Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ec0f9b2-f424-3e93-aa31-a1d305014dab.roa
File:                     1ec0f9b2-f424-3e93-aa31-a1d305014dab.roa (raw, json)
Hash identifier:          FvvsYWjiN/sL9rRM32E4hqXfOLyiPLRPy/pYBj9bfTs=
Subject key identifier:   2E:FA:1B:1C:32:B6:46:92:D7:BA:7C:D8:91:E4:6F:89:FD:2A:AC:DC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059C454E293E8BDB67BECE70
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ec0f9b2-f424-3e93-aa31-a1d305014dab.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.250.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:45:4e:29:3e:8b:db:67:be:ce:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d1ccef08-c8da-4b8a-a0d2-549ee17cf8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:73:10:84:89:88:cd:f3:c2:ff:79:ec:b0:
                    64:a5:77:d3:42:5c:a6:12:5f:a1:d5:08:99:d6:8d:
                    32:df:cd:84:73:ab:17:74:88:14:c7:62:49:6a:fc:
                    55:2d:6d:5f:1e:e5:35:16:c3:98:01:78:da:11:c1:
                    20:ee:0c:8f:c3:5c:62:98:b2:f3:44:e3:ab:17:a2:
                    2d:57:8e:db:7e:28:65:0f:4b:8e:a2:8f:af:74:a1:
                    60:7b:76:2a:ea:16:ac:96:f6:4d:c4:eb:bb:01:80:
                    84:13:f4:4c:d0:29:ef:7e:05:f8:ab:7d:1f:85:1a:
                    6c:7a:18:83:78:fc:6c:ea:8c:d1:fb:e8:7e:d2:a4:
                    7c:bb:00:ea:04:7c:15:0c:f1:a2:b6:a3:48:6f:56:
                    52:c7:b1:ba:65:a8:49:14:77:1e:5c:17:bd:23:c1:
                    4e:d0:91:9b:eb:83:b5:02:a1:28:80:3d:04:78:9f:
                    25:96:5f:fb:d1:7d:75:a0:bb:82:27:fd:7e:7a:9d:
                    df:1f:ae:a1:d6:c6:b2:bd:53:18:1a:2f:a1:b3:e3:
                    8e:da:14:b4:88:35:bd:e7:19:eb:04:09:48:fd:8f:
                    87:80:dd:ac:9d:a5:44:67:f0:50:82:f3:20:be:a6:
                    ea:10:46:f3:95:4c:43:f6:ec:1d:f4:20:67:a5:d8:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FA:1B:1C:32:B6:46:92:D7:BA:7C:D8:91:E4:6F:89:FD:2A:AC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ec0f9b2-f424-3e93-aa31-a1d305014dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:98:ea:d2:b1:36:ea:85:16:c5:2e:b2:a8:e5:cf:c9:1d:b5:
         bc:19:26:5c:cf:84:10:d9:ba:d6:56:45:63:23:a8:97:21:62:
         74:d8:72:22:5d:fb:9d:65:02:29:a3:92:55:6a:ad:c8:c4:9b:
         2c:9f:6d:b5:d6:e9:af:12:ac:9b:52:d7:bf:0d:92:97:13:80:
         9b:c2:50:02:2c:86:39:ae:b5:aa:f3:8d:ec:b6:ec:74:29:b8:
         20:a9:0b:d0:50:f9:dc:93:1b:8c:ca:38:ca:85:70:f5:38:0e:
         7d:42:0b:64:1a:8a:f1:e6:9b:26:9c:74:31:74:fa:24:4d:2b:
         2c:58:73:65:a0:c3:e1:60:53:3b:8d:37:0c:5a:d4:86:2a:dd:
         33:ed:8d:e1:76:13:01:52:b8:46:de:42:e1:46:2c:77:23:6a:
         90:7c:9a:43:fb:82:18:6c:9a:16:05:2f:6d:04:96:8e:43:18:
         94:06:53:bf:1a:44:c0:ea:ad:4f:4a:81:a5:01:33:77:63:c0:
         e1:ff:7d:e6:58:55:45:ad:be:4a:00:c7:a2:a6:74:27:d7:ed:
         3a:96:6a:c8:ab:92:7b:55:f2:e7:97:56:17:17:c9:4b:8a:f9:
         28:0f:d9:b6:ab:01:71:bc:b2:e8:2f:18:a7:d7:21:74:04:93:
         eb:73:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:33:32 2026 by rpki-client