Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa
File:                     bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa (raw, json)
Hash identifier:          xQjQo7fuh88/gKp9gpkBlM9uOnxt93ZhMBRjQi9DK+0=
Subject key identifier:   4E:60:5E:5B:66:58:6C:6D:38:A8:E1:46:36:8F:A2:98:9A:5D:EF:DC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841184A341F83806A8480CC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        142.250.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:84:a3:41:f8:38:06:a8:48:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0c57ba82-5092-48a5-a6fb-750f6cc2193e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:6a:a3:81:e5:9f:ca:b5:ac:fb:6e:2b:57:
                    b6:42:bc:19:9b:e7:8a:cf:84:00:59:22:72:ec:f1:
                    15:60:29:a6:84:f1:62:cc:e8:76:3d:cf:80:11:e7:
                    cc:31:e3:72:35:1e:ca:de:86:a9:86:ce:72:3f:dd:
                    ed:0e:68:ff:43:d4:83:90:43:ab:8a:b0:ea:72:16:
                    6a:63:e0:66:ab:63:e4:8a:f3:cd:7b:ae:75:32:c3:
                    05:88:cd:62:9b:77:78:c8:3a:7a:c2:aa:bb:61:27:
                    02:16:1d:74:88:f8:84:6a:d5:e3:7a:aa:da:72:21:
                    f6:c0:d1:29:fb:46:65:81:a0:1c:5d:37:ac:dc:38:
                    bb:24:90:29:86:84:fd:4a:c6:fe:c2:8d:93:55:bb:
                    f0:f6:5e:2d:c1:33:40:75:0c:d5:29:ac:88:7b:6b:
                    7a:26:03:75:d9:74:5d:42:de:0e:73:64:cb:3c:c1:
                    42:28:4b:bf:28:62:30:e3:56:41:be:55:4f:22:23:
                    1c:d4:0b:a8:97:9e:8d:ff:23:31:f1:f7:6c:ce:c6:
                    01:36:b8:2c:dd:c2:c2:44:8a:17:8d:a5:b4:bd:fb:
                    1e:ef:ad:0d:4c:ad:62:4d:13:e5:aa:96:3d:f5:49:
                    23:e9:43:d6:0a:f0:e4:2a:47:25:f9:e2:08:a5:01:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:5E:5B:66:58:6C:6D:38:A8:E1:46:36:8F:A2:98:9A:5D:EF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:85:3b:bd:db:8c:4d:fe:e5:36:08:1d:03:90:24:1b:53:
         7f:0a:f1:c5:18:34:08:85:2b:50:26:66:b6:d1:91:5b:da:ba:
         06:27:f4:ff:b1:40:99:cb:2d:a3:bd:42:f7:78:f0:94:cd:bb:
         ce:ec:34:4f:67:6c:0d:76:33:18:84:79:8a:45:1b:f0:8e:71:
         53:88:ef:76:08:6f:a8:97:7f:61:9b:09:bd:d5:9c:89:4a:c5:
         19:05:4d:28:5e:e1:79:e4:f4:9d:6f:16:01:97:25:ed:bc:ba:
         89:76:21:24:f4:da:46:de:8c:da:31:e5:d4:bf:11:e1:35:1d:
         32:72:a3:4f:75:fe:b4:02:28:27:ef:05:ce:81:5b:20:c5:73:
         24:d7:48:0c:0f:a4:30:05:24:7f:c6:16:c3:ae:dd:28:14:c6:
         3a:cc:0c:4d:62:5c:8e:ef:2b:9f:ef:e6:e5:8f:94:b9:14:04:
         b1:61:75:45:ed:94:98:4a:26:80:32:42:ec:79:a6:0b:55:01:
         05:8f:cb:58:df:0d:e0:f1:a3:82:f3:59:e0:ee:ea:38:78:6f:
         82:cf:30:1b:b2:77:41:4c:9d:a8:8a:65:f9:0f:01:81:30:b2:
         16:cf:bf:4e:f8:27:58:55:ee:95:7e:be:a2:d5:1b:ca:b7:08:
         66:91:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:55 2025 by rpki-client