Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
File:                     c381b149-36a4-3861-b92b-1f345c601274.roa (raw, json)
Hash identifier:          KEoxVV55QrPujanXU7HdBVf4qqBdp/gPZLBcTWO0ToY=
Subject key identifier:   C3:12:26:E8:22:F6:51:CD:CD:70:12:2A:AF:70:CE:18:7A:9E:32:06
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A9D30F182877CD846BD24DF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        142.251.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:f1:82:87:7c:d8:46:bd:24:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=506c30e5-539b-4e96-8973-794f7e590f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:54:94:81:c0:e1:e2:19:09:f5:0d:c9:16:
                    e6:65:94:ac:4e:b2:ef:5a:38:6a:6a:74:de:04:a1:
                    28:c2:f9:1e:8d:ff:e5:89:ab:45:a8:25:e3:f4:6c:
                    ed:85:2a:71:47:3f:e8:d7:f8:f7:37:23:1d:25:1e:
                    10:85:61:15:03:49:01:df:70:36:24:b3:b2:74:c1:
                    25:a6:7e:1d:2e:88:db:05:3c:97:01:02:fb:89:6f:
                    81:48:da:cd:e0:16:73:83:cb:d7:b8:00:a4:4d:b5:
                    ed:85:4e:e7:85:e5:07:89:05:4b:71:94:09:d1:ca:
                    2a:9e:4a:b7:4f:8c:c7:8e:31:23:f4:a5:b9:46:b5:
                    e1:36:8c:97:f0:bc:7f:03:05:3b:49:b5:d1:90:50:
                    c1:0d:e0:d9:a8:13:f3:2e:60:5c:f6:d0:ee:04:f3:
                    d7:41:bc:f5:79:73:ab:6b:07:fc:91:af:4a:ab:0c:
                    e6:ab:7f:f7:4c:18:ad:fc:ab:a3:74:80:3b:c1:cd:
                    29:43:3d:19:b4:82:92:21:29:67:c8:22:1f:fc:a2:
                    ca:11:90:8c:be:67:ec:68:dd:02:fa:ee:dc:f7:d5:
                    ec:53:3b:06:a2:4a:02:94:58:9a:3a:34:7a:7e:41:
                    f3:c7:78:81:8e:d7:8f:88:72:5f:b1:0b:6e:bc:ef:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:12:26:E8:22:F6:51:CD:CD:70:12:2A:AF:70:CE:18:7A:9E:32:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8e:76:34:db:d5:fe:c4:06:36:c4:e4:11:ae:09:69:61:d2:
         25:af:a1:58:70:bf:b2:76:c5:c6:d8:d0:85:b1:40:4f:c8:c2:
         6f:f6:91:ec:59:94:af:5b:94:b2:4b:f3:64:98:17:67:24:6e:
         ad:8e:84:67:1e:66:e9:b6:30:f7:c3:17:5e:40:9b:9d:ff:5d:
         ed:32:fe:d6:de:77:7a:82:73:72:25:0c:01:53:ef:76:1b:f5:
         f2:9d:09:d7:e2:a6:6b:3d:49:9d:05:e1:c3:f1:3c:80:b6:bc:
         48:e5:94:e1:1a:5f:9e:fc:db:9c:2a:4b:bd:90:12:85:92:26:
         ae:0e:2a:93:1d:a4:aa:b9:56:4c:91:04:6d:1b:a5:dc:44:90:
         9f:14:ed:89:9a:63:c6:09:17:99:70:79:ad:1b:d6:84:8b:e1:
         c0:64:78:62:6b:f9:52:fd:1c:05:1b:08:0a:22:7b:fb:bb:24:
         c8:04:15:e3:24:41:d8:1e:1b:60:a1:a4:73:09:86:4d:0a:ef:
         9d:ba:7d:e0:51:98:0a:c5:c5:b6:91:c5:18:2c:19:46:5f:c9:
         6f:7d:73:d6:e1:fc:2c:49:74:41:79:2a:6a:07:e9:41:ce:9f:
         b4:90:96:64:16:cd:3d:2e:59:82:81:c0:e6:ba:e4:49:a9:99:
         a3:c7:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:13 2025 by rpki-client