         d9:b2:81:70:ef:34:6b:3b:fd:5e:46:63:10:52:4c:27:b2:05:
         9b:60:bc:9a:8d:ff:62:07:3e:5d:5a:ae:c7:60:ed:ae:86:90:
         14:99:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:37:32 2025 by rpki-client