Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00e32bd9-37bf-3455-a145-cb1c6c089745.roa
File:                     00e32bd9-37bf-3455-a145-cb1c6c089745.roa (raw, json)
Hash identifier:          VwAbNd91j0e75HefDB2O5fWQemFaMtfakxMOZgWLJ1A=
Subject key identifier:   F2:91:D3:BD:17:AD:39:45:77:6C:6D:B3:68:C3:6A:6F:6F:BD:16:5D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D3DFFCF5213BB1FF8069DEE00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00e32bd9-37bf-3455-a145-cb1c6c089745.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        142.250.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:cf:52:13:bb:1f:f8:06:9d:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2a3c1274-3e51-4e6a-84b8-eae9eac7dfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:46:43:11:29:b2:91:de:84:df:27:31:ac:
                    18:c2:96:c1:9b:b3:e4:a3:3b:28:56:19:b6:ee:b5:
                    c5:a9:cf:86:dc:d9:9b:40:5f:49:a6:a3:56:aa:55:
                    3f:3e:13:5b:1c:3b:00:ec:5f:db:df:60:ef:6f:7e:
                    24:96:da:af:1f:e0:b4:62:3b:2f:00:88:f9:60:4e:
                    26:8b:3c:be:03:37:0d:c4:eb:79:bc:0f:76:7f:a1:
                    e6:71:da:e2:c0:88:51:c9:32:b8:06:0c:2c:03:d0:
                    34:ef:8b:eb:c3:88:c3:57:2e:44:4b:29:0d:3b:b1:
                    21:23:93:ea:62:9d:77:4c:9a:38:d9:9e:79:97:d1:
                    31:26:c3:5b:f1:5f:a0:72:ed:2d:3a:b4:9a:13:bc:
                    5c:09:6f:23:48:c5:a3:8f:e0:3f:fc:7f:e1:6d:38:
                    39:7c:ab:ba:e0:e4:f3:39:59:fa:17:59:7e:e7:44:
                    b4:db:1f:78:21:43:e3:79:fb:bb:ce:08:65:da:ac:
                    54:76:10:73:6e:73:ac:7f:5f:88:2f:c6:a9:d2:36:
                    70:71:ed:3d:d7:13:05:4e:b4:67:f5:c1:cf:64:dc:
                    98:b6:8b:04:0b:ec:52:79:3b:ce:52:f3:a5:77:e1:
                    59:a6:f4:cd:91:50:ca:19:1a:8f:ce:82:1e:97:92:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:D3:BD:17:AD:39:45:77:6C:6D:B3:68:C3:6A:6F:6F:BD:16:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00e32bd9-37bf-3455-a145-cb1c6c089745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:5d:ad:57:d8:06:80:e2:18:db:37:25:de:9b:99:db:22:
         02:21:54:4c:07:b9:dc:af:45:89:3e:52:40:fa:6c:2d:41:4a:
         90:65:aa:c1:76:63:b6:6e:46:7b:fc:49:19:bf:b7:e9:39:f8:
         5d:b7:ef:1d:31:0d:86:d2:97:50:4f:86:ae:ee:3e:f3:a7:8f:
         7a:a6:5c:0c:97:18:58:6b:d8:e7:65:e6:50:82:af:04:f6:ee:
         7a:50:37:d8:1d:01:24:8c:b9:b8:62:c8:77:8e:14:70:f0:e3:
         8d:57:60:6c:8c:22:69:dc:99:92:54:42:e3:a9:5e:63:ef:aa:
         bd:4d:cb:01:a2:8c:a6:e3:11:cb:d8:ac:ec:8e:3d:8a:76:e4:
         56:e2:33:09:cc:ed:b9:82:ab:50:19:5c:2c:d8:26:c1:55:87:
         5f:d4:a1:76:33:29:37:31:42:23:ce:3d:d9:99:ee:3d:af:61:
         dc:55:b6:20:09:c0:29:24:36:a7:e9:d4:a1:89:13:45:04:30:
         c5:f3:6c:f6:26:24:fd:2c:bd:76:da:e9:ab:b7:eb:41:60:d5:
         9c:69:22:c9:09:f8:fe:72:3a:b4:3f:ad:49:ae:c8:21:ec:6c:
         ca:c2:24:ac:46:21:e1:7f:1c:bf:83:b6:ad:f9:15:7f:c0:5f:
         a8:6b:7d:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/89SE7sf+Aad7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MmEzYzEyNzQtM2U1MS00ZTZhLTg0YjgtZWFlOWVhYzdkZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I1GQxEpspHehN8nMawYwpbBm7PkozsoVhm2
7rXFqc+G3NmbQF9JpqNWqlU/PhNbHDsA7F/b32Dvb34kltqvH+C0YjsvAIj5YE4m
izy+AzcNxOt5vA92f6HmcdriwIhRyTK4BgwsA9A074vrw4jDVy5ESykNO7EhI5Pq
Yp13TJo42Z55l9ExJsNb8V+gcu0tOrSaE7xcCW8jSMWjj+A//H/hbTg5fKu64OTz
OVn6F1l+50S02x94IUPjefu7zghl2qxUdhBzbnOsf1+IL8ap0jZwce091xMFTrRn
9cHPZNyYtosEC+xSeTvOUvOld+FZpvTNkVDKGRqPzoIel5IHsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKR070XrTlFd2xts2jDam9vvRZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBlMzJiZDktMzdiZi0z
NDU1LWExNDUtY2IxYzZjMDg5NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmjXa1X2AaA4hjbNyXem5nbIgIhVEwHudyvRYk+UkD6bC1BSpBlqsF2
Y7ZuRnv8SRm/t+k5+F237x0xDYbSl1BPhq7uPvOnj3qmXAyXGFhr2Odl5lCCrwT2
7npQN9gdASSMubhiyHeOFHDw441XYGyMImncmZJUQuOpXmPvqr1NywGijKbjEcvY
rOyOPYp25FbiMwnM7bmCq1AZXCzYJsFVh1/UoXYzKTcxQiPOPdmZ7j2vYdxVtiAJ
wCkkNqfp1KGJE0UEMMXzbPYmJP0svXba6au360Fg1ZxpIskJ+P5yOrQ/rUmuyCHs
bMrCJKxGIeF/HL+Dtq35FX/AX6hrfSc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:16:51 2026 by rpki-client