Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49678650-e677-377c-88c4-a90a428afa95.roa
File:                     49678650-e677-377c-88c4-a90a428afa95.roa (raw, json)
Hash identifier:          bu0tC2JRjh8TZDPFrB91fZGELx1+tJ/Rs6gcRmXhg5A=
Subject key identifier:   38:DD:8A:02:68:B2:79:E0:CF:0E:C8:70:11:2E:A8:F4:C5:C9:9B:6F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E1E446AB497119952C3B47FC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49678650-e677-377c-88c4-a90a428afa95.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        142.250.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:6a:b4:97:11:99:52:c3:b4:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=1d6f6888-4e09-423d-bf21-d47a6a2b0f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1e:1f:a3:81:96:7a:8b:bf:12:15:bb:14:0e:
                    b7:43:93:97:f5:0b:ee:12:d7:fb:b7:48:86:9c:73:
                    76:6d:c7:00:31:c0:03:b7:e8:cb:43:97:d7:e2:f3:
                    c1:6f:e0:ec:49:06:c4:79:2c:78:87:72:a4:28:5e:
                    a5:9a:46:31:de:1e:b5:74:09:60:6a:29:50:5b:f0:
                    f3:34:d6:c5:f8:a9:36:73:26:c5:9c:ff:85:75:90:
                    da:ef:23:64:14:45:a2:ed:dd:b1:7c:ef:72:a6:67:
                    79:7c:98:90:9e:cc:cd:32:2e:85:74:e4:5d:2c:24:
                    f1:87:4b:e5:e8:f9:e7:5f:e1:32:81:4e:34:fc:e4:
                    b4:8a:dc:85:d9:99:24:fc:2e:c1:14:e6:00:b7:68:
                    e0:64:e9:a8:7d:60:0f:2d:52:e5:46:a6:e0:4b:db:
                    a4:67:5d:dc:2a:98:df:b9:dd:d7:70:b0:e5:61:4b:
                    38:11:75:2c:2e:3d:16:ce:44:2f:5e:4d:04:94:7d:
                    70:53:65:04:db:52:4d:39:18:18:ea:63:b3:42:cd:
                    76:06:88:a7:8f:75:21:7b:48:7e:fc:c9:91:15:0c:
                    a7:78:5d:0b:a1:23:d9:e5:62:f2:76:d4:0e:ea:6c:
                    8f:01:aa:c7:bf:14:3e:ed:ef:b3:a8:62:a1:6b:e5:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DD:8A:02:68:B2:79:E0:CF:0E:C8:70:11:2E:A8:F4:C5:C9:9B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49678650-e677-377c-88c4-a90a428afa95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:39:f5:03:65:fa:33:54:2f:e7:2f:9d:d5:ed:e1:94:db:
         cc:28:ae:5a:43:af:4b:58:b1:74:ff:14:b4:f7:2f:15:9f:8d:
         d8:40:b9:b9:1a:60:98:a7:a1:3a:d3:e5:d0:7e:00:89:4d:33:
         e4:ca:bd:5c:23:94:e0:29:b0:7b:42:94:6b:48:db:43:5c:64:
         74:dd:d9:af:37:20:60:98:41:7e:59:42:68:fa:ab:b4:80:58:
         7e:d6:57:a9:bc:67:79:e8:fa:b6:51:fe:14:5b:6f:1a:7a:c7:
         7b:2a:28:53:73:cf:0f:60:9a:f2:0b:f8:f5:b7:e9:1a:28:90:
         f6:58:45:28:8d:b6:ad:01:af:ff:2b:1b:5c:d3:24:19:8d:27:
         dd:da:8f:ce:ea:10:84:e3:fb:de:99:57:2f:b1:82:5e:f9:87:
         72:d0:27:b1:0d:40:c8:5f:15:94:cf:a0:b9:15:d7:a5:d7:25:
         ad:cb:44:7a:ee:01:37:31:d1:9b:c2:cb:20:66:b7:e8:f9:86:
         d9:4a:08:1f:6f:64:80:28:75:fc:85:19:fe:95:23:42:03:3f:
         a9:2b:83:4e:b9:3c:8a:39:80:e7:82:3d:b2:15:6a:1b:0b:0a:
         dc:57:dc:81:35:fe:d1:2a:8b:ef:ca:ad:10:a3:8d:87:6b:fb:
         ff:b7:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:04 2026 by rpki-client