Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa
File:                     2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa (raw, json)
Hash identifier:          7Lz6ge2A8qiTAPR24fDjKV48GtzHe/XQGpzJzmvLzms=
Subject key identifier:   F8:3C:F7:F1:F1:49:14:11:33:8D:2C:39:F1:F6:4C:7D:39:82:BD:AA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BCBD2675159F273576880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.250.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:cb:d2:67:51:59:f2:73:57:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8d8621f1-f884-40c9-aa8a-f3c552c498e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:9a:2b:e8:e4:d9:ff:b5:13:f3:e4:84:2c:
                    91:6b:31:64:59:06:b8:72:71:81:42:26:41:d2:89:
                    92:d3:f2:9f:63:6c:71:ab:3c:b1:ff:0b:9f:9a:79:
                    7c:51:b2:d6:29:eb:f0:d4:16:3b:bc:4b:3e:d4:d8:
                    99:fd:a1:d5:dc:17:e0:45:2e:a9:a6:a4:d4:00:3a:
                    e1:f6:60:3c:87:05:17:dc:78:cf:33:b3:03:ae:95:
                    81:71:dc:d6:aa:dc:f9:62:4e:45:f0:13:b9:8e:a6:
                    38:87:e7:73:b5:5d:f3:6b:b9:5f:02:5a:07:87:28:
                    76:1e:a0:dd:18:8f:db:9c:9a:af:fe:ab:2e:93:ee:
                    17:d1:09:93:0a:b6:15:1e:cc:70:72:37:aa:c5:0c:
                    07:9d:4a:11:38:80:b8:71:14:eb:7a:0d:ef:bb:15:
                    10:ae:65:21:5e:5e:07:af:43:e4:e1:d9:c3:ae:ec:
                    e3:36:12:e5:5f:92:b2:61:27:32:96:b2:97:9b:0f:
                    ab:bf:cf:d6:3a:d4:8f:be:ff:2b:04:b3:80:16:ac:
                    7f:e6:2d:5f:03:75:57:dc:66:9e:0c:29:ec:3d:0e:
                    31:2c:68:11:ae:c8:3a:dd:2b:4f:6a:a7:25:84:18:
                    b9:ea:a3:2f:92:e9:26:e3:71:b7:83:1f:74:46:4e:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:F7:F1:F1:49:14:11:33:8D:2C:39:F1:F6:4C:7D:39:82:BD:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:89:47:52:58:d0:3e:26:23:7d:d3:25:06:f6:bf:dc:7f:7b:
         a6:47:44:d4:60:8c:73:46:c0:90:cc:ab:90:c1:6a:e4:91:bd:
         b2:ea:e1:81:57:ee:31:5e:a5:74:62:ca:5d:7d:b1:53:b1:23:
         7b:4b:e4:ee:af:2f:4d:50:e4:cd:bd:cd:76:09:b0:ca:aa:c2:
         52:7f:06:97:3d:17:e5:b1:41:cd:d5:b5:03:de:6a:78:be:05:
         9a:e2:15:72:6f:ea:b5:1b:69:ed:f1:da:d9:e4:cb:c4:7e:69:
         cc:c0:e5:4d:f4:60:19:93:4c:f5:13:dc:5c:33:f6:b5:3f:fc:
         f7:16:1d:58:3a:0d:b0:18:c5:61:b9:94:d7:ff:1e:24:8d:7e:
         c2:08:b9:ab:07:f5:c8:1e:4f:6c:1d:96:55:c6:61:aa:44:10:
         c3:1d:ef:99:ab:29:d8:5b:fa:9a:14:b8:f4:38:e8:be:fb:8e:
         d0:c3:85:4b:d3:9c:e9:32:04:d4:be:51:fd:ef:67:6c:ef:33:
         d3:b4:5e:21:01:1b:b7:d2:a4:02:65:ce:a9:38:46:ca:6b:b9:
         ff:17:eb:ae:68:b8:e9:61:08:91:98:e3:a8:31:06:b4:b0:be:
         eb:ff:15:ab:3c:43:9a:38:45:89:15:10:33:d1:90:7a:67:a8:
         02:6e:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:06 2026 by rpki-client