Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa
File:                     24fc593f-28c5-33af-af65-2fe568cc470f.roa (raw, json)
Hash identifier:          JdL/DRDDZAiB7lFKsSovv2H0CLvg0bRqy65kfthpQjA=
Subject key identifier:   20:BE:BB:9E:A8:41:21:E8:85:5D:C8:C9:BB:58:CC:DC:BF:FF:5A:36
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0A6FEB8E2B14ED0024109280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     15169
IP address blocks:        142.250.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:eb:8e:2b:14:ed:00:24:10:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=72d329bd-54bb-4b8f-b63c-d1e438e94260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:aa:ba:cc:e6:c4:86:f8:57:a4:a3:4c:14:
                    01:be:3e:0b:6c:30:4e:75:c2:2d:7a:66:f8:81:36:
                    3e:c7:59:c7:64:8e:74:91:fc:ce:26:a0:0d:4d:78:
                    a4:1e:05:0a:ac:b7:5b:b0:66:22:8c:7a:c2:cb:86:
                    a5:61:af:92:ae:e8:d5:9c:3d:3f:35:27:6f:68:9a:
                    d3:3d:c2:c1:c2:ac:fe:5a:fd:68:e7:ab:10:9a:86:
                    e9:c2:74:f1:10:b3:52:f6:7f:02:1d:96:d0:2d:8e:
                    4f:21:5f:ff:7d:c4:eb:e7:88:27:c6:dd:88:20:f1:
                    d7:c4:bf:86:6d:9d:db:5b:b9:fd:31:a1:c3:d7:76:
                    d9:ac:c4:13:2d:c7:af:4e:57:96:7c:75:99:47:5b:
                    60:15:c6:c0:64:e6:bf:34:33:8d:df:54:a9:d1:61:
                    a9:36:eb:97:b5:b3:fb:ff:72:b7:9c:26:e3:74:1d:
                    15:46:50:30:e6:29:ea:24:b0:b1:e9:a1:03:dc:50:
                    75:5c:c7:68:a5:0d:b6:40:0c:17:e0:20:d2:f8:83:
                    4f:7c:81:f4:a6:7c:39:77:25:02:50:aa:ed:23:70:
                    a5:04:a1:60:64:d0:54:a6:1a:bb:e8:f7:b9:34:4d:
                    70:bb:e4:77:2a:2a:6d:01:e2:17:79:d2:db:f3:f1:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:BB:9E:A8:41:21:E8:85:5D:C8:C9:BB:58:CC:DC:BF:FF:5A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:80:e2:53:7b:60:4a:cc:09:d9:c8:64:dc:44:44:7f:31:40:
         d4:80:00:0b:03:c2:48:6c:a1:2a:6c:46:50:14:47:08:6c:95:
         d2:31:30:bb:de:ab:33:4d:64:cc:9b:f4:bf:f9:ef:9a:f9:b1:
         70:e8:7b:d8:5a:cc:1e:e9:cb:2b:db:4f:77:61:1c:f1:3b:10:
         0a:3d:db:8a:55:dd:2f:fc:79:07:04:71:10:7a:fd:22:ec:d9:
         7b:e6:43:a8:96:90:dd:92:5f:a6:a4:e4:9c:10:d2:bd:f2:7f:
         bd:08:b6:fc:90:34:ec:b5:cb:11:ad:9b:99:aa:cf:ea:7b:c7:
         56:a3:47:73:27:4b:d6:86:ea:94:88:65:9f:51:21:f2:b1:ec:
         51:d4:de:c2:cd:eb:d2:55:3e:8e:71:84:4a:1a:9a:3b:6d:8b:
         9b:7a:d5:96:83:c6:8e:97:86:f8:85:6d:42:7f:11:f0:99:b2:
         a8:70:b6:e3:86:75:33:8c:94:84:88:7b:1b:26:a1:a0:7d:e6:
         4b:29:01:fd:8c:3b:68:55:14:9f:60:5e:4d:e7:a0:f1:17:17:
         f2:07:32:ee:90:fe:12:0a:1b:69:0f:33:e1:4b:42:65:26:e9:
         ea:2f:24:7a:d9:26:49:4a:8f:58:7d:78:c2:a3:49:6e:27:11:
         10:50:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:09 2026 by rpki-client