Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa
File:                     1e4af511-b95c-38d3-9f5a-45b94e656305.roa (raw, json)
Hash identifier:          b9q/ti0XrN+ilvXY9H0W5084hfSHUwazpc17kmnMG+8=
Subject key identifier:   B7:16:AB:9A:9D:C0:8A:EF:54:A8:CF:F7:9C:67:5E:A5:AD:4C:9B:9C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A0411D1B85B4AF33BE7ED0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        142.250.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:41:1d:1b:85:b4:af:33:be:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=beaba053-c0a3-4aa5-9573-a7f2c0b9a8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:e6:45:84:12:90:e3:88:75:a2:5a:0a:de:
                    65:76:b7:3e:9b:87:35:d7:b5:00:67:58:5f:b1:6f:
                    a5:97:7f:15:7c:4d:37:ae:2f:cd:50:05:b9:d0:e0:
                    9e:b4:16:e5:0c:3a:09:ee:d4:5b:7b:ba:04:33:67:
                    f0:c8:54:f9:dd:cc:b5:3b:ec:48:e1:ed:e3:52:55:
                    d5:9e:8b:64:12:36:e5:89:f6:ee:b6:5c:03:80:fc:
                    e3:4c:33:d9:ca:c6:cf:80:7b:18:71:f4:7f:01:f9:
                    05:2d:a6:3b:05:63:3d:3d:f6:22:69:b1:ea:4b:79:
                    47:a3:38:d2:98:cb:e7:38:41:8f:bc:7c:1d:53:ae:
                    f4:db:d1:e4:9c:53:b6:39:ae:8a:fa:fb:75:9e:14:
                    ea:83:1c:51:7b:34:d0:f8:98:ab:a5:00:02:16:fd:
                    af:a9:b3:51:13:aa:f5:cd:64:38:b2:65:8a:80:8f:
                    d3:32:02:e9:84:bf:e6:3f:72:de:d8:36:d4:7e:dc:
                    f3:66:f2:de:ba:91:dd:fd:cc:58:00:14:81:3d:e5:
                    e3:4b:ae:bd:dc:78:66:7d:65:ab:d9:ae:46:de:39:
                    c6:23:03:f3:21:21:f8:10:50:48:28:62:48:58:13:
                    f9:f7:98:bd:10:9f:9d:7c:90:aa:a0:04:aa:b9:e1:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:16:AB:9A:9D:C0:8A:EF:54:A8:CF:F7:9C:67:5E:A5:AD:4C:9B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:40:09:6e:09:25:eb:bf:18:81:93:5c:ab:c8:36:c4:8e:
         61:61:41:22:cc:43:92:83:55:b0:5b:19:aa:e2:7e:09:45:14:
         65:01:90:ce:4e:73:0e:ff:57:9c:82:c7:83:9b:4a:e7:3d:61:
         e8:4d:51:5b:c4:43:3e:13:51:b7:3d:a3:f5:57:8f:9c:45:a6:
         b8:05:c1:04:b2:cb:2b:77:65:cd:75:c2:ec:ae:22:f8:0d:e6:
         60:fe:07:39:3d:3f:69:12:2d:82:93:cd:83:7b:b5:70:a1:6b:
         c8:f5:23:64:ac:94:5c:18:3f:9c:c9:71:10:ff:4a:45:6a:97:
         2f:36:37:f8:2a:e5:76:d2:70:c0:cd:ce:d2:db:5a:55:99:9d:
         7d:2c:fc:7e:60:3c:8e:7b:6c:40:9d:c0:24:b0:20:4a:37:83:
         21:8b:c9:62:b9:16:60:b6:68:da:c7:01:26:b8:42:e3:64:b0:
         a5:59:c0:95:0e:b8:85:b1:62:63:e8:10:1d:f0:a8:4d:dd:cd:
         e4:87:b2:86:25:16:20:6f:bd:ab:9a:e4:7d:98:df:c2:70:e4:
         d4:cb:29:fe:47:e8:75:0d:4f:04:9c:2b:03:be:45:b5:27:4a:
         2b:1f:a1:67:9e:6e:ca:c6:f7:e6:c4:8e:67:d7:70:b6:17:c8:
         dd:99:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:11 2026 by rpki-client