Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5feb275c-96c2-372b-945e-0a682530196b.roa
File:                     5feb275c-96c2-372b-945e-0a682530196b.roa (raw, json)
Hash identifier:          3nEU5JeE/OmyzUq3NKiKmYRQ1cZpH0w7xgSY8U7nYVw=
Subject key identifier:   DD:02:DF:D2:D1:F8:C4:F9:71:99:2E:42:62:53:29:61:7F:D0:57:33
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F498528E341BAFB28537D6E78
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5feb275c-96c2-372b-945e-0a682530196b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.251.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:28:e3:41:ba:fb:28:53:7d:6e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7a5e1843-98a8-46b2-86bd-b8acdb7ee4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:0d:af:a8:70:0c:f7:e2:7c:59:b1:dd:8e:
                    cd:9b:3d:d4:da:73:51:de:39:d2:1a:49:8c:aa:62:
                    1e:31:35:21:62:7c:76:dd:3a:96:d3:1d:8c:e3:eb:
                    55:5c:4a:a3:b9:e2:9d:44:42:65:cc:7f:7c:71:d8:
                    74:c3:0d:03:04:82:45:e0:24:96:29:b5:6d:5e:af:
                    2e:bf:54:ea:7e:e3:b3:c4:d5:0d:e5:87:37:71:5d:
                    72:bf:fb:ed:d8:be:56:c8:9b:d2:17:02:a5:74:e0:
                    3b:38:fe:77:88:14:9f:e6:7e:4a:dd:59:78:09:b2:
                    10:94:62:31:76:bd:19:c2:cb:ea:94:90:66:bd:8e:
                    40:2f:79:c3:e7:0f:ce:91:d5:c8:87:fa:34:a0:f1:
                    44:0b:d9:30:38:7e:28:91:48:43:12:ae:db:12:99:
                    6d:0c:3d:e2:28:ff:fe:9c:8a:c0:dc:5c:13:ed:7a:
                    55:41:57:ab:b0:67:21:41:f3:e6:c7:69:57:e9:22:
                    65:76:53:92:d7:42:75:01:08:cb:e7:e5:c8:ca:b0:
                    66:75:cd:01:59:3e:cc:89:4d:53:ec:8c:fb:5e:03:
                    cc:76:f0:9a:9a:37:8a:1d:c8:d3:e0:7a:da:0c:18:
                    f1:fd:e7:55:bb:d5:ed:8e:00:05:04:2f:69:fc:34:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:02:DF:D2:D1:F8:C4:F9:71:99:2E:42:62:53:29:61:7F:D0:57:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5feb275c-96c2-372b-945e-0a682530196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:7b:84:f0:05:72:ca:ca:4e:4c:48:a4:b6:a3:43:f7:fb:
         94:7a:2f:b3:69:74:46:84:67:04:17:dc:60:b1:a5:63:16:e6:
         ca:8d:46:50:c3:ec:c1:54:81:24:a6:23:5c:8d:68:cf:c3:6e:
         bc:3a:9f:b7:78:e0:7f:18:68:a5:03:f8:73:e6:69:9f:38:3d:
         40:91:42:83:a4:66:af:94:af:c9:2b:e7:c3:4e:d1:69:01:a5:
         e8:8e:55:a1:03:75:47:6d:70:e0:3a:18:2e:e8:00:ab:9c:2d:
         03:6a:b7:6b:a0:7c:53:fe:a2:91:9a:11:0e:14:5c:fe:7b:c9:
         09:58:be:bd:a3:ea:d2:3c:1d:f5:ba:ff:23:37:41:52:06:d8:
         b4:1f:4f:a1:50:5c:a1:c4:89:d0:e3:6a:1d:d4:d0:70:9e:54:
         d0:63:99:e9:d0:73:5b:b8:f5:df:0d:17:bd:6a:d6:27:7c:99:
         f3:89:03:e5:47:17:6b:75:39:1e:e9:fb:5d:cb:a5:fc:2b:cf:
         f5:86:51:3e:aa:8e:9e:58:4c:82:4a:c1:07:e7:1c:4c:3d:82:
         83:0d:9f:61:ee:53:a0:e0:a8:4b:a5:1e:4d:5a:54:35:09:db:
         5e:df:22:f3:69:d8:ae:08:d9:be:d2:8f:c1:63:e5:b2:0e:97:
         0e:15:dc:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSjjQbr7KFN9bngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2E1ZTE4NDMtOThhOC00NmIyLTg2YmQtYjhhY2RiN2VlNGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfoNr6hwDPfifFmx3Y7Nmz3U2nNR3jnSGkmM
qmIeMTUhYnx23TqW0x2M4+tVXEqjueKdREJlzH98cdh0ww0DBIJF4CSWKbVtXq8u
v1TqfuOzxNUN5Yc3cV1yv/vt2L5WyJvSFwKldOA7OP53iBSf5n5K3Vl4CbIQlGIx
dr0ZwsvqlJBmvY5AL3nD5w/OkdXIh/o0oPFEC9kwOH4okUhDEq7bEpltDD3iKP/+
nIrA3FwT7XpVQVersGchQfPmx2lX6SJldlOS10J1AQjL5+XIyrBmdc0BWT7MiU1T
7Iz7XgPMdvCamjeKHcjT4HraDBjx/edVu9XtjgAFBC9p/DRByQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0C39LR+MT5cZkuQmJTKWF/0FczMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZlYjI3NWMtOTZjMi0z
NzJiLTk0NWUtMGE2ODI1MzAxOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWwe4TwBXLKyk5MSKS2o0P3+5R6L7NpdEaEZwQX3GCxpWMW5sqNRlDD
7MFUgSSmI1yNaM/Dbrw6n7d44H8YaKUD+HPmaZ84PUCRQoOkZq+Ur8kr58NO0WkB
peiOVaEDdUdtcOA6GC7oAKucLQNqt2ugfFP+opGaEQ4UXP57yQlYvr2j6tI8HfW6
/yM3QVIG2LQfT6FQXKHEidDjah3U0HCeVNBjmenQc1u49d8NF71q1id8mfOJA+VH
F2t1OR7p+13Lpfwrz/WGUT6qjp5YTIJKwQfnHEw9goMNn2HuU6DgqEulHk1aVDUJ
217fIvNp2K4I2b7Sj8Fj5bIOlw4V3Is=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:16:50 2026 by rpki-client