Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa
File:                     299e5713-f430-322a-b11e-17331df2c539.roa (raw, json)
Hash identifier:          Q8Cua8CKFoEime+zynx5Srpk98I3exFGNnmBKXfBj5Y=
Subject key identifier:   61:7C:2D:6C:3E:E8:BB:A7:E4:F1:ED:97:F4:CE:95:03:59:EC:5E:1A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE13E77469490F15F52F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        142.251.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:13:e7:74:69:49:0f:15:f5:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=54a37395-dbe2-4b92-9cc7-b5b02c4a69ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:c1:df:b2:19:f6:e7:32:2e:97:f0:6e:2b:
                    20:1e:7b:ed:da:14:11:d6:36:db:db:91:a7:24:88:
                    fc:28:52:1c:f4:fa:13:5c:5f:5b:2a:a1:9a:26:f9:
                    bc:4e:db:d8:a0:40:b8:b2:1f:7c:e4:5c:b4:62:0b:
                    06:f5:ac:c8:f1:da:b5:da:e9:34:62:3b:10:8a:cc:
                    f6:19:26:c6:f7:d6:8d:ab:2e:ee:f1:b2:8e:02:4c:
                    e2:75:8c:c4:3d:28:ae:a1:a4:be:13:7f:5a:f9:2b:
                    ff:97:d3:ba:e4:57:c0:fd:22:d4:54:e1:27:9d:63:
                    a7:57:da:7d:d8:82:4e:8b:73:d2:b2:83:cc:31:75:
                    6d:b3:97:2a:d4:6a:58:41:f0:cf:e3:d6:37:dc:77:
                    31:57:dd:31:85:68:8f:88:bb:df:52:23:12:3a:84:
                    ee:87:d2:5c:00:f2:d6:c9:4a:26:5c:f9:ac:6e:10:
                    43:3f:15:95:5b:77:b5:57:ca:86:f3:a9:c9:f5:02:
                    e9:53:84:86:9b:e8:92:d6:01:37:3c:4e:1a:da:04:
                    b3:12:28:e3:e3:dd:5b:e6:c9:85:a0:37:c4:ac:0d:
                    14:bf:b4:1d:2b:3c:3f:19:0d:c7:82:42:4d:29:06:
                    e0:e7:16:97:f3:d1:95:d1:2f:b8:66:48:45:41:23:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:2D:6C:3E:E8:BB:A7:E4:F1:ED:97:F4:CE:95:03:59:EC:5E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:eb:0c:75:b8:43:75:bf:93:89:fb:45:7f:ac:a8:49:a0:
         39:53:87:bd:37:49:2d:9b:04:55:f2:c8:7b:f7:64:54:eb:c7:
         ca:ee:5f:66:de:88:55:fb:59:7e:c9:62:07:3b:d8:06:e4:29:
         15:0d:7a:2f:55:2d:5d:a0:5b:1b:4c:cf:af:f2:fd:63:9b:89:
         69:c1:dc:36:f0:cf:75:5c:46:eb:e6:db:24:91:0e:cd:b2:d7:
         52:76:c6:d0:89:06:ef:f0:81:10:d5:86:ee:09:bc:22:c8:d4:
         c9:a5:47:48:4d:45:f6:8d:14:64:45:85:c0:23:ef:07:b9:fc:
         b9:c6:3f:13:32:ed:e8:7c:8f:30:b8:21:ca:dd:d1:5f:dd:4f:
         18:c6:f3:83:27:1d:13:ed:5a:c8:f7:10:4b:b6:bd:b8:d4:65:
         30:78:66:c5:d5:09:c7:bd:df:39:a0:4a:92:02:c2:d1:bf:bb:
         06:b4:cb:79:45:a5:62:42:35:d7:5e:50:ed:52:87:81:80:ec:
         21:a9:41:1c:74:80:87:29:e3:35:70:5d:4b:55:46:83:9b:8f:
         4e:73:8b:a3:75:70:f3:dd:91:81:7a:dd:8f:96:ee:0f:a1:58:
         f9:aa:9d:a0:e0:31:f2:ab:ab:62:45:0f:fb:bc:db:f6:63:26:
         cd:3e:14:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhPndGlJDxX1L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NTRhMzczOTUtZGJlMi00YjkyLTljYzctYjViMDJjNGE2OWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttnB37IZ9ucyLpfwbisgHnvt2hQR1jbb25Gn
JIj8KFIc9PoTXF9bKqGaJvm8TtvYoEC4sh985Fy0YgsG9azI8dq12uk0YjsQisz2
GSbG99aNqy7u8bKOAkzidYzEPSiuoaS+E39a+Sv/l9O65FfA/SLUVOEnnWOnV9p9
2IJOi3PSsoPMMXVts5cq1GpYQfDP49Y33HcxV90xhWiPiLvfUiMSOoTuh9JcAPLW
yUomXPmsbhBDPxWVW3e1V8qG86nJ9QLpU4SGm+iS1gE3PE4a2gSzEijj491b5smF
oDfErA0Uv7QdKzw/GQ3HgkJNKQbg5xaX89GV0S+4ZkhFQSPz0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGF8LWw+6Lun5PHtl/TOlQNZ7F4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjk5ZTU3MTMtZjQzMC0z
MjJhLWIxMWUtMTczMzFkZjJjNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAN6wx1uEN1v5OJ+0V/rKhJoDlTh703SS2bBFXyyHv3ZFTrx8ruX2be
iFX7WX7JYgc72AbkKRUNei9VLV2gWxtMz6/y/WObiWnB3Dbwz3VcRuvm2ySRDs2y
11J2xtCJBu/wgRDVhu4JvCLI1MmlR0hNRfaNFGRFhcAj7we5/LnGPxMy7eh8jzC4
Icrd0V/dTxjG84MnHRPtWsj3EEu2vbjUZTB4ZsXVCce93zmgSpICwtG/uwa0y3lF
pWJCNddeUO1Sh4GA7CGpQRx0gIcp4zVwXUtVRoObj05zi6N1cPPdkYF63Y+W7g+h
WPmqnaDgMfKrq2JFD/u82/ZjJs0+FNM=
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:46:01 2025 by rpki-client