Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa
File:                     c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa (raw, json)
Hash identifier:          LWXJ/4VGaP2ZQgMRNhEz8QjdnQHe6+dSOqbRSclkFn4=
Subject key identifier:   27:32:50:4B:4E:65:AC:33:D8:8E:4C:3F:4A:02:D3:AF:D5:C4:13:B3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CCD0C9C3250B302037B847440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     15169
IP address blocks:        142.251.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:9c:32:50:b3:02:03:7b:84:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=5c46a9ca-5253-43ea-9446-a062fea528e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:c0:40:0f:2d:05:f4:14:c1:84:8c:f8:77:
                    27:14:97:52:10:cc:24:45:20:8e:17:89:1e:f3:9e:
                    02:69:2b:1f:47:b9:c3:cc:7b:64:32:b1:20:e1:88:
                    8d:e1:2b:4f:0d:18:3a:62:15:59:19:84:36:90:6e:
                    7a:72:c8:95:24:f9:00:fd:3d:cf:ee:da:2f:f4:16:
                    51:a1:50:55:49:80:57:ed:8b:43:d1:e6:2b:40:d0:
                    2d:cc:89:dd:3c:c9:3a:ec:19:98:36:e8:26:c1:c8:
                    cb:50:e8:bb:2d:75:a8:83:66:9f:f4:92:a1:0c:ec:
                    f2:46:21:e5:3e:d3:a6:4a:31:83:a7:7c:49:eb:58:
                    d9:d2:eb:27:51:73:d9:47:b3:a5:32:82:83:b4:4b:
                    e4:ad:0d:db:cb:0c:bf:2d:96:3d:72:f3:3d:3e:cf:
                    58:03:3a:aa:98:81:7a:8d:61:45:84:d7:1b:66:70:
                    b3:23:69:2d:01:dd:45:aa:34:24:1e:6d:c0:3f:2d:
                    54:be:28:90:41:3e:4a:c6:f9:cb:ed:e5:b7:41:88:
                    7c:6d:2c:a6:85:7a:03:77:56:9f:54:65:0d:92:fe:
                    b2:81:1b:c6:ff:b4:b6:71:c5:12:49:6d:1b:f1:93:
                    1f:85:5b:53:b5:42:04:65:04:ba:3a:d2:94:4a:07:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:32:50:4B:4E:65:AC:33:D8:8E:4C:3F:4A:02:D3:AF:D5:C4:13:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8a24b42-1c1b-33c2-83ad-6627bcdd62ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:a6:3d:90:5c:a8:a3:d1:3d:ef:de:27:70:cb:24:5b:da:
         d4:46:73:f8:7c:bb:36:1b:29:c9:3d:43:82:a7:0a:eb:52:34:
         87:a5:23:19:2f:2e:ca:04:2c:32:7f:d8:65:02:44:93:89:88:
         dd:03:73:93:e9:dd:16:c0:cf:5d:22:71:cc:9c:4f:2a:15:8a:
         82:ff:69:cc:f8:30:a6:eb:cd:c1:e8:ca:82:53:02:68:f9:ac:
         11:05:93:42:27:f4:6f:3e:2c:40:9f:3f:f9:a4:4e:23:30:a4:
         9d:1f:9c:19:bd:a8:95:75:33:0f:70:7a:69:14:61:37:f6:2f:
         a8:84:0f:ee:41:09:fc:8a:07:f9:50:6b:b5:ce:3b:63:1e:a3:
         7a:d9:e8:d9:47:46:d8:6e:27:d5:3e:95:76:78:4f:4d:22:30:
         34:3b:66:7b:9d:65:30:67:c2:2e:1b:4c:44:36:62:89:02:03:
         24:38:16:7f:60:f4:2c:80:4a:a3:2d:ac:61:24:d0:5a:bc:d2:
         c7:a8:2f:4c:50:f9:79:b2:e5:4d:c3:80:ca:e8:6b:35:b3:39:
         2b:ae:04:e1:c3:7a:f8:77:a9:aa:d9:04:4b:35:9d:93:17:47:
         73:70:2d:8b:06:59:22:56:65:bc:07:d7:9f:c3:40:4e:54:e9:
         59:f8:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:50 2026 by rpki-client