Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
File:                     ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa (raw, json)
Hash identifier:          BH+sB9WAYIHCE/42ynBo+ZFq46NLWX34TDhqTn4TL68=
Subject key identifier:   1D:5B:45:54:03:DA:6A:9D:9B:C1:D5:33:D8:C6:91:5D:5B:1A:77:7B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D3E00035047BBF2284C20CE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        142.250.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:03:50:47:bb:f2:28:4c:20:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=3e494134-614b-4d25-8329-5337b9ba7eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:0f:99:04:53:be:53:09:0d:78:19:84:ef:
                    ea:ec:d4:0d:a4:64:7a:37:d0:f9:7f:13:85:d7:71:
                    c7:7d:37:c9:13:fe:3b:d6:57:22:75:30:39:31:89:
                    d1:aa:ca:50:fe:c9:d0:2a:22:30:ff:10:a5:2d:1a:
                    c4:2c:64:2c:56:02:2f:84:b4:11:77:d8:34:36:29:
                    dd:21:9b:b1:94:72:47:71:58:44:cf:d6:b2:e8:36:
                    bb:41:4a:f5:73:ec:36:4e:a4:47:7a:c3:41:ea:fd:
                    cd:4f:ee:60:0c:4b:9a:b2:65:16:25:34:d3:5c:56:
                    23:29:c0:d5:3a:9f:21:cb:dc:ab:c0:78:59:3c:23:
                    92:ee:84:cc:f2:56:d5:40:f0:a2:aa:51:90:66:9f:
                    09:03:5c:a0:2d:cf:55:47:bb:bb:e4:f3:2f:bc:25:
                    d8:e9:4c:89:7a:28:97:6a:88:13:80:15:45:d2:85:
                    9a:ce:b5:85:3a:50:db:4e:d7:d2:2c:1c:aa:b6:9e:
                    2f:92:4c:80:7e:b1:c6:10:e7:1a:cd:bc:f5:54:92:
                    d0:37:5f:e1:6d:26:64:a3:8d:17:ca:c2:c1:5a:28:
                    76:3d:27:fc:7e:91:78:9b:e6:5a:06:7d:7f:78:9e:
                    cc:d0:b5:e8:62:38:96:76:5e:8b:0b:14:19:40:21:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5B:45:54:03:DA:6A:9D:9B:C1:D5:33:D8:C6:91:5D:5B:1A:77:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d7:66:bb:b6:ff:e5:9f:cf:6a:a9:8d:7b:65:9a:1d:6f:3d:
         03:33:12:33:f0:da:e2:12:cd:90:5f:7b:0e:b2:b9:4f:27:c4:
         5c:ee:e9:6e:28:43:90:b3:97:75:4b:92:7f:e0:96:f9:79:26:
         34:c3:ec:e6:0a:79:a3:65:a4:6f:e0:97:98:52:d8:9e:e1:23:
         8d:d9:c1:24:94:d5:49:be:d9:b8:77:da:3d:13:91:b5:32:ee:
         d3:a0:63:a8:ce:12:8a:89:9a:6e:a1:10:e0:59:1c:3d:c6:39:
         55:de:98:c0:bc:f0:8d:29:3e:6f:47:25:82:43:d1:5f:d6:1a:
         3a:43:79:3d:6e:bc:57:da:0c:03:fe:32:e9:ca:74:28:28:fa:
         20:95:75:94:8c:ec:ad:c5:8a:61:57:ac:da:d5:39:50:7c:24:
         81:be:f1:6e:ee:62:03:62:f5:ff:a1:66:ae:a0:97:88:99:96:
         f5:3b:d0:2e:f6:c5:8d:5e:42:b4:ae:b3:cd:ac:42:0f:07:ce:
         e3:da:29:99:7a:98:79:1e:d5:de:bb:5b:15:a3:44:22:0a:c9:
         ae:b4:a3:35:36:81:bf:c8:a9:57:c8:81:27:3d:b3:c7:d3:89:
         51:d5:75:37:80:24:30:08:41:16:e9:c6:5b:9b:9c:7b:d2:10:
         23:d1:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:17:03 2026 by rpki-client