Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa
File:                     c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa (raw, json)
Hash identifier:          3RAZXGpNOpwnp250V5Ach7gDt//wWC7TX2ER+blfJDo=
Subject key identifier:   9B:F9:3F:F4:C0:4A:34:7E:03:33:32:A4:E8:90:D7:DA:01:24:5E:0E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BBD2B9C232FACFA4B6280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        142.251.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:bd:2b:9c:23:2f:ac:fa:4b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=380db63a-7d64-4f28-83de-e65e2b91d6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:e0:d5:d7:31:a9:ab:94:b0:2b:75:de:4c:
                    98:9a:77:43:53:fc:4b:33:c4:ac:22:bd:fe:2a:ee:
                    a7:64:a7:8d:aa:7d:e2:df:cd:f0:c3:02:97:29:3c:
                    7d:e3:cc:8b:ee:3a:84:08:04:c9:a2:dc:a6:92:e6:
                    3e:d5:f3:8b:e9:33:42:28:41:2d:4e:f9:e2:2b:4e:
                    45:ed:99:f3:2f:2b:fb:81:28:50:03:99:75:19:54:
                    47:c4:ed:5c:51:55:e2:ff:a4:a4:1d:e6:22:1d:13:
                    c9:36:2f:e5:4e:3d:72:b1:35:75:6f:cf:43:bd:0e:
                    1e:a9:75:12:77:6e:29:f3:1f:95:d3:dc:40:03:92:
                    cb:28:34:78:62:c0:0b:a0:a6:70:4c:74:3b:23:2c:
                    a3:06:95:de:17:67:b1:c8:d8:67:32:87:a8:09:59:
                    bb:5b:7a:b7:90:28:cd:87:2b:17:ea:47:d7:5d:02:
                    6e:ee:38:89:c9:ee:98:08:a4:f5:55:fc:84:38:40:
                    64:9f:08:82:e2:a9:60:44:be:e3:d7:7c:e9:88:28:
                    f3:fb:10:b8:c1:12:98:c3:ce:78:38:a9:b9:c1:5b:
                    3c:af:e1:ea:1f:27:61:d8:d8:55:1d:dd:a2:64:b2:
                    2f:e1:3d:b6:63:73:dd:63:20:ea:6d:b2:a7:5a:0f:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:3F:F4:C0:4A:34:7E:03:33:32:A4:E8:90:D7:DA:01:24:5E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:dc:48:d3:d9:ae:69:f0:dd:2a:d1:3b:35:3f:aa:15:42:d0:
         08:47:0d:ef:f9:bf:07:65:da:4c:f8:58:8f:6b:39:42:59:78:
         53:3e:e7:90:f8:9f:c6:51:6f:7b:db:8f:a7:12:ec:f2:bd:aa:
         4d:bd:cf:1a:84:fe:97:b7:2e:60:ef:da:d3:65:97:94:4b:a4:
         15:fa:97:64:3b:e1:f6:f8:c8:ad:41:1a:66:b6:5a:02:a6:18:
         9d:6e:c8:7d:a0:af:05:3c:af:b8:e0:0d:c4:2f:2f:c4:b6:35:
         57:09:56:38:e5:e6:2d:c5:31:87:51:f3:ae:e5:51:13:16:43:
         b2:f2:c1:3e:69:cd:d4:e1:04:7b:68:a5:e9:b8:d9:a5:95:6d:
         ea:ac:9d:ad:8f:c7:5a:f7:e9:de:ec:ab:f4:c1:3c:d0:fb:36:
         4f:9f:8c:a9:54:5b:fd:a4:1c:8c:d1:f2:91:e5:ee:cd:f0:22:
         4f:7c:f9:24:4a:2c:2c:e1:f8:45:19:a7:50:40:da:ba:8b:ba:
         16:6b:87:c6:7b:39:1a:b1:67:f8:70:a2:30:a7:74:03:c5:12:
         ca:45:ce:35:07:df:88:34:a7:a5:0d:76:75:fd:6d:db:37:f8:
         f1:54:62:aa:f1:c1:aa:98:d9:6c:a6:96:8c:19:5f:91:43:da:
         4d:cd:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:14 2026 by rpki-client