Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6be49704-d507-30fe-a27e-35d8489d47e1.roa
File:                     6be49704-d507-30fe-a27e-35d8489d47e1.roa (raw, json)
Hash identifier:          +0rkhozow8KnC8QaD3qT9NMiZWo2Bzg2pJ2O7g9voIQ=
Subject key identifier:   21:C9:2A:0B:34:19:55:9C:12:74:08:5C:2E:0A:51:81:37:4F:38:11
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BC93346FC60F1483A5400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6be49704-d507-30fe-a27e-35d8489d47e1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.251.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:c9:33:46:fc:60:f1:48:3a:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=86302dc3-54c2-4e22-9e9b-a60ff4d60a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:5b:be:4c:0c:ce:cf:35:08:d7:29:a2:08:
                    0a:31:c6:dd:c9:af:28:ee:59:8c:61:b8:7e:fe:23:
                    d0:4b:fb:5e:fd:a3:24:ee:50:e6:9d:25:a7:f0:18:
                    7c:de:0d:61:f5:e5:3f:11:d0:4d:fa:aa:e4:f1:ec:
                    44:19:d5:7d:1f:db:0a:c2:d2:6c:85:07:72:b1:d9:
                    44:d5:3a:e1:1d:de:16:4d:7d:18:df:3c:e0:d0:d3:
                    8f:4e:48:cd:f9:57:d1:76:bd:c6:65:d8:2f:6a:66:
                    c8:65:3f:42:ac:50:ba:1b:e9:c5:2e:48:bc:29:5e:
                    72:7c:0e:f6:c9:21:4c:04:43:8b:d7:6e:5a:7b:50:
                    f9:d8:7f:64:f1:8b:b5:f9:cf:38:63:cd:84:a8:3b:
                    16:8a:af:54:82:c6:93:3a:5f:0c:3f:06:9c:24:88:
                    f9:6e:b2:7f:e2:71:83:73:99:40:b5:08:a4:68:00:
                    e7:0b:6b:32:8a:4c:eb:ca:e3:cd:29:26:5b:79:71:
                    d6:32:7f:eb:0a:6e:f8:58:48:bd:0d:a8:39:c1:77:
                    71:9b:83:06:b2:81:16:67:01:de:4a:ca:6a:a8:f4:
                    62:26:14:89:e9:fc:89:29:cf:4d:19:f0:e8:e5:2d:
                    a1:f8:76:2e:db:f0:9f:24:34:e4:74:71:1f:bc:c8:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:2A:0B:34:19:55:9C:12:74:08:5C:2E:0A:51:81:37:4F:38:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6be49704-d507-30fe-a27e-35d8489d47e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ec:9c:9a:c9:9b:2e:f2:8f:8c:e4:45:e5:c4:c7:7d:60:be:
         47:66:df:ea:d4:82:7d:e8:0a:67:a9:1e:b7:90:02:79:d9:87:
         9d:04:17:58:75:49:79:63:f5:40:46:9d:b9:bf:3a:80:cc:68:
         3d:ae:57:04:2a:52:89:6d:9e:87:49:f3:4a:7a:96:5a:a3:14:
         da:f5:47:e5:02:32:ef:62:2f:fd:db:d9:b0:f8:64:26:12:49:
         71:00:d0:2c:01:ee:d9:3c:7f:ec:2d:c1:5a:f7:7d:cd:24:bd:
         ab:c0:20:d0:89:5c:39:4c:1c:43:0d:60:52:1e:74:45:60:91:
         53:fe:05:67:79:ed:1f:3e:41:82:4f:2c:bc:8f:6a:cd:ab:f7:
         68:aa:6a:f1:0f:d3:a2:7b:74:5f:1e:95:53:ec:93:ad:75:f6:
         df:e6:55:aa:52:6e:44:94:eb:d5:c9:af:51:14:c8:aa:fb:ca:
         15:fa:5f:c2:8a:86:c6:e0:63:26:26:9a:f7:d9:d9:b8:4e:37:
         a1:78:e9:f4:52:59:3d:44:d1:c3:ba:67:c3:41:cc:e6:76:0e:
         55:d7:67:9b:87:24:00:ce:e2:8e:73:cc:b3:0e:8a:08:12:2f:
         83:ed:29:6b:48:46:3e:11:30:ad:28:a8:52:4a:95:7e:79:98:
         e7:72:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:43 2026 by rpki-client