Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa
File:                     b71ba4ca-d2d8-3416-a045-386b341764bf.roa (raw, json)
Hash identifier:          LZNa1GWHHWMkGPZ1jIRgOzMS7i9TB7OYBAYEeE8erRU=
Subject key identifier:   A6:80:3A:EC:56:BA:44:5E:C7:FC:34:23:4D:20:A5:16:F6:30:39:65
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F49852A4E7B725D6DE92F4EC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        142.251.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:2a:4e:7b:72:5d:6d:e9:2f:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b515ab02-bdef-4e80-9cea-24b43917c55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:e1:39:a6:48:77:52:50:8a:f2:47:6f:31:
                    94:aa:96:99:d0:1c:69:d1:2a:1e:cd:8c:fe:4f:61:
                    01:a3:c0:fb:1a:54:5d:d6:8f:38:5c:da:de:b9:e7:
                    af:2b:bc:91:40:89:b9:80:8c:41:82:79:c0:6e:33:
                    65:cc:c6:5e:b7:f1:ff:39:7e:f7:b2:29:ee:e7:00:
                    fe:c7:86:cf:96:95:9a:55:61:8b:81:32:c7:c5:c7:
                    43:4e:b9:fd:77:31:0b:73:32:3a:65:33:a4:64:de:
                    84:7a:c7:7d:d1:77:d4:dd:7e:46:40:56:31:ed:db:
                    10:22:b1:70:9c:9b:77:c9:92:b7:9f:6c:bc:53:67:
                    96:ef:f4:83:3c:b9:be:17:9f:26:84:6e:ab:c3:d0:
                    07:54:a4:b0:21:82:48:f6:d3:c8:ab:82:11:43:22:
                    a6:e1:10:82:7e:a6:3d:d7:e8:8f:b8:1a:e0:dc:46:
                    3a:4b:4c:9e:7c:14:52:82:06:9d:48:30:22:3a:53:
                    d1:c5:31:c1:4f:21:71:b2:5a:19:86:c1:3e:32:06:
                    36:78:09:84:b9:47:f6:ec:47:c0:16:cc:aa:bd:32:
                    d6:23:a6:74:3c:3e:94:d4:d5:02:c6:97:fe:8e:07:
                    fa:f9:fe:30:87:d1:fd:22:2e:45:c9:1b:1c:96:3c:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:80:3A:EC:56:BA:44:5E:C7:FC:34:23:4D:20:A5:16:F6:30:39:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:5b:eb:e7:1d:d4:39:7c:da:80:f7:c8:8f:9c:c6:98:ff:
         0d:d3:c7:2a:68:66:14:c4:ab:45:8f:33:68:96:af:e0:f7:98:
         69:7a:14:24:6b:d7:60:96:6e:2e:eb:ac:12:c9:34:47:ec:c7:
         8e:c0:c8:7c:a9:c4:09:b3:eb:b8:42:3f:fc:eb:b9:76:06:4e:
         29:bd:9a:b4:ee:ad:0d:2d:2e:fe:67:b2:80:0c:c7:ff:8d:5b:
         99:e0:53:c5:6d:35:11:e4:99:13:f9:c1:8a:62:01:a0:96:d2:
         03:67:7c:c0:61:d8:9e:f4:b3:8f:94:90:6c:d4:68:0d:ef:a8:
         12:b9:e4:c6:e7:37:0e:99:47:38:0c:21:1c:13:d0:24:b7:01:
         0a:c2:90:e4:f6:ff:7f:2a:85:1c:8c:b1:d4:1b:15:8e:8d:14:
         f8:e7:06:91:1f:97:4c:e8:3f:3d:20:2f:47:65:34:d0:cd:ca:
         9a:04:b8:ec:de:a8:a2:b3:f4:40:68:36:19:1e:9a:e6:ca:f0:
         28:be:03:75:02:b4:6a:39:ee:b7:bc:82:eb:a7:3a:1a:cf:dc:
         66:e3:fa:d2:bb:1f:c1:83:32:33:54:1b:77:57:7b:b1:ec:fd:
         b5:15:d2:e2:a4:aa:94:dc:36:51:e1:6c:94:26:95:9b:cf:db:
         c6:69:60:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSpOe3JdbekvTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjUxNWFiMDItYmRlZi00ZTgwLTljZWEtMjRiNDM5MTdjNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWPhOaZId1JQivJHbzGUqpaZ0Bxp0SoezYz+
T2EBo8D7GlRd1o84XNreueevK7yRQIm5gIxBgnnAbjNlzMZet/H/OX73sinu5wD+
x4bPlpWaVWGLgTLHxcdDTrn9dzELczI6ZTOkZN6Eesd90XfU3X5GQFYx7dsQIrFw
nJt3yZK3n2y8U2eW7/SDPLm+F58mhG6rw9AHVKSwIYJI9tPIq4IRQyKm4RCCfqY9
1+iPuBrg3EY6S0yefBRSggadSDAiOlPRxTHBTyFxsloZhsE+MgY2eAmEuUf27EfA
FsyqvTLWI6Z0PD6U1NUCxpf+jgf6+f4wh9H9Ii5FyRscljzrMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaAOuxWukRex/w0I00gpRb2MDllMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjcxYmE0Y2EtZDJkOC0z
NDE2LWEwNDUtMzg2YjM0MTc2NGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD18W+vnHdQ5fNqA98iPnMaY/w3TxypoZhTEq0WPM2iWr+D3mGl6FCRr
12CWbi7rrBLJNEfsx47AyHypxAmz67hCP/zruXYGTim9mrTurQ0tLv5nsoAMx/+N
W5ngU8VtNRHkmRP5wYpiAaCW0gNnfMBh2J70s4+UkGzUaA3vqBK55MbnNw6ZRzgM
IRwT0CS3AQrCkOT2/38qhRyMsdQbFY6NFPjnBpEfl0zoPz0gL0dlNNDNypoEuOze
qKKz9EBoNhkemubK8Ci+A3UCtGo57re8guunOhrP3Gbj+tK7H8GDMjNUG3dXe7Hs
/bUV0uKkqpTcNlHhbJQmlZvP28ZpYGo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:09:15 2026 by rpki-client