Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa
File:                     ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa (raw, json)
Hash identifier:          vkZxlf4QZO9A4XNMn358aXb7KfAuKTIOpuiPJnoi4g8=
Subject key identifier:   FB:91:62:ED:86:D3:E2:64:DB:71:F8:03:DA:E8:58:26:59:E3:28:2E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059C4517717322A23F69E600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.251.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:45:17:71:73:22:a2:3f:69:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d977d7f5-6790-4581-90fe-8e243879fe7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:fa:5c:07:64:aa:fd:61:ab:32:a1:11:9b:
                    4a:3d:e9:e2:96:28:53:1b:f6:fb:f1:59:de:ac:8f:
                    d9:45:31:8b:2a:54:fd:7a:98:df:aa:6e:2d:4a:60:
                    e0:ee:da:05:49:4d:be:0b:29:dc:df:15:e7:a8:fb:
                    9d:22:21:4f:f4:c9:0b:c2:75:c1:06:54:c6:9f:0e:
                    b0:b2:3e:a9:af:35:d9:d8:ce:5c:02:24:a3:9f:58:
                    11:22:65:f4:85:a0:9c:62:b4:a5:a3:ae:d1:bd:cf:
                    cc:7e:9d:ce:aa:6e:e2:af:67:38:3a:9c:5c:10:b8:
                    ce:9d:bd:d9:75:92:df:b2:3b:a5:bb:28:ae:02:b9:
                    2b:a4:4b:16:08:cb:54:1d:c6:a1:4e:e4:3e:7e:5b:
                    28:fd:91:51:21:a1:f2:d1:f6:c1:bf:c1:d4:7f:36:
                    b0:f7:4c:3a:7f:79:05:d4:63:4e:6d:f7:3f:65:e8:
                    32:f6:19:e2:d1:17:75:a5:78:4a:b6:d5:93:b0:88:
                    5b:d7:a9:55:ea:4c:df:80:b1:37:25:70:9e:ea:e4:
                    60:eb:08:99:cb:52:5e:0f:83:11:f9:76:c0:80:e7:
                    6a:eb:bd:c7:be:03:30:07:3f:1e:ec:4b:c6:5b:5d:
                    4b:ed:cf:ad:a8:88:f7:d8:be:e5:5f:fb:e5:e4:bf:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:62:ED:86:D3:E2:64:DB:71:F8:03:DA:E8:58:26:59:E3:28:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac5aa560-b137-3b86-aeda-c4eb06f3c23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:3a:79:54:75:67:e3:c8:0a:be:37:2a:33:45:3d:44:93:
         1a:30:76:a0:cc:cd:f6:34:9a:c5:99:c3:b4:ea:41:eb:1f:68:
         2f:de:de:16:ea:dd:b1:fc:ae:ed:5f:aa:6e:4b:92:6d:57:c9:
         ea:3a:1f:00:c3:95:b5:78:e2:22:4b:4b:8c:d1:4a:ef:d4:44:
         70:41:a1:2b:db:ee:25:61:a4:fa:87:f8:0a:8b:02:74:4c:85:
         72:5f:e9:0a:cc:ab:61:47:52:ac:6b:cc:cf:b6:a3:42:2d:12:
         8b:08:b2:7e:00:43:17:00:1d:33:f7:83:5f:8a:46:fb:79:77:
         a4:dd:60:55:7e:48:60:6b:a2:35:a9:79:31:7e:ab:bd:cd:15:
         04:a4:54:e5:f2:c6:a7:52:a1:8e:bf:c1:16:89:c3:78:25:19:
         0d:08:73:2a:70:d5:9f:46:f7:02:c7:24:e0:c3:2e:ca:af:7d:
         6a:cf:83:f5:99:b9:e9:8d:8d:3e:71:e0:8d:54:2f:6f:05:c5:
         c8:c2:71:f1:67:28:47:21:1d:fd:a5:98:7f:3f:ff:54:0b:df:
         8e:3b:3c:76:33:cd:97:70:bd:0d:0c:a4:b0:6b:dc:35:f6:d1:
         d5:36:ce:7e:94:a4:97:18:b8:88:fe:b9:cc:55:f2:05:7f:2b:
         cd:5a:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:06 2026 by rpki-client