Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c573d9d-ef28-38a1-b77f-be2e70c89edc.roa
File:                     1c573d9d-ef28-38a1-b77f-be2e70c89edc.roa (raw, json)
Hash identifier:          YHWwXF3gxqyi1wNFIw3yEuV5IKuZZ3EXPRgMbzgnKk4=
Subject key identifier:   E1:0F:5A:17:C6:D4:BE:7D:94:DB:F1:47:85:3F:3C:C0:75:8A:0D:A7
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D3E00076E23CD2B0D60E38180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c573d9d-ef28-38a1-b77f-be2e70c89edc.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        142.250.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:07:6e:23:cd:2b:0d:60:e3:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=26915ce0-e3fa-4c54-bd44-a6203b9fa97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:23:7f:d4:26:f1:10:bc:18:e1:1d:89:70:
                    82:af:54:da:22:76:64:84:f7:44:23:db:12:0d:d8:
                    3c:41:21:09:fe:b9:c2:d1:3b:56:84:bc:47:03:e3:
                    ea:43:2f:4d:6c:28:df:a8:3b:97:51:a9:f2:53:66:
                    a6:5c:5e:21:fc:ab:7a:90:c3:5d:aa:fe:6e:cf:da:
                    3a:26:ba:80:d7:18:b3:da:77:d4:f1:73:49:a2:9f:
                    dd:3c:aa:e3:71:5f:61:a0:62:9b:fc:56:a6:5f:9d:
                    f5:94:b3:35:57:28:12:7d:c6:82:3b:15:da:3a:b2:
                    62:14:0e:b2:d8:a9:9f:01:9d:f8:d6:e5:43:09:35:
                    0c:cd:49:b2:0d:d4:4b:d5:3e:df:4c:60:04:45:fe:
                    2e:ce:96:9a:a5:96:c1:4b:55:89:5f:e4:09:2f:c1:
                    aa:67:21:2d:6a:33:92:ff:41:e2:8d:5e:3d:af:13:
                    21:71:19:f7:08:49:ce:66:fd:80:6b:13:83:30:d3:
                    28:78:84:41:b1:4d:99:4a:9d:2b:e1:7f:c8:88:f1:
                    f6:9e:98:c3:4d:7b:c0:37:1a:dd:1d:ab:a1:bb:e5:
                    d3:88:39:89:e6:f2:60:1f:a3:f7:e9:3d:7e:3e:7b:
                    41:76:33:58:01:3e:99:c5:49:f3:2b:a6:31:6d:15:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:5A:17:C6:D4:BE:7D:94:DB:F1:47:85:3F:3C:C0:75:8A:0D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c573d9d-ef28-38a1-b77f-be2e70c89edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:de:a7:d6:8a:ff:04:fa:c7:15:45:9d:b0:af:41:02:43:4b:
         df:23:14:ee:9e:58:90:52:84:d9:dc:58:93:c5:58:c3:d2:a8:
         98:7d:d9:d3:ea:73:ba:55:2b:3e:3e:dd:87:79:45:2c:3b:df:
         10:56:62:e3:a4:1d:f6:3c:b2:0c:20:eb:01:30:21:ba:bc:ef:
         f5:4c:1c:34:53:5b:13:02:b7:ab:74:4f:de:cf:4c:dd:38:2c:
         95:6b:37:b0:fe:fa:24:3f:79:a8:b6:21:4f:48:16:00:d2:b4:
         8b:a3:76:c0:c7:9c:d8:a6:36:f2:70:e5:4a:ad:6f:6f:8c:a3:
         13:f6:be:07:02:44:4f:47:c1:46:c9:cd:15:7b:81:d1:85:75:
         f1:0b:47:78:ca:65:14:ae:7e:16:64:40:07:8e:cc:f0:7f:4d:
         98:89:78:f7:9b:77:80:f6:18:47:64:73:62:ad:4d:73:91:7f:
         59:bb:51:5c:94:be:ef:94:9a:1b:cc:12:8d:24:db:9a:7c:dd:
         92:f9:d9:21:a9:b8:94:19:c3:ce:c6:42:39:bd:65:19:af:60:
         a6:2b:ef:78:c6:2f:55:19:1b:18:42:de:dd:f7:39:14:8a:32:
         ee:49:23:77:33:35:53:3d:60:ab:a0:56:c0:20:0f:47:22:3c:
         22:95:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:45 2026 by rpki-client