Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa
File:                     632e83d4-db17-3c73-85ee-63d0467d6c6e.roa (raw, json)
Hash identifier:          TPkDYe9vX4dDB2VUrAZ95Mo3Ilwt/Sf1UDv4QshTdGk=
Subject key identifier:   E7:1D:06:03:2A:23:40:05:BB:54:FF:20:79:C9:D3:D5:94:26:DF:8E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A0320F51956E71AF8D2480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        142.250.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:32:0f:51:95:6e:71:af:8d:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b52a487-af6a-457e-8257-b31d10ba1f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:b8:dc:96:55:17:3d:f0:10:1b:90:f9:34:
                    f7:e4:ac:f2:35:e8:93:71:b3:4b:7d:9c:49:b3:f1:
                    63:94:30:96:c1:98:26:6e:be:74:d5:51:86:56:98:
                    08:be:19:75:3b:b9:96:80:15:d8:85:ba:cd:2c:e5:
                    82:0d:29:46:cd:51:24:c0:33:3b:9c:68:0a:c9:35:
                    41:f2:ca:a8:ac:ac:b3:86:b8:37:c7:f7:e1:18:42:
                    fc:67:e1:a7:22:f6:d2:df:aa:2e:aa:5e:54:db:9b:
                    b1:70:ee:05:e5:ad:d4:f7:97:31:48:ba:61:0a:c3:
                    72:19:6e:34:30:eb:35:bf:ff:ca:4c:4f:28:e1:a7:
                    b7:03:04:cb:24:30:5c:40:84:fa:af:61:47:95:74:
                    b6:d9:6c:84:a8:33:19:22:7b:13:77:11:7e:3a:87:
                    8d:96:73:f5:38:d3:ed:3c:87:e4:53:4c:04:e8:b5:
                    d0:29:a1:1e:be:a1:34:f2:8e:7f:ad:52:79:b8:f2:
                    56:65:19:ba:b8:d4:3d:a4:1c:f7:f9:f6:f6:3a:93:
                    2a:3e:b7:1f:2f:5f:46:b3:c8:62:e3:6d:a8:40:3f:
                    81:b4:bf:b2:ce:da:82:ad:52:f7:10:4b:9f:52:d3:
                    50:77:fc:27:3d:8e:e6:8c:20:23:ab:3c:45:49:2d:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:06:03:2A:23:40:05:BB:54:FF:20:79:C9:D3:D5:94:26:DF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:34:cb:d3:a2:64:cd:91:84:96:6e:e0:66:ed:b5:0c:9a:ae:
         09:c4:c3:5f:bd:06:d7:a3:0f:61:9f:4d:41:96:f7:20:60:9d:
         c5:1e:2f:cf:85:b7:13:5c:6d:48:b5:8c:77:5e:c2:94:d7:fd:
         86:17:71:c5:3b:80:a9:0f:fb:6b:fc:21:50:9c:55:0e:64:8d:
         04:83:38:f4:01:03:f2:d6:15:7e:de:03:07:4e:d0:08:af:ff:
         5f:ab:21:53:84:0b:1d:27:e2:e5:91:da:c0:8a:f6:6c:e7:9a:
         97:1f:0a:89:95:49:a3:7f:25:00:0a:7d:ee:e3:13:1a:94:03:
         b5:70:69:33:f9:b2:4d:fe:d9:77:35:f2:4b:bb:58:c0:6b:c5:
         c3:cd:f6:8f:12:8f:51:d3:d1:97:db:72:3f:fe:06:7d:f2:20:
         18:c2:46:00:c0:2e:d9:91:51:f3:4a:f3:fe:b4:e4:e6:18:25:
         7a:c0:8b:81:30:23:43:80:f1:63:d7:e3:11:3c:a4:b0:27:1d:
         2c:e1:b9:e1:59:ba:bf:72:a2:ff:e7:00:0b:ff:ad:f7:ae:3b:
         19:cd:d6:31:e4:7e:2f:73:4d:0e:0c:4d:a9:51:ab:88:65:9b:
         39:8a:a7:bf:08:3c:f1:38:9f:57:bf:a8:ba:1e:cf:ac:08:51:
         fa:94:6a:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noDIPUZVuca+NJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmI1MmE0ODctYWY2YS00NTdlLTgyNTctYjMxZDEwYmExZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHG43JZVFz3wEBuQ+TT35KzyNeiTcbNLfZxJ
s/FjlDCWwZgmbr501VGGVpgIvhl1O7mWgBXYhbrNLOWCDSlGzVEkwDM7nGgKyTVB
8sqorKyzhrg3x/fhGEL8Z+GnIvbS36ouql5U25uxcO4F5a3U95cxSLphCsNyGW40
MOs1v//KTE8o4ae3AwTLJDBcQIT6r2FHlXS22WyEqDMZInsTdxF+OoeNlnP1ONPt
PIfkU0wE6LXQKaEevqE08o5/rVJ5uPJWZRm6uNQ9pBz3+fb2OpMqPrcfL19Gs8hi
422oQD+BtL+yztqCrVL3EEufUtNQd/wnPY7mjCAjqzxFSS1DoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcdBgMqI0AFu1T/IHnJ09WUJt+OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjMyZTgzZDQtZGIxNy0z
YzczLTg1ZWUtNjNkMDQ2N2Q2YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHM0y9OiZM2RhJZu4GbttQyargnEw1+9BtejD2GfTUGW9yBgncUeL8+F
txNcbUi1jHdewpTX/YYXccU7gKkP+2v8IVCcVQ5kjQSDOPQBA/LWFX7eAwdO0Aiv
/1+rIVOECx0n4uWR2sCK9mznmpcfComVSaN/JQAKfe7jExqUA7VwaTP5sk3+2Xc1
8ku7WMBrxcPN9o8Sj1HT0Zfbcj/+Bn3yIBjCRgDALtmRUfNK8/605OYYJXrAi4Ew
I0OA8WPX4xE8pLAnHSzhueFZur9yov/nAAv/rfeuOxnN1jHkfi9zTQ4MTalRq4hl
mzmKp78IPPE4n1e/qLoez6wIUfqUalI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:35 2026 by rpki-client