Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23ae20f6-fdcf-3bea-bac5-16b4c53798d5.roa
File:                     23ae20f6-fdcf-3bea-bac5-16b4c53798d5.roa (raw, json)
Hash identifier:          4740RpyZ+FxshqrpOlmCaeQH+Ynz+V2MFFfbgLm4Bzg=
Subject key identifier:   BE:8A:A0:04:92:27:49:E3:1F:99:05:5D:CA:D3:D8:9B:DC:03:87:C2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84118DDE4BF8F6F72C0F8580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23ae20f6-fdcf-3bea-bac5-16b4c53798d5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.251.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8d:de:4b:f8:f6:f7:2c:0f:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=646fca47-413c-4fd4-bfb8-d735dc23992a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:16:c2:fd:0c:67:02:20:59:33:57:49:f2:
                    c3:13:29:3a:23:49:00:d1:11:fe:de:29:bd:66:2d:
                    03:15:23:c7:93:6e:64:ef:c7:c7:60:fd:3d:54:7c:
                    0b:6f:da:7a:d4:07:8d:f5:65:37:aa:a6:96:34:0d:
                    2f:05:ed:1a:ec:46:5e:ae:50:00:d5:7d:06:4f:1a:
                    1e:8e:1e:ba:0c:e1:e6:e2:be:6a:38:20:59:14:d9:
                    43:7b:c0:89:e4:81:da:b5:f3:34:40:6f:89:ae:0c:
                    f8:e8:23:5d:ad:39:9f:c8:67:59:c5:51:95:09:56:
                    cd:29:b1:0b:bb:31:4d:45:7d:71:d5:ff:61:f7:56:
                    19:9e:bf:80:ee:19:ba:ac:22:7a:a0:ee:9f:26:a3:
                    1d:a4:02:97:90:71:2a:3b:96:a6:9c:ea:ff:b1:af:
                    51:7b:1d:39:d5:f2:1b:75:b6:8d:26:34:ac:a3:05:
                    5b:8b:90:31:5a:ed:c1:79:a4:81:14:eb:5e:b6:31:
                    99:b2:d8:44:3e:5a:b3:a9:74:ff:2b:8f:19:78:fb:
                    0d:d9:5c:31:59:2e:d4:8f:d6:6b:6f:b1:84:1c:83:
                    c9:2c:6e:62:be:8d:e9:62:3f:84:28:b3:05:f2:2b:
                    73:19:95:ae:6d:e5:8f:42:a0:c7:ec:49:6e:6a:1b:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8A:A0:04:92:27:49:E3:1F:99:05:5D:CA:D3:D8:9B:DC:03:87:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23ae20f6-fdcf-3bea-bac5-16b4c53798d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:15:d9:94:46:c3:4c:f3:ec:56:54:bb:64:27:1d:bd:eb:a6:
         40:5c:ac:6a:a4:14:a6:e7:8e:5c:6f:00:ce:0d:8d:60:ab:58:
         2e:d5:54:92:42:d9:0d:3e:60:3a:66:42:99:3d:e9:e1:53:98:
         d7:bd:25:fb:a2:0b:3f:61:53:5c:bf:04:1f:23:be:51:a8:8f:
         69:f3:33:2b:c2:a9:73:ee:43:bd:ce:21:d2:f7:2f:4f:cc:a6:
         38:b8:17:ca:1b:b5:49:d3:2a:1b:d1:4e:57:d3:d6:9a:e8:2f:
         54:76:78:11:12:77:cb:8d:c6:3d:fc:33:d6:6a:95:d4:ce:c7:
         dc:ef:c6:82:fa:74:ab:9a:72:0e:29:93:7d:8a:68:4b:65:7a:
         31:49:e9:ba:36:7b:64:63:1a:9e:82:d2:45:9c:a7:2c:58:6b:
         27:04:8e:a8:9e:c6:f8:61:33:69:4d:eb:fd:8f:e7:1d:61:d6:
         a3:0f:a9:eb:8f:9b:94:36:88:86:e4:ba:e9:e1:2d:09:fb:e6:
         ac:6a:e7:17:62:57:47:d4:59:0a:93:08:2e:9c:d9:1b:e0:57:
         f5:9d:31:c1:6c:c7:ee:e8:00:54:5a:eb:11:9a:65:33:19:cf:
         42:ae:49:40:9d:98:07:f5:f0:48:0b:78:38:2a:b2:22:fb:5d:
         51:d4:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:44 2025 by rpki-client