Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
File:                     0299a712-fc10-3ade-be7c-01c58b9e9b23.roa (raw, json)
Hash identifier:          OesDPmmBcBgSTKiKym3Coh/9C+TX7sWVxB4dN7vlsDQ=
Subject key identifier:   95:69:C4:D8:36:FA:AC:41:DB:4E:96:A4:6A:B4:BA:A0:19:4F:2B:2C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059C3E7DAD2D37290D34E324
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        216.58.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:3e:7d:ad:2d:37:29:0d:34:e3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2ee1fe3f-80fc-4cc3-aef1-9be1321f2c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:7a:3e:95:ea:d9:1f:6d:67:5c:65:d6:86:
                    b2:d8:0f:30:90:58:92:21:c3:a1:02:94:5e:7c:35:
                    47:23:54:ed:18:0c:da:80:b2:1a:2b:8d:f7:a8:c7:
                    7d:be:3d:5a:f3:81:40:ea:48:c3:94:e9:be:05:8b:
                    c7:27:dc:90:f7:15:36:ef:cc:0b:ca:88:83:a9:21:
                    de:74:bd:80:d1:b1:0e:7e:4e:d4:7f:3e:66:69:09:
                    75:9f:e7:7c:6b:12:4e:3c:1c:e6:f8:80:5d:0b:43:
                    d2:aa:22:eb:6d:7b:dc:51:7c:49:43:69:bc:f1:6e:
                    dc:03:e9:e2:27:b4:e3:89:d3:e2:b3:2e:df:e7:42:
                    44:bc:9a:d5:52:de:f3:9a:1e:bd:84:e3:a5:5c:a1:
                    c0:8f:eb:5c:4a:2a:58:fc:69:7b:76:a9:e3:95:3e:
                    e4:df:b8:3b:98:41:dc:fb:81:e9:3c:d8:e3:de:d5:
                    15:26:c4:41:9e:f5:2d:21:07:80:d5:71:76:48:28:
                    3e:9f:f7:77:d1:ce:69:88:b4:02:70:72:83:7b:fc:
                    77:3d:1d:29:4e:18:b2:f6:49:96:ae:bc:10:d8:bc:
                    b8:4a:bb:9c:2b:c1:72:69:4b:73:e6:8a:a5:fc:5b:
                    24:b1:71:b6:a4:e5:76:39:14:57:a6:9d:93:62:e7:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:69:C4:D8:36:FA:AC:41:DB:4E:96:A4:6A:B4:BA:A0:19:4F:2B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b3:cb:38:05:fa:1c:25:bb:1a:8b:cc:24:c5:2a:49:e2:c0:
         6f:f8:66:4a:ce:8e:7e:cb:16:b4:f0:2d:83:2d:43:74:fb:06:
         f8:01:5a:42:b0:c8:f2:00:b8:1b:c7:5e:38:87:a0:c8:d5:72:
         c3:15:b0:9f:25:b1:2f:6f:14:9a:1d:d3:6d:53:c9:7c:8c:27:
         37:66:f7:f7:3c:bc:29:b5:68:53:dc:d8:24:ce:15:7d:fa:a1:
         d9:49:43:e4:aa:5f:82:bb:8d:69:45:bc:d4:37:eb:c1:cf:cf:
         cb:3b:4e:05:b2:b2:1f:95:8a:25:bc:e3:8b:da:23:d6:6d:56:
         0c:7a:72:2a:c2:bf:42:b2:a6:49:d1:43:a4:1f:0d:ad:0b:10:
         1e:a3:9a:78:ab:ca:57:a6:d7:95:35:18:b8:70:a0:36:b7:27:
         a3:1e:0a:60:a7:2a:9d:0f:c3:cc:a6:ba:fe:b3:ea:eb:c2:ff:
         5a:84:a2:d8:fd:4f:9c:28:bc:d6:aa:b5:27:46:84:c0:25:53:
         cf:1c:a4:c8:ce:41:7a:cd:66:b4:23:04:f8:38:e2:07:12:6f:
         d5:21:71:76:70:d8:75:04:a3:e6:53:61:73:a6:85:90:71:76:
         a1:5b:72:4c:de:8a:b1:f9:49:b0:03:69:34:bf:8b:c6:30:29:
         bf:84:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:55 2026 by rpki-client