Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa
File:                     07ddce46-8efa-397a-a162-a4e2f281fe1b.roa (raw, json)
Hash identifier:          qlyfBj0tCoBqRik7TZ+cgi1BKYy7ttfAEWcaLei3UTM=
Subject key identifier:   91:A8:5B:A5:0D:EF:4D:F8:0D:35:A5:C6:5F:9D:5E:4C:1A:4D:19:8E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79ECC01A107C17B6E223EC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        142.251.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:cc:01:a1:07:c1:7b:6e:22:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9c65445b-632a-4356-85dd-aa5e5c4d3994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:93:92:f0:9d:e7:8e:43:13:ed:6e:25:24:
                    cd:37:89:29:36:a1:24:e4:68:97:56:0e:6f:8f:a8:
                    4a:d1:d1:c0:52:01:57:f7:83:3a:d1:4e:89:d1:0b:
                    35:2b:b9:78:ed:e4:3a:f9:06:8e:ca:05:ba:15:a4:
                    93:dc:8d:f8:22:48:16:ff:29:8d:a4:44:42:0e:dc:
                    f6:d9:69:b9:ce:ee:4b:09:2d:b4:31:ae:2c:39:14:
                    fe:ad:ec:ef:ba:ac:be:fd:9c:37:ff:09:3d:83:59:
                    28:80:d8:c1:2b:1d:54:fc:55:14:45:d4:3c:bb:46:
                    9c:f9:2e:69:ec:d3:6c:4f:2d:f1:9c:50:c4:f9:b5:
                    dc:49:8c:1f:28:fe:45:ca:41:65:c6:83:37:69:2c:
                    f7:c8:93:a7:0e:7a:2e:48:3e:81:4c:d8:32:15:5f:
                    7e:45:6a:2b:07:e3:bf:de:a8:7c:70:59:7e:21:a6:
                    f1:0f:34:5f:3a:d1:ad:b5:d3:e4:3c:25:13:fa:cb:
                    db:ab:b0:9b:76:76:33:42:b2:00:52:ad:91:45:67:
                    67:46:d2:0b:30:2a:27:66:28:00:c0:dd:4b:0b:98:
                    a1:6d:b0:5e:36:6f:cc:b9:20:17:ed:02:a6:82:97:
                    ba:ff:cc:8b:6b:e4:32:70:65:e3:5e:ac:ad:12:06:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:5B:A5:0D:EF:4D:F8:0D:35:A5:C6:5F:9D:5E:4C:1A:4D:19:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:d9:22:23:83:e9:7a:a1:f6:b9:9d:86:e6:af:d4:28:3f:
         17:65:65:e9:dc:95:c7:79:45:98:2c:9f:5e:23:c8:e8:54:85:
         21:21:53:63:f5:22:36:fa:84:a5:28:2a:d2:cd:8e:27:ca:e8:
         32:f4:27:24:42:8d:48:4a:b3:14:6a:46:1f:78:52:8e:ef:eb:
         21:33:48:28:ed:20:f8:53:06:27:39:32:6b:a6:c2:ca:72:15:
         db:8e:64:49:c4:7c:7e:07:9d:fe:7e:8d:32:9a:23:13:e8:f5:
         6b:38:e4:2b:be:49:11:1f:a6:2a:47:43:9c:88:36:0f:be:f9:
         6d:42:33:9b:56:c5:e0:1a:4d:4a:b1:0a:e9:7f:48:72:24:2f:
         c2:7a:6b:9b:aa:57:ab:8e:5f:fb:0e:40:d1:a2:71:42:08:ed:
         0d:6f:d2:b8:21:89:c5:42:0b:13:a5:1f:8e:d8:11:31:d3:04:
         a4:38:e7:bc:4e:8e:62:84:53:cc:e9:ed:9d:7c:e0:1c:25:c1:
         62:e1:db:f3:b5:01:f2:d2:d6:0d:1e:49:02:81:d0:40:3f:b0:
         82:e3:b5:7d:3a:e6:77:5c:e5:25:3b:24:95:4e:e1:de:35:5f:
         66:12:d3:65:f3:f5:b0:55:f7:9d:73:57:21:b0:67:6f:23:cb:
         0f:aa:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:11:21 2026 by rpki-client