Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa
File:                     e5178a4c-dbdb-35df-8402-ea056b4cb828.roa (raw, json)
Hash identifier:          lKjxB/fVAqxvSK87Oo/cD1uTco9kEs3Cgd62t2Z32QA=
Subject key identifier:   3C:F2:65:DD:6B:96:27:2A:3D:FA:86:B0:75:FA:98:26:B3:22:92:A8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E1E4469B768E4B9911F6D57E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        142.250.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:69:b7:68:e4:b9:91:1f:6d:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=74e91924-5c13-4d8d-93c2-96f5894c7087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:bf:27:af:52:c9:8f:d1:26:58:35:a1:3f:
                    87:e4:18:ee:5c:bd:e6:b5:b8:3f:01:fa:8e:d5:fc:
                    b1:43:08:e5:4e:f5:e3:2f:d2:f6:d1:91:d0:d7:e6:
                    30:e8:6d:c4:1d:ac:45:ac:17:2b:52:28:e2:fc:3b:
                    11:ec:ec:57:53:e9:22:fd:f0:0a:e6:e8:d9:e1:e2:
                    14:a6:65:ac:30:4b:d8:ea:fa:2e:7f:7f:a5:0c:16:
                    46:08:95:85:02:a2:ab:3b:88:41:21:37:fe:db:b9:
                    20:ba:77:fa:86:66:33:44:55:d2:f1:e9:14:18:b0:
                    a5:61:51:1e:0e:44:e7:ff:08:6d:ec:f9:fa:4b:38:
                    74:6b:3c:b2:65:fa:0a:90:41:86:c5:11:a3:e6:10:
                    1f:3d:dc:89:4f:87:12:4b:90:f8:1d:ea:66:da:be:
                    fb:ca:32:50:4c:28:de:aa:e5:7b:4c:19:29:18:0e:
                    e1:15:c5:ba:cd:35:19:20:d3:cc:0c:d7:8b:28:10:
                    6d:f3:97:e7:37:dd:e7:e9:19:53:6c:a3:aa:d7:91:
                    1c:b0:18:ec:c5:36:a2:50:c9:d5:4f:c1:bb:ae:4e:
                    d1:52:a9:43:a3:b3:3e:65:58:57:3a:c1:77:08:a9:
                    ae:e9:c7:95:80:22:11:f8:0b:ee:09:0f:d5:95:c6:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:65:DD:6B:96:27:2A:3D:FA:86:B0:75:FA:98:26:B3:22:92:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:44:80:75:76:1d:82:68:94:cc:4e:30:38:9a:a5:a5:d0:
         df:60:05:a7:e4:91:52:fa:a3:54:42:8d:6e:5c:bc:1e:50:7d:
         2e:02:ac:de:fe:c2:4d:c7:1e:c2:3e:91:3a:73:11:06:24:db:
         73:a1:be:49:b7:59:ef:12:e3:2a:5d:3e:79:cc:23:f9:4e:85:
         af:30:a1:b5:e2:ec:ec:29:b8:a5:19:12:ed:86:55:1d:d1:7a:
         e8:74:71:cd:ff:ee:c5:5b:54:ed:f7:4c:e0:a3:67:01:6d:16:
         24:a5:c9:f9:27:b6:5f:69:d8:40:62:58:eb:ad:2f:41:f8:c4:
         f3:27:33:68:7c:24:dd:36:d7:80:01:2b:20:1c:3e:3c:af:2b:
         35:6b:7f:9d:52:1a:52:1e:f2:85:60:0c:6c:44:2a:56:03:8e:
         5d:8d:c4:29:22:e0:5f:3a:04:5a:65:e7:7b:a1:a3:89:03:5c:
         5a:6f:c8:9b:79:e8:b6:de:e3:3e:ae:aa:5e:97:e2:a7:65:14:
         3c:56:6f:67:e6:99:cd:76:6e:11:09:d3:a8:84:45:bb:37:b3:
         ad:9c:86:10:c8:87:58:dd:0e:07:b8:f3:ad:a5:d9:b3:ff:f4:
         91:fa:e3:fe:e6:61:90:8a:ef:4f:a9:5c:e4:fe:64:e7:1e:ad:
         82:45:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:57 2026 by rpki-client