Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa
File:                     f3bba627-40b1-380e-8d96-0765b451c30c.roa (raw, json)
Hash identifier:          3/6iGB5kwnW94Px+qDKj9ygQwPrN3b7n0I+jYWRGeIc=
Subject key identifier:   87:A2:DC:95:0F:CF:72:FD:62:8E:42:C3:6B:FD:B3:B7:E0:C4:25:BD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E1E448E579AD688CA3E7C6900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        142.251.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:8e:57:9a:d6:88:ca:3e:7c:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=37306fd2-26f1-41af-85ef-8db17fe93716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:0a:41:f5:a1:f1:dc:e2:79:e6:60:a4:c4:
                    1f:2e:b0:04:d9:be:9e:f6:1e:1e:c7:0d:a9:2e:c8:
                    0b:05:4a:59:95:0e:62:c3:a9:54:45:29:c1:bb:d5:
                    82:13:10:25:2f:eb:4b:28:ce:ce:7e:c8:11:f7:b1:
                    dd:c7:be:6f:65:0e:93:ef:65:be:9a:39:55:9f:99:
                    07:d7:ba:5d:b6:60:29:e5:2b:0e:00:85:d7:b5:b5:
                    5f:0e:cc:a8:fd:81:4e:ff:2b:f1:ea:6b:b2:f2:71:
                    91:fd:48:e1:2d:31:a0:3a:b8:e4:c7:65:0a:d1:ff:
                    2b:31:59:3e:d8:22:72:92:e3:e2:36:dd:6b:71:dc:
                    e5:f5:b3:6d:45:39:8e:e9:74:be:32:be:2c:05:9d:
                    5b:df:79:62:e3:6e:d7:11:a5:88:ac:bc:6c:b5:e0:
                    9a:42:67:76:43:57:fd:cb:44:ac:d1:ff:cc:84:c6:
                    01:b0:5e:96:97:78:86:4e:75:dd:09:03:ab:1e:b2:
                    3e:cb:0f:9a:e4:f6:a1:75:19:b7:e4:6a:08:67:08:
                    5f:a6:c0:37:c2:43:62:d0:5c:ca:3a:45:c4:50:47:
                    90:07:b9:1f:03:ab:68:33:65:29:1f:7b:c1:3b:34:
                    57:72:50:9b:2d:45:fd:2c:eb:64:82:83:54:f2:29:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A2:DC:95:0F:CF:72:FD:62:8E:42:C3:6B:FD:B3:B7:E0:C4:25:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:64:d0:c0:be:84:2d:86:4a:fc:97:7b:19:5b:d2:87:40:
         4e:44:b9:7b:b7:ca:7a:68:57:d8:7c:24:d2:e7:2e:20:8b:db:
         e7:9d:bd:46:67:cf:74:7e:43:b5:73:bc:7b:a1:b3:4b:13:b2:
         4f:48:2b:ca:f3:79:96:a3:8a:e6:4a:54:cd:68:46:bd:e1:ea:
         01:9a:ea:8b:29:2e:bf:98:a8:b7:c4:b1:2b:57:bc:88:e8:10:
         c7:7e:0b:77:3b:29:c7:83:08:39:09:dd:6a:b7:f7:a8:89:2f:
         ae:f8:2e:5e:08:08:0a:af:96:f7:b9:49:b3:c7:53:e1:2b:fa:
         41:79:9c:68:33:83:7c:f4:e8:2b:25:d8:4b:c2:82:53:69:95:
         cb:d3:60:e8:9d:85:b7:57:77:7b:dc:30:01:d6:cb:a5:81:ca:
         c1:03:fa:f1:33:9c:03:63:95:43:82:4b:b4:f3:0e:e7:05:ce:
         26:a7:7f:46:07:b0:4b:21:43:37:02:5b:1e:f3:b6:d5:44:fe:
         4d:17:f9:e0:7d:62:80:c9:57:a3:9b:a1:cd:c9:53:63:b9:84:
         72:c4:bf:bc:13:c3:03:b8:db:c8:77:23:c3:7e:68:af:57:aa:
         18:f7:6f:b5:57:86:65:b2:30:a9:e3:82:bb:91:7d:4b:f8:84:
         8f:69:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:59 2026 by rpki-client