Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78707eeb-0516-34f6-bb52-c611e4ab20cc.roa
File:                     78707eeb-0516-34f6-bb52-c611e4ab20cc.roa (raw, json)
Hash identifier:          zCm/ZqrZCpXf2w7ReENrRCTkv4B0Gr5QdJZVYPgvxPo=
Subject key identifier:   2D:7B:EA:72:5D:A1:18:BA:9E:0C:96:EE:AB:6A:82:4B:C0:C8:C2:1D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F629307765BFEBDF1FE8A3AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78707eeb-0516-34f6-bb52-c611e4ab20cc.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     15169
IP address blocks:        142.251.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:07:76:5b:fe:bd:f1:fe:8a:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=586137a9-b331-4cdf-97c6-73c7e8a186b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:3c:2d:96:04:1c:12:17:80:9a:f2:bc:a5:
                    93:59:08:07:47:2c:6b:6d:5a:61:1d:d7:15:22:bf:
                    11:2f:ff:fd:e2:84:a6:9c:f3:f5:1b:c3:f2:b5:29:
                    16:26:ad:16:fe:82:9c:87:2a:c8:fb:02:16:9e:b7:
                    8c:6e:65:b9:3f:85:26:21:eb:03:e0:b0:34:88:53:
                    8e:06:d5:33:9d:0c:9b:38:ee:24:77:7e:3b:44:a5:
                    00:87:b7:62:0e:a9:b5:d5:46:97:1d:92:bb:01:6b:
                    aa:cc:99:30:d5:b0:c5:1f:fb:3d:9d:a3:6f:12:9b:
                    e3:68:ed:89:b6:a1:d2:3b:31:f1:84:27:61:37:bc:
                    b6:60:ef:47:5c:1b:35:fd:34:45:d1:6f:16:ac:00:
                    c6:71:ee:0d:0e:66:0c:d8:ae:29:d8:af:f1:4b:9a:
                    ab:d6:7e:3b:1f:27:cc:a4:b2:7c:0d:bf:97:55:cf:
                    28:29:64:f9:d5:87:73:1f:85:67:9a:a9:25:50:4a:
                    0e:1e:7c:b0:f0:68:f2:02:3c:2a:d8:3d:a4:c9:bd:
                    63:db:b3:9b:de:68:a9:7f:36:43:d6:ad:5f:32:bd:
                    64:4c:e4:75:77:fa:b2:40:8c:35:1b:70:3a:9d:a4:
                    bc:93:4e:7a:0d:56:b0:36:e4:c2:73:87:31:46:64:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7B:EA:72:5D:A1:18:BA:9E:0C:96:EE:AB:6A:82:4B:C0:C8:C2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78707eeb-0516-34f6-bb52-c611e4ab20cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d0:c5:0b:ce:dd:83:81:b6:26:d9:56:1f:ba:ed:6d:74:32:
         98:b3:4b:84:68:6a:84:ef:44:54:a1:4e:72:dc:cb:cb:76:76:
         e0:6f:a3:82:a6:62:a2:ea:29:c8:f2:87:cd:14:ac:dd:45:49:
         bf:63:d7:17:f9:7e:15:71:cf:03:60:5b:c1:53:6e:ed:4d:06:
         cf:38:ac:10:4d:48:92:c6:10:15:a6:9c:c7:2d:62:73:ca:0c:
         46:d8:05:fb:d3:91:9b:ea:69:99:04:aa:a3:be:0d:93:6b:5e:
         74:7b:d0:c5:93:a9:97:b6:71:1f:25:8b:13:f0:f6:77:26:b1:
         84:05:5d:a7:17:a4:ae:00:f3:62:55:dd:f3:27:0f:01:77:77:
         1c:ce:8c:4e:54:4d:00:4d:8a:b2:9d:31:86:b4:ed:c6:d8:55:
         cc:4d:60:5e:1e:c0:75:ed:6d:02:68:3f:98:d9:6c:36:dd:50:
         b7:45:d4:37:72:ce:cc:94:78:39:1a:ac:98:f6:d6:51:61:a0:
         66:d8:44:eb:19:95:0e:16:5b:38:22:94:3e:6d:00:c9:d9:c6:
         e0:c0:33:c2:1c:9a:a2:c4:a6:f7:c0:50:94:69:82:3b:bc:93:
         b9:86:35:18:22:44:f4:55:e6:63:c2:79:ab:5e:6c:86:4e:f2:
         26:43:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:52 2026 by rpki-client