Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/286362be-6de1-39a7-91d0-cfc610bbd230.roa
File:                     286362be-6de1-39a7-91d0-cfc610bbd230.roa (raw, json)
Hash identifier:          ZoT5/SYiS/LhF9/PK3sKIDCq1on3+68sTce47Fyhzt0=
Subject key identifier:   B4:DC:C3:1E:29:DA:AD:FD:84:B4:B5:17:8C:97:1B:EC:1A:FB:9E:AE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A05483DB1473A9AA493700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/286362be-6de1-39a7-91d0-cfc610bbd230.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        142.250.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:54:83:db:14:73:a9:aa:49:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8660834c-59ff-4d8b-bf48-076c52ceb762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:3f:03:7e:62:90:ad:8c:05:59:90:03:5d:
                    e6:c8:11:b0:04:0f:0c:80:ef:e1:85:1d:c3:c3:a7:
                    f2:a5:dd:ff:4e:62:9d:f7:45:ba:cb:3a:a8:70:8b:
                    ae:f6:4d:93:ca:37:f8:e9:d1:b0:8f:b1:c5:d0:1f:
                    97:eb:81:46:17:b1:2f:7b:39:15:31:c8:eb:a0:86:
                    78:3d:2f:e9:51:77:35:06:43:c5:31:2d:a2:ff:05:
                    1b:e6:cf:cf:79:de:e4:4b:c3:13:d7:9a:69:92:d0:
                    25:88:9e:db:ab:4b:b1:64:22:b1:af:77:99:07:d2:
                    f1:42:03:ed:37:08:bc:e2:c2:97:c2:04:36:ac:96:
                    cb:d6:80:ec:6b:20:af:b4:54:d5:51:e5:b7:20:d1:
                    df:69:10:ca:57:1a:2d:d7:c7:df:02:69:f2:24:36:
                    1d:54:48:1b:ee:89:b1:59:14:f9:e9:d4:a2:57:cb:
                    16:e6:dc:4f:72:0e:6a:99:6c:56:ca:6b:d9:63:62:
                    2a:69:91:1f:69:5f:30:a4:ca:35:34:d4:81:e0:ae:
                    68:23:5e:e5:e8:00:1c:17:e3:b2:ff:36:61:d3:b0:
                    6c:c9:13:44:bd:ce:b3:06:ab:ef:39:ee:b5:25:8b:
                    d0:7e:4f:79:66:2a:8a:aa:5c:b1:33:99:8a:7c:a6:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DC:C3:1E:29:DA:AD:FD:84:B4:B5:17:8C:97:1B:EC:1A:FB:9E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/286362be-6de1-39a7-91d0-cfc610bbd230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:81:a2:d3:9b:ba:0e:e5:2d:18:b8:5e:f1:54:4f:b4:38:
         38:bd:1b:54:9f:e1:11:e1:29:0a:4d:4c:09:b8:d3:42:f3:79:
         c3:f2:1b:10:f0:f1:56:11:05:46:fa:16:95:1a:7c:1b:16:02:
         2e:36:45:9a:8c:bf:17:aa:d0:ad:bb:be:c0:25:71:ff:09:1c:
         0f:4c:42:a6:b4:67:b2:7e:4d:ac:c9:12:c9:78:f7:74:14:6b:
         81:d1:27:eb:97:03:54:3b:ab:50:47:a1:44:bd:ea:46:06:e9:
         df:d8:fb:f4:ef:fd:48:92:ea:70:6e:7c:09:03:e1:ab:73:de:
         04:5e:af:2f:dd:1d:1d:2c:65:10:67:92:fd:3d:5b:70:59:2b:
         09:bb:e0:b3:b1:ca:07:ab:e0:18:fd:91:2a:92:60:28:44:00:
         9c:02:f0:4e:c6:4e:d8:83:cf:46:a9:85:55:9d:e7:e3:c8:65:
         98:31:de:09:26:bc:e6:cc:21:54:df:8c:ee:78:6c:b2:7c:89:
         8e:72:3b:78:78:49:19:3b:0c:6a:fd:ef:85:47:fe:e8:49:46:
         17:6c:01:cd:c3:c9:5f:b0:a5:27:50:bf:89:86:3e:bf:7c:02:
         d0:2a:c3:e9:35:22:0d:47:04:82:05:fe:d4:2f:8c:29:e8:9d:
         e5:5d:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:49 2026 by rpki-client