Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa
File:                     b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa (raw, json)
Hash identifier:          r7tNF5/EJ/flD7ehSTxlYyk+/aX/neNaQpEZO5YamHo=
Subject key identifier:   FE:23:5D:D7:48:AB:AF:CD:D1:24:6D:A6:2E:BB:82:FC:CB:8F:42:2D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BCACDA61EFC44E0A69000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.250.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ca:cd:a6:1e:fc:44:e0:a6:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=5ad61b1a-a3e4-4305-bf17-e21af116cda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:7a:a5:bb:18:66:37:c2:1f:81:bd:cd:3a:
                    87:e7:13:66:cb:de:7f:45:80:bf:9c:1e:92:54:d0:
                    85:83:60:f9:a1:76:fe:85:38:e9:d8:16:8c:25:1b:
                    d9:d3:d8:7f:8f:1c:89:a7:7e:32:94:ee:5c:1e:44:
                    2c:0e:51:04:8f:37:3a:0a:31:9c:b0:9d:cf:8d:29:
                    01:95:76:75:ed:eb:f5:2a:3a:9f:fe:49:59:7a:06:
                    e0:e9:37:f0:ac:7f:ca:04:8a:c3:54:74:a0:14:ee:
                    ee:12:40:30:9e:34:bb:3b:f2:f1:91:f9:dd:35:81:
                    6a:56:b4:f7:fe:fa:cf:34:8b:bb:32:eb:25:79:82:
                    c1:de:5d:a9:eb:60:aa:be:f0:a1:1f:ed:76:63:4b:
                    4e:24:29:db:c9:95:60:82:44:6b:b2:23:60:24:11:
                    2d:7a:be:c3:33:4d:e6:67:2d:40:19:fe:bd:5c:a2:
                    91:3a:f0:13:99:6e:5d:89:59:5e:06:77:5a:79:09:
                    53:b8:1a:d3:b0:f5:1a:bf:3e:88:f7:d3:4a:ff:28:
                    f0:39:b1:db:ee:e6:f0:8b:0e:3e:07:90:09:13:9b:
                    d1:fc:92:65:32:bb:f5:12:69:ff:c2:10:f3:67:31:
                    f7:b4:0c:32:be:22:05:7a:79:d2:de:26:76:9e:ea:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:23:5D:D7:48:AB:AF:CD:D1:24:6D:A6:2E:BB:82:FC:CB:8F:42:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:a8:f8:b1:33:c3:c6:b0:0e:e3:b5:95:b4:75:ee:eb:44:
         9b:fb:a9:15:24:cf:12:57:d8:56:79:5a:5c:44:c1:0a:d5:8c:
         1b:07:c2:1a:d1:66:67:04:59:51:43:03:9e:7e:90:46:8f:d2:
         38:55:0a:87:aa:40:a5:86:2b:cc:a2:48:45:39:c0:fb:e3:59:
         a2:e7:7a:a6:fe:19:89:20:ce:dd:13:12:23:ed:49:72:bc:21:
         4d:98:8c:9b:00:4f:76:15:99:78:d6:fa:26:be:24:ef:3e:fe:
         88:a3:ee:d0:2a:ea:9a:a1:4c:96:59:e6:dc:80:4d:48:a0:5f:
         6a:53:48:e6:67:92:7f:c3:07:c9:d0:24:ee:51:d7:0e:07:71:
         87:85:7e:4a:67:1a:ca:97:99:08:7b:89:12:75:92:60:81:9f:
         fa:6d:8c:87:28:e1:eb:85:10:4b:b5:98:a8:fd:23:b6:a7:21:
         1c:58:30:1e:d5:70:bc:52:9c:93:ab:5a:1e:8a:f3:b0:7e:f5:
         db:d9:d6:f8:39:03:bb:8b:d2:0b:88:8a:88:1c:6b:35:52:50:
         7c:17:54:aa:b0:b5:a4:a7:ea:a8:fc:b7:dd:18:58:58:32:94:
         e2:33:6b:45:d4:f9:32:be:cd:fb:54:b4:90:4d:51:1f:be:28:
         e0:96:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:50 2026 by rpki-client