Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6930cc62-3b9c-3514-859d-0b5f82778883.roa
File:                     6930cc62-3b9c-3514-859d-0b5f82778883.roa (raw, json)
Hash identifier:          jT7jOyO1bTAn1/49nrea+ejdWyDQhKlaqOYWFbuiaz4=
Subject key identifier:   79:EE:42:A3:4A:49:52:07:45:FA:D2:2C:A1:ED:EF:3D:33:42:0A:D4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F498519DB6FFBA466D62FC9C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6930cc62-3b9c-3514-859d-0b5f82778883.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.250.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:19:db:6f:fb:a4:66:d6:2f:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5bd25ffb-c972-4fbb-9726-2122d14ece85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:c3:8a:4b:6a:82:52:23:0d:0c:9a:98:02:
                    18:6a:6c:cd:e7:27:8c:5a:5c:36:3b:71:48:c3:59:
                    bf:d3:f9:bb:c9:86:8c:aa:a5:b1:92:16:9a:fa:be:
                    db:e0:95:a2:5e:19:b9:20:2f:b1:1c:2e:bb:92:85:
                    12:a9:15:c4:da:c4:24:33:22:46:53:0b:3f:42:88:
                    e1:da:11:01:09:26:22:0b:c4:22:6b:47:8a:1a:64:
                    fd:1a:50:03:3a:48:48:64:af:37:40:1f:6f:82:50:
                    17:8a:44:a2:e7:ee:d7:dd:4c:bc:91:00:6f:44:97:
                    1a:b2:63:71:c7:b0:7b:db:ba:84:a1:c4:8b:63:d9:
                    06:85:2e:d7:18:df:a5:ba:04:89:71:70:54:63:d8:
                    21:67:23:32:9b:64:67:4c:e3:dc:b5:14:92:64:cf:
                    f6:c2:5b:9e:29:27:95:64:ab:9e:14:4f:1a:5d:52:
                    0b:52:76:96:fe:c4:b1:70:f6:eb:d4:d4:5d:ae:d6:
                    26:d2:e6:82:51:f7:52:5c:74:dc:11:d9:a7:49:47:
                    d9:85:eb:c5:73:02:e2:e2:8d:aa:9c:3f:00:80:6a:
                    b4:5c:57:d7:b4:bd:0f:7c:e1:05:9c:11:d9:31:d2:
                    a3:b7:92:1e:69:eb:8d:d4:a5:92:c8:38:e5:f4:ca:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EE:42:A3:4A:49:52:07:45:FA:D2:2C:A1:ED:EF:3D:33:42:0A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6930cc62-3b9c-3514-859d-0b5f82778883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:26:d0:e5:32:85:3e:59:43:ed:cd:7a:45:ed:b2:67:c3:74:
         b0:5e:67:85:ae:50:e5:9b:74:43:a6:ab:5a:c5:3e:11:bc:f0:
         22:f2:fc:11:98:44:7f:f6:9b:d4:02:96:e9:5b:40:38:22:64:
         fe:c9:17:5e:2d:23:f7:c1:b5:0b:d5:f0:3b:a9:d0:20:7a:5c:
         98:87:14:6d:b9:a4:f7:2c:b0:ff:04:c0:b4:75:d4:ba:7a:18:
         ac:78:f5:b0:07:c8:f9:e2:f7:6e:1d:c9:fb:23:e9:ef:21:a5:
         9a:84:83:4a:5c:ae:5f:3c:09:aa:c3:f3:cb:19:e9:30:a1:ea:
         b8:92:b4:c2:cf:90:61:77:e5:84:2c:84:b5:ba:be:82:57:e7:
         bb:70:13:18:46:d8:10:e6:16:a5:a2:07:cf:29:a9:b7:86:d7:
         50:71:05:bc:2b:80:d6:fe:50:c6:7b:ef:d1:6a:6d:25:fc:c3:
         53:84:3d:a6:af:60:8b:83:86:e9:4b:b2:b8:aa:73:92:d5:7f:
         9f:a1:20:3e:0a:45:d1:fa:57:9d:22:7c:79:ed:de:c9:63:03:
         5a:6e:13:1b:c9:ca:5c:8d:78:0e:dc:38:77:9e:4b:3b:09:e8:
         24:3d:b9:65:64:4a:7b:ef:2e:93:52:5b:02:9b:99:b1:2e:60:
         95:b1:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:14:32 2026 by rpki-client