Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa
File:                     a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa (raw, json)
Hash identifier:          51XfY8xSKKOt3U0nBzdQ8SW8mB88GwNoxd/70Kkhl88=
Subject key identifier:   F9:E8:6F:57:7C:5A:54:98:63:3A:DF:8C:C5:A6:91:D9:62:EF:55:1C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059C4685E2CF8E713681B300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.250.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:46:85:e2:cf:8e:71:36:81:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=602c452c-e7f6-4281-a7ac-5d172af0a66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:60:8f:d9:f0:36:e2:5b:55:4f:7f:97:50:
                    e1:5d:53:4e:33:a9:a3:7a:be:66:6f:05:8f:13:58:
                    fd:24:31:d0:da:8f:14:be:46:67:a7:78:7d:ce:89:
                    b8:f9:84:2c:fa:20:0b:9d:ce:16:9a:d0:34:83:16:
                    3f:48:78:bf:30:1b:c3:dc:37:0c:88:13:9c:d8:36:
                    0d:30:c3:dc:b8:cd:7c:50:ae:27:e6:4f:13:3e:fd:
                    2d:3e:6e:cf:76:0c:bd:b8:cc:b7:35:95:1f:ef:67:
                    d8:45:81:f6:8a:38:67:35:39:01:ff:63:09:44:16:
                    80:26:fb:a7:94:49:78:0e:7d:c2:86:0c:95:a5:8a:
                    87:29:55:04:9e:db:0b:37:d8:3a:58:f3:c0:8b:67:
                    40:90:81:05:cf:80:a1:0a:72:42:54:b0:1b:2c:6e:
                    5a:5f:12:94:22:12:44:6e:cf:4c:38:6d:d5:b4:6c:
                    6a:6c:f4:51:cc:31:aa:0b:97:ac:73:a0:77:5c:6f:
                    e6:e8:92:03:56:ad:3b:b3:8d:42:93:f5:ba:b1:e0:
                    40:c2:5f:7f:43:50:fe:d2:2c:e2:00:be:93:d8:c4:
                    41:13:85:f9:0f:1a:5f:aa:e2:f2:26:a9:c7:40:df:
                    fc:46:93:93:26:d8:c4:d7:68:08:a9:92:02:cc:8e:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E8:6F:57:7C:5A:54:98:63:3A:DF:8C:C5:A6:91:D9:62:EF:55:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:10:b5:47:1f:76:1d:c5:2a:2b:0c:31:d1:d2:fe:98:e6:
         96:d7:9d:47:e3:a3:3f:ef:57:86:47:23:61:f4:a6:07:4a:7b:
         c6:b5:c3:61:bd:91:f0:5f:d3:70:ad:f6:47:e9:b1:5a:53:fa:
         1f:18:c0:f0:4f:09:af:9b:ab:72:d3:56:40:25:50:68:ae:e9:
         c6:a5:3f:10:20:06:80:70:5f:c3:cb:bc:27:d6:cd:fa:97:21:
         4c:31:9c:6a:c0:4a:09:63:b7:1b:ae:82:53:08:88:4c:07:e7:
         94:93:3d:e9:de:22:29:41:33:bc:b9:5a:fc:f8:a8:4e:19:72:
         92:80:fa:30:7b:1f:1f:7a:8c:66:04:98:44:ac:fe:12:ba:f5:
         3b:22:8c:f1:e9:3d:4c:76:02:2a:77:54:90:88:b6:78:df:cc:
         ca:7f:f8:ad:fb:ed:67:7e:3d:b6:12:88:d7:1d:5c:3d:4b:83:
         10:51:46:78:43:3f:00:0b:ca:aa:25:51:e0:b3:53:e2:1f:7a:
         49:4f:d1:3a:a8:76:04:98:14:8a:06:fd:80:eb:54:86:a7:24:
         05:6a:2e:e8:ab:76:36:18:25:8c:b9:01:93:b9:93:27:21:9a:
         8b:b2:25:c2:f4:87:7a:c4:02:c1:09:7f:48:ba:da:3a:60:66:
         e3:c8:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:06 2026 by rpki-client